Category Archives: Threat Alerts
Dirty Frag Linux Kernel Zero-Day: CVE-2026-43284 Security Alert
The Dirty Frag Linux kernel zero-day (CVE-2026-43284) allows local unprivileged users to gain full root access on major distributions like Ubuntu and Red Hat. Continue reading
MuddyWater Social Engineering: Teams and MFA Manipulation Tactics
A recent report details a MuddyWater social engineering campaign that leverages Microsoft Teams and MFA manipulation to bypass security controls using false flag tactics. Continue reading
PAN-OS Zero-Day Vulnerability (CVE-2026-0300) Exploited by State Actors
Palo Alto Networks has issued an urgent advisory for a critical PAN-OS zero-day vulnerability, CVE-2026-0300, which allows unauthenticated remote code execution and is currently targeted by state-sponsored actors. Continue reading
MuddyWater APT Uses Microsoft Teams for False-Flag Ransomware Attacks
Cybersecurity researchers have revealed a new campaign where the MuddyWater APT leverages Microsoft Teams and social engineering to deploy Chaos ransomware as a cover for state-sponsored espionage. Continue reading
AiTM Phishing Campaign: Microsoft Warns of Global Code of Conduct Scams
Microsoft has alerted over 13,000 organizations about a sophisticated AiTM Phishing Campaign that uses ‘Code of Conduct’ lures to bypass MFA and steal session tokens. Continue reading
AccountDumpling Phishing Operation Hijacks 30,000 Facebook Accounts
The AccountDumpling phishing operation exploits Google AppSheet infrastructure to bypass security filters and compromise thousands of Facebook Business accounts globally. Continue reading
SaaS Extortion: Spider Groups Use Vishing and SSO Abuse to Steal Data
New reports reveal how Spider cybercrime groups are accelerating SaaS extortion campaigns by using vishing and SSO abuse to bypass MFA and exfiltrate business data. Continue reading
AI Repository Security: Social Engineering Attacks Targeting Developers
A major security alert warns of a surge in social engineering attacks on Hugging Face and ClawHub, highlighting the critical need for robust AI repository security measures. Continue reading
KRYBIT Data Leak Site: New Double Extortion Risks and Metrics
Cyfirma researchers report the emergence of the KRYBIT Data Leak Site, which utilizes a double extortion model and maintains a rapid 2.7-day delay between compromise and leak. Continue reading