Vulnerabilities

RedVDS sold access to disposable virtual Windows servers for as little as $24 a month, allowing criminals to run fraud and phishing operations at scale.  ​ Read More  ​ 

The man is suspected of facilitating cybercrime by allowing malware devs to test whether their software could bypass antivirus protections.  ​ Read More  ​ 

The campaign mainly delivers commodity malware, including info-stealers such as AgentTesla, FormBook, and Lumma Stealer.  ​ Read More  ​ 

ZDI said that CVE-2026-20805 was likely used in targeted attacks as part of a larger exploit chain.  ​ Read More  ​ 

CERT-UA attributed the activity to a state-backed group known as Void Blizzard.  ​ Read More  ​ 

VoidLink is a cloud-focused implant written primarily in Zig with a flexible modular architecture.  ​ Read More  ​ 

Trellix researchers report that stolen Facebook accounts are used to spread scams, harvest personal data, and commit identity fraud.  ​ Read More  ​ 

The campaign appears to be opportunistic, mainly targeting enterprise and small-to-medium business environments.  ​ Read More  ​ 

The suspected criminal activity occurred throughout 2025 and into 2026, although investigators believe the alleged spying may have begun as early as 2022.  ​ Read More  ​ 

Historically, Muddy Water has relied on PowerShell and VBS loaders for initial access and post-compromise operations.  ​ Read More  ​ 

Scammers can now buy solutions that allow them to run sophisticated fraud campaigns without advanced technical skills.  ​ Read More  ​ 

An unknown actor has leaked an archive containing a MyBB users table and BreachForums’ private PGP key used to sign administrator messages.  ​ Read More  ​ 

In brief: Google fixes a high-severity Chrome flaw, a MongoDB flaw exploited in the wild, and more.  ​ Read More  ​ 

At the time of writing, there are no confirmed public reports about attacks exploiting the above-mentioned vulnerabilities.  ​ Read More  ​ 

Popular AI-powered forks of VS Code have been found to recommend extensions that do not exist in the Open VSX registry.  ​ Read More  ​