Category Archives: Threat Alerts
WindRelay Android Malware Relays Live NFC Payment Card Data via Vishing Scam
Discover how the new WindRelay Android malware combines vishing scams with NFC relaying to steal contactless payment card data in real time. Continue reading
Lazarus Group Exploits Windows Zero-Day in Operation Dream Job Campaign
Discover how the Lazarus Group targets defense sectors using social engineering and a Windows zero-day vulnerability in the Operation Dream Job campaign. Continue reading
CVE-2026-68820: Microsoft Patches Actively Exploited Kernel Zero-Day
Microsoft has released urgent security updates addressing CVE-2026-68820, an actively exploited kernel zero-day vulnerability in Windows systems. Continue reading
Gunra Ransomware: US and South Korea Issue Joint Global Advisory
A joint US and South Korea advisory warns global organizations about the escalating Gunra ransomware extortion campaign targeting critical infrastructure. Continue reading
PhantomCore Backdoor Exploits TrueConf Server Vulnerabilities
A targeted cyberattack campaign exploits TrueConf Server flaws to distribute trojanized installers containing the PhantomCore backdoor and PhantomGraph RAT. Continue reading
Metabase Zero-Day Vulnerability Actively Exploited for Admin Access
A critical Metabase zero day vulnerability rated CVSS 10.0 is actively exploited in the wild, allowing unauthenticated attackers to gain full admin access. Continue reading
New CSS Attacks Break Webmail Isolation to Steal Passwords and Hijack AI Assistants
Discover how new CSS attacks exploit vulnerabilities in major webmail platforms like Gmail and Outlook to steal passwords and manipulate AI assistants. Continue reading
UNC6671 Vishing Campaign Targets Major Wall Street Financial Firms
Google Threat Intelligence uncovers a massive UNC6671 vishing campaign targeting Wall Street financial firms using advanced help desk social engineering. Continue reading
CVE-2026-18577: N-able Releases Emergency Hotfix for Active N-central Exploitation
Discover the critical details surrounding CVE-2026-18577, an actively exploited zero-day vulnerability in N-able N-central, and learn how to secure your enterprise with the latest emergency hotfix. Continue reading