Cybersecurity researchers have identified an escalation in double-extortion methods used by the INC Ransomware group. This syndicate is currently chaining zero-day vulnerabilities within SonicWall Secure Mobile Access (SMA) 1000 Series appliances. These technical breach...
Supply Chain Intrusion: Hackers Trojanize TrueConf Server Installers with PhantomCore Backdoors
Cybersecurity researchers disclosed a major supply chain intrusion on August 8, 2026, confirming that hacktivist group Head Mare compromised unpatched TrueConf video c...
UNC6671 Financial Sector Vishing Campaign: High-Consequence Extortion Attacks Target Hedge Funds and Private Equity Giants
A sophisticated social engineering campaign tracked by Google Threat Intelligence as UNC6671 is actively targeting premier financial institu...
Following reports of active exploitation in the wild, CISA has added CVE-2026-63077, a critical unsafe deserialization vulnerability in JetBrains TeamCity, to its Known Exploited Vulnerabilities (KEV) catalog. The flaw allows unauthenticated remote attackers to execute ...
Cybersecurity researchers at Kaspersky have uncovered an ongoing cyber-espionage campaign executed by the hacktivist group Head Mare, targeting organizations across energy, transportation, defense, and IT sectors. The attackers exploited unpatched vulnerabilities in Tru...
A critical exploitation methodology dubbed XSS2Shell has emerged in active web application attacks, allowing threat actors to convert minor Cross-Site Scripting (XSS) vulnerabilities in WordPress login forms and page-builder plugins into immediate persistent remote code...
Web Application Vulnerability: Advanced CSS Attacks Break Webmail Defenses to Trick AI Browsers & Exfiltrate Tokens
Security research published on August 8, 2026, by Gareth Heyes unveiled a novel class of CSS injection attacks that bypass HTML sanitizers to hijac...
WordPress Pre-Auth XSS2Shell Vulnerability (CVE-2026-64638) Enables Full Remote Code Execution
A critical pre-authentication vulnerability tracked as CVE-2026-64638—dubbed "XSS2Shell"—has emerged as a major threat to the WordPress ecosystem. The flaw allows unaut...
A critical zero-day vulnerability actively exploited in the wild has been identified in Metabase, the open-source business intelligence and analytics platform utilized by thousands of enterprises worldwide. The flaw allows unauthenticated remote threat actors to bypass ...
Zero-Day Exploitation: Unauthenticated Metabase SQL Injection CVSS 10 Flaw
A critical zero-day vulnerability in Metabase (CVSS 10.0) has been actively exploited in the wild, leading to unauthorized database compromises and customer data theft. The flaw impacts Me...
Business intelligence giant Metabase has issued an urgent warning regarding a critical, maximum-severity zero-day vulnerability actively exploited in the wild. The flaw enables unauthenticated remote attackers to bypass authentication boundaries and achieve full adminis...
Threat intelligence researchers at Resecurity have disclosed a major acceleration in extortion activity by the INC Ransomware syndicate, driven by systemic exploitation of two recent vulnerabilities in SonicWall's Secure Mobile Access (SMA) 1000 Series appliances. The f...