Critical Bypass: SimpleHelp RMM Authentication Flaw (CVE-2026-48558) Exploited to Deploy Infostealers
Executive Summary
A critical authentication bypass vulnerability in the SimpleHelp Remote Monitoring and Management (RMM) platform is actively being exploited in wild campaigns. Tr...
Virtualization Escape: 16-Year-Old KVM Hypervisor Flaw 'Januscape' Enables Guest-to-Host Escape
Executive Summary
A critical, 16-year-old security vulnerability in the Linux kernel's KVM (Kernel-based Virtual Machine) hypervisor has been patched. Tracked as CVE-2026-53359 and dubbe...
Academic Espionage: Chinese Threat Group UNK_MassTraction Exploits Roundcube Webmail at Universities
Executive Summary
A suspected China-aligned cyber espionage cluster, tracked as UNK_MassTraction, has been actively exploiting critical security vulnerabilities in the open-source R...
ISP Compromise: Japanese Telecom KDDI Discloses Breach Exposing 14 Million Credentials
Executive Summary
Japanese telecommunications giant KDDI Corporation has officially disclosed a massive data breach that has potentially exposed the email addresses and passwords of more than 14 ...
Supply Chain Risk: Accenture Confirms Data Breach After Stolen Source Code Listed for Sale
Executive Summary
Global professional services and IT consulting giant Accenture has confirmed a cybersecurity breach following dark web advertisements offering over 35 gigabytes (GB) of its ...
AI Agent Hijacking: Mozilla 0DIN Warns of Indirect Prompt Injection in Coding Assistants
Executive Summary
As organizations rapidly integrate artificial intelligence (AI) and Large Language Model (LLM) agents into their daily development workflows, security researchers are warning ...
Education Extortion: Safepay Ransomware Group Hits St. Edward's Catholic First School
Executive Summary
A highly disruptive ransomware attack has targeted the UK education sector, with St. Edward's Catholic First School (stedwardscatholicfirstschool.co.uk) falling victim to the cyb...
Archive Exploit: High-Severity WinRAR Vulnerability CVE-2026-38291 Under Active Attack
Executive Summary
A high-severity security vulnerability in WinRAR, one of the world's most widely used file archiver and utility applications, is currently under active, in-the-wild exploitation...
National Security: DHS Investigates Data Breach Targeting Homeland Security Information Network
Executive Summary
The United States Department of Homeland Security (DHS) is actively investigating a serious data breach affecting the Homeland Security Information Network (HSIN). Disc...
PLM Breach: Critical Deserialization RCE in PTC Windchill (CVE-2026-12569) Exploited to Deploy Web Shells
Executive Summary
Managed networks across the aerospace, automotive, defense, and manufacturing sectors are facing a heightened threat as attackers actively exploit a critical ...
Critical Execution: Max-Severity Adobe ColdFusion Vulnerability Under Active Attack
Executive Summary
A critical, max-severity security vulnerability affecting Adobe ColdFusion has entered a phase of high threat urgency following confirmed reports of active in-the-wild exploitation...
RMM Attack Campaign: SimpleHelp Bypass CVE-2026-48558 Exploited to Drop Djinn Stealer
Executive Summary
Managed Service Providers (MSPs) and IT administrators are facing an immediate threat following active in-the-wild exploitation of a high-severity vulnerability in the SimpleHelp...