Dysphoria IoT Botnet Adopts Blockchain C2 and Victim Relays After JackSkid Takedown
The Dysphoria IoT botnet, tracked by CNCERT and XLab (Qi'anxin), has evolved to use blockchain-based name services and infected-device relays following a…
Tag: network security
Check Point Patches Actively Exploited SmartConsole Authentication Bypass Flaw CVE-2026-16232
Check Point has released security updates to address multiple vulnerabilities in its Security Management and Multi-Domain Management (MDSM) products, including a critical…
Qilin Ransomware Exploits PAN-OS Authentication Bypass CVE-2026-0257 for Initial Access
Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability, CVE-2026-0257 (CVSS score: 7.8), as an entry point…
Russian Intelligence Hijacks IP Cameras Across NATO and Ukraine for Military Espionage
At least one Russian intelligence service is systematically hijacking internet-connected security cameras across Europe and Ukraine to spy on military logistics, according…
Critical NGINX Heap Buffer Overflow CVE-2026-42533 Allows DoS and Potential RCE
F5 has patched a critical heap buffer overflow vulnerability in NGINX, tracked as CVE-2026-42533, which can crash worker processes and may allow…
SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access
A previously undocumented threat actor, tracked as UTA0533 by Volexity, exploited two zero-day vulnerabilities in SonicWall Secure Mobile Access (SMA) 1000 series…
NadMesh Botnet Targets Exposed AI Services for Cloud Credentials and Kubernetes Tokens
A new Go-based botnet named NadMesh has been discovered actively hunting exposed AI services to steal cloud credentials and Kubernetes tokens. First…
SASE Has an AI Blind Spot: Why Packet Inspection Falls Short in Modern Enterprise Security
For years, routing traffic through cloud proxies was sufficient for enterprise security. However, the shift to browser-based work, SaaS applications, and generative…
LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts
Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan (RAT) codenamed LabubaRAT that masquerades as NVIDIA software to blend into…
RabbitMQ Flaws Expose OAuth Secrets and Cross-Tenant Queue Metadata
Cybersecurity researchers at Miggo have disclosed two access control vulnerabilities in the RabbitMQ message broker that could allow attackers to leak OAuth…