Category Archives: Security & Privacy
CVE-2026-68820: Microsoft Patches Actively Exploited Kernel Zero-Day
Microsoft has released urgent security updates addressing CVE-2026-68820, an actively exploited kernel zero-day vulnerability in Windows systems. Continue reading
Gunra Ransomware: US and South Korea Issue Joint Global Advisory
A joint US and South Korea advisory warns global organizations about the escalating Gunra ransomware extortion campaign targeting critical infrastructure. Continue reading
Tor Network Centralization and Routing Defenses Addressed at DEF CON
At DEF CON 34, Tor Project co-founder Roger Dingledine addressed Tor network centralization, outlining modern architectural threats and Rust-based routing defenses. Continue reading
Mandatory MFA Proposed by Thailand Digital Ministry After Massive Data Breach
Thailand’s Digital Ministry has proposed mandatory MFA for all state digital infrastructure following the exposure of 221 million login records. Continue reading
PhantomCore Backdoor Exploits TrueConf Server Vulnerabilities
A targeted cyberattack campaign exploits TrueConf Server flaws to distribute trojanized installers containing the PhantomCore backdoor and PhantomGraph RAT. Continue reading
Meta AI Privacy Audit Reveals Fragmented Controls and Metadata Exposure
An independent audit reveals fragmented Meta AI privacy controls and unexpected metadata exposure across chat interfaces and API endpoints. Continue reading
Metabase Zero-Day Vulnerability Actively Exploited for Admin Access
A critical Metabase zero day vulnerability rated CVSS 10.0 is actively exploited in the wild, allowing unauthenticated attackers to gain full admin access. Continue reading
New CSS Attacks Break Webmail Isolation to Steal Passwords and Hijack AI Assistants
Discover how new CSS attacks exploit vulnerabilities in major webmail platforms like Gmail and Outlook to steal passwords and manipulate AI assistants. Continue reading
UNC6671 Vishing Campaign Targets Major Wall Street Financial Firms
Google Threat Intelligence uncovers a massive UNC6671 vishing campaign targeting Wall Street financial firms using advanced help desk social engineering. Continue reading