Vulnerabilities

In brief: Ivanti, Microsoft and Fortinet fix zero-days, eScan hit with a supply chain attack, and more.  ​ Read More  ​ 

In a separate development, US authorities have seized the dark web and clearnet domains of the RAMP cybercrime forum.  ​ Read More  ​ 

Dragos assessed that Electrum works closely with another threat cluster Kamacite that focuses on initial access.  ​ Read More  ​ 

The flaw (CVE-2026-24858) was actively exploited in the wild by two malicious FortiCloud accounts.  ​ Read More  ​ 

The flaw, tracked as CVE-2025-8088, allows attackers to place malicious files on a victim’s system by tricking users into opening specially crafted RAR archives.  ​ Read More  ​ 

The campaigns, dubbed ‘Gopher Strike’ and ‘Sheet Attack,’ were discovered in September 2025.  ​ Read More  ​ 

Stanley is marketed as an easy-to-use phishing platform that works by hijacking user navigation and overlaying a full-screen iframe with attacker-controlled content.  ​ Read More  ​ 

PeckBirdy is JScript-based, which allows it to run across different environments using legitimate system tools.  ​ Read More  ​ 

The extensions share a common mechanism that hijacks ChatGPT session authentication tokens and sends them to a third-party backend.  ​ Read More  ​ 

The attack begins with a fake CAPTCHA verification that instructs victims to manually paste and run a command using the Windows Run dialog.  ​ Read More  ​ 

Patches are currently available for most supported versions, but updates for Office 2016 and Office 2019 have not yet been released.  ​ Read More  ​ 

CISA has added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog.  ​ Read More  ​ 

The attack chain begins with a Discord-hosted link that delivers a ZIP archive containing a PDF lure and a malicious Windows shortcut (LNK).  ​ Read More  ​ 

The attack uses social engineering lures delivered via business-themed documents.  ​ Read More  ​ 

The attacks targeted two combined heat and power plants, as well as a system used to manage electricity generated from renewable sources.  ​ Read More  ​