MalwareSLEEPWALKER is a Windows backdoor that side-loads into ESET agents, listens for encrypted magic packets, and uses multiple transports. No patch exists; mitigation requires IOCs and incident response.
VulnerabilitiesCritical RCE in Gitea (CVE-2026-60004) is being exploited for cryptojacking. CISA requires federal agencies to patch by August 28, 2026.
VulnerabilitiesOn August 25, 2026, the Cybersecurity and Infrastructure Security Agency CISA added vulnerability CVE-2026-60004 to the Known Exploited Vulnerabilities
VulnerabilitiesCISA warns of critical vulnerability in Rently Smart Home enabling PIN theft without patch. Affected versions up to 20.1.0.
Cloud SecurityHackers are exploiting npm packages and mirrors to host phishing pages that impersonate Cloudflare security checks, redirecting users to malicious sites.
Cloud SecurityMirage2FA phishing campaign compromises 48% of Microsoft 365 targets using AiTM to bypass MFA, affecting US and Europe with stolen sessions enabling SSO fraud.
AISOCRadar reveals AnonyMousKIT, a PhaaS using AI voices to phish iPhone owners for passcodes, bypassing Activation Lock and stealing data.
VulnerabilitiesCISA adds Oracle CVE-2026-21962 to KEV catalog. Critical CVSS 10.0 flaw allows unauthorized WebLogic access. Remediation due Aug 27, 2026.
VulnerabilitiesCISA advisory on CVE-2026-18965: Missing authorization in PayRange API allows remote access to payment devices, risking data leaks and service disruptions.