APTLazarus Exploits a Windows Zero-Day in a Fake Job Offer Campaign
Lazarus group exploits Windows zero-day in fake job campaign targeting defense. Microsoft patched CVE-2026-68820; update now.
/// Cyber Security · Threat Intelligence · CVE
Latest news — Page 29
More news
Page 29 / 48 · 426 articlesAPT
VulnerabilitiesShieldBreak: PoC Bypasses Microsoft Defender Patch and Targets SYSTEM Privileges
ShieldBreak PoC bypasses MS Defender patch for CVE-2026-50656, granting SYSTEM access. Tested on Win11 25H2 & Server 2025. Update systems promptly.
VulnerabilitiesSharePoint Exploit Chain Enables Unauthenticated RCE
Critical SharePoint vulnerabilities CVE-2026-55040 and CVE-2026-63520 allow unauthenticated remote code execution via an exploit chain, affecting SharePoint Server 2019, 2016, and Subscription Edition.
VulnerabilitiesCISA Adds Three Exploited Vulnerabilities to the KEV Catalog
CISA adds three exploited vulnerabilities to KEV catalog: CVEs in Cisco ASA/FTD, Windows, and Metabase. Organizations must prioritize remediation.
VulnerabilitiesMicrosoft Fixes 421 Vulnerabilities, Including an Exploited Zero-Day in `afd.sys`
On August 11, 2026, Microsoft released security updates addressing 421 vulnerabilities. One of them is CVE-2026-68820 , a high-severity flaw actively
RansomwareDeadLock Leverages Polygon to Make Ransomware Harder to Stop
DeadLock ransomware uses Polygon blockchain for decentralized data leaks and chat, hindering stopping efforts with 96 victims and advanced encryption.
RansomwareSharePoint: CISA Confirms Ransomware Exploitation of CVE-2026-45659
CISA confirms ransomware exploitation of SharePoint CVE-2026-45659 vulnerability. Patch servers and enable AMSI to prevent code execution and network breaches.
AIOpenAI Introduces GPT‑5.6‑Cyber: Greater Offensive Capabilities, Limited Partner Access
GPT-5.6-Cyber by OpenAI offers advanced offensive cybersecurity capabilities, limited to trusted partners. Excels in exploit tasks with 95% completion rate.
APTKimsuky Prepares an Offline AI Stack to Enhance Phishing, Malware, and Data Collection
Genians attributes the preparation of infrastructure for running artificial intelligence tools offline to Kimsuky, a North Korean unit subordinate to the