UTA0576 exploits CVE-2026-104935 and chained Ivanti Connect Secure flaws to gain root access using in-memory payloads and log ...

Japanese web systems face rising data leaks as attackers exploit API flaws, weak authentication, and software vulnerabilities ...

Fake event invitations lead victims through RSVP and CAPTCHA pages to install a RAT, enabling attackers to remotely control ...

GitLab has released urgent security updates addressing CVE-2026-110264, a maximum-severity vulnerability that could allow an unauthenticated attacker to execute arbitrary code on vulnerable ...

Throughout March 2025, defenders observed increasing cyber-espionage activity by the UAC-0219 hacking group targeting Ukrainian critical sectors WRECKSTEEL malware. In April, CERT-UA issued a novel ...

Just as organizations were working to patch the Microsoft Office zero-day (CVE-2026-21509), the cybersecurity world is confronted with another serious threat. OpenSSL disclosed a high-severity stack ...

Microsoft has patched CVE-2026-96951, a high-severity Windows Shell security feature bypass vulnerability that is already being exploited in real-world attacks. The flaw carries a CVSS score of 8.8 ...

CVE-2026-48095 in 7-Zip has raised fresh concerns around malicious archive handling and user-driven exploitation. According to GitHub Security Lab, the flaw is a heap buffer write overflow in 7-Zip’s ...

Microsoft has released out-of-band updates for CVE-2026-40372, a high-impact ASP.NET Core privilege-escalation vulnerability tied to the platform’s Data Protection cryptographic APIs. Public reporting ...

Every SOC analyst knows the feeling. A new threat report lands in your queue, dozens of pages long, packed with techniques, tools, and timelines. Somewhere inside is the information your team needs to ...

# Simulation script for Midnight Blizzard svchost32.exe detection $targetDir = "$env:LOCALAPPDATAMicrosoftsvchost32" $executableName = "svchost32.exe" $executablePath ...