Category Archives: Threat Alerts
AI Voice Cloning: Post-Tax Refund Extortion and Digital Fraud Trends
The SENTINEL-FRAUD assessment highlights a significant rise in AI voice cloning used for post-tax refund extortion and sophisticated social engineering attacks. Continue reading
Cisco SD-WAN Vulnerabilities Under Active Exploitation: CISA Issues Warning
CISA has added several Cisco SD-WAN vulnerabilities to its Known Exploited Vulnerabilities catalog following reports of attackers using a three-flaw chain to gain full administrative control of corporate networks. Continue reading
SGLang RCE Vulnerability (CVE-2026-5760) Exploits AI Pipelines
Security researchers have identified a critical SGLang RCE vulnerability (CVE-2026-5760) that allows remote code execution through malicious GGUF model files. Continue reading
Void Dokkaebi Supply Chain Worm Targets Developers via Fake Interviews
Security researchers have uncovered a Void Dokkaebi supply chain worm that spreads through malicious VS Code tasks and fraudulent job recruitment interviews targeting software developers. Continue reading
Pig Butchering Scams: AI-Augmented Digital Extortion Surges in 2026
A recent House hearing reveals how pig butchering scams are being hyper-personalized through generative AI, leading to billions in losses via automated social engineering and crypto fraud. Continue reading
Device Code Phishing: AI-Augmented Attacks Target Microsoft 365
A sophisticated device code phishing campaign is leveraging generative AI to exploit Microsoft 365 OAuth 2.0 flows and bypass multi-factor authentication. Continue reading
Axios Supply Chain Compromise: CISA Issues Emergency Alert
CISA has issued an emergency alert regarding the Axios supply chain compromise, where malicious code in the popular NPM package delivers a Remote Access Trojan to developer environments and CI/CD pipelines. Continue reading
Microsoft Defender Zero-Day: BlueHammer (CVE-2026-33825) Under Active Exploitation
A critical Microsoft Defender Zero-Day, known as BlueHammer, is being actively exploited via a TOCTOU race condition to grant attackers SYSTEM-level privileges. Continue reading
WhatsApp Social Engineering Campaign Distributes VBS Malware
A sophisticated WhatsApp social engineering campaign is currently deploying VBS malware through trusted cloud platforms to gain persistent remote access to Windows systems. Continue reading