Cloud SecurityGreatness Expands Microsoft 365 Phishing with AiTM and Device Code Attacks
The phishing-as-a-service platform Greatness , active since at least mid-2022, has expanded its campaigns targeting Microsoft 365 users. The activity
/// Cyber Security · Threat Intelligence · CVE
Latest news — Page 36
More news
Page 36 / 47 · 423 articlesCloud Security
VulnerabilitiesTP-Link Omada: 15 ZTP Vulnerabilities Could Open the Door to Enterprise Networks
TP-Link fixed 15 ZTP vulnerabilities in Omada ecosystem that could lead to RCE and network compromise. Learn about impacts and security measures.
VulnerabilitiesAcrisure KARR BT and DR-100 Bluetooth Flaw Enables Unauthorized Vehicle Commands
On August 4, 2026, CISA published an advisory on CVE-2026-18411 , a vulnerability affecting Acrisure KARR BT and DR-100 products. The issue stems from the
MalwareXCSSET v40 Targets macOS Developers Through Compromised Xcode Projects
Palo Alto Networks Unit 42 has analyzed a new variant of XCSSET, dubbed v40 , which targets macOS developers through compromised Xcode projects and GitHub
MalwareChainDrop: the npm Supply-Chain Attack That Compromised 1,300 Packages and Hit 2 Billion Monthly Downloads
The ChainDrop npm supply-chain attack compromised 1,300 packages. Learn how it stole tokens and spread across CI/CD and developer environments.
RansomwareZero-Day on SonicWall SMA 1000: INC Ransomware Exploits Flaws Since June, Now Using Phone Calls
INC Ransomware exploits SonicWall SMA 1000 zero-day vulnerabilities since June 2026. Learn how the group uses phone calls and emails for extortion.
Vulnerabilitiestl;dv, the AI meeting assistant, exposes 180k meetings: live spying possible
A critical flaw in tl;dv exposes 180k meetings and 80k users. Attackers exploit missing Firestore rules to impersonate the bot and spy on live calls.
AIGemini ADK Under Attack: Two Vulnerabilities Expose the Risks of Automated AI Agents
Two critical vulnerabilities in Google's Gemini ADK allow remote code execution and PR manipulation, highlighting severe supply chain risks for AI agents.
MalwareDOUBLECUP: the Russian service using browser cache to inject malware without touching the disk
DOUBLECUP is a Russian loader-as-a-service using fake CAPTCHAs, steganography, and browser cache to deploy fileless malware like CountLoader and RATs.