Financial Cloud Threat Alert: Slim Spider Steals Crypto Custody Secrets from Brazilian Financial Institution
Threat intelligence analysts at CrowdStrike have revealed details of a sophisticated, targeted intrusion campaign conducted by a previously undocumented c...
Mobile and consumer enterprise security teams are on high alert following revelations disclosed by cybersecurity research firm Calif and reported by The Hacker News regarding an unprecedented zero-click worm actively propagating across WeChat. Operating across both Appl...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive adding two actively exploited Microsoft zero-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog. The flaws—CVE-2026-85880 (an Elevation of Privilege bug in t...
Critical E-Commerce Alert: Adobe Patches Magento Zero-Day (CVE-2026-75650) Exploited to Deploy Rust Backdoor and Web Shells
Adobe has officially released emergency out-of-band security updates for Adobe Commerce and Magento Open Source to address an actively expl...
Agentic AI Security Alert: "GitSpawn" Vulnerability Class Hijacks AI Coding Assistants via Untrusted Repositories
Security researchers from Manifold Security, the Cloud Security Alliance (CSA), and Check Point Research have disclosed a systemic new vulnerability ...
Emerging Agentic Threat: AI-Engineered 'WeWorm' Exploits Zero-Click WeChat Calls to Hijack Accounts and Self-Propagate
Cybersecurity researchers have published detailed technical findings on WeWorm, a groundbreaking and dangerous self-propagating computer worm de...
CI/CD Supply Chain Compromise: Critical JFrog Artifactory Auth Bypass Exploited in the Wild (CVE-2026-82329)
DevSecOps teams and software supply-chain defenders are responding to active, in-the-wild exploitation of a maximum-severity authentication bypass vulnera...
E-commerce merchants and digital storefront operators face an urgent security threat as Adobe has released an emergency out-of-band security update addressing a critical zero-day vulnerability in Adobe Commerce and Magento Open Source. Tracked as CVE-2026-75650 and assi...
A massive and sophisticated email phishing campaign detected in September 2026 has successfully delivered millions of deceptive messages by weaponizing zero-width, invisible Unicode characters and font-manipulation techniques. Tracked across major corporate environments...
FalconFlank Zero-Day: Privilege Escalation Flaw in CrowdStrike Falcon Sensor Grants SYSTEM Privileges
Published: September 7, 2026
Author: DigitalSpying Threat Research Team
Category: Endpoint Security / Zero-Day Vulnerabilities / EDR Analysis
Security researchers have uncovered an ongoing, large-scale exploitation campaign actively targeting MikroTik RouterOS devices exposed directly to the public internet via administrative Secure Shell (SSH) ports. Operating since at least September 2, 2026, the threat act...
Kernel Attack Surface Warning: Nightmare Eclipse Drops Zero-Day Exploits for CrowdStrike, Nvidia, and Avast Drivers
In a significant escalation targeting endpoint security architectures, pseudonymous vulnerability researcher and exploit developer Nightmare Eclips...