Spring Ring: the Microsoft Teams vishing campaign targeting Windows domain control
Spring Ring vishing used fake Teams help desk calls to deploy Quick Assist, RMM tools and NTLM relay attacks on Windows domain controllers.
CyberWorldOps
Latest news
More news
Page 48 / 92 · 830 articles
MikroTrick Zero-Day Chain Gives Attackers Admin Control of MikroTik Routers
MikroTrick exploits two MikroTik RouterOS SSH flaws to gain admin control. Learn affected versions, attack timeline, compromise signs and how to patch.
REVSTEALER-Linked Windows Malware Persists to Steal Crypto, Relay Traffic, and Mine Coins
Elastic links four persistent Windows executables to REVSTEALER that steal crypto wallets, hijack clipboards, proxy traffic, and mine coins.
Pegasus and NoviSpy Used Against Serbian Students: Zero-Click iPhone Attack Confirmed
Citizen Lab confirmed Pegasus zero-click iPhone infection via iMessage against Serbian student amid wider surveillance of activists with NoviSpy.
OPC UA LDS: Privileged Console in Installer Exposes Industrial Terminals
CVE-2026-77477 in OPC UA LDS installers before 1.04.420 lets local attackers use an elevated console to run commands and escalate privileges.
BraZetsu Turns Infected PCs into Access for Sale to Criminals
BraZetsu malware catalogs infected PCs and sells access via Infected Marketplace, enabling fraud, data theft and corporate intrusions.
PostgreSQL Logical Decoding Flaw Allows Code Execution as the `postgres` User
PostgreSQL CVE-2026-6471 lets REPLICATION users load arbitrary libraries via logical decoding to execute code as postgres. See affected versions and fix.
StyleSmuggler Zero-Day Backdoors Fully Patched Magento Stores
StyleSmuggler zero-day exploits patched Magento stores via payment emails to gain RCE and install persistent Linux backdoor.
JetBrains Cadence Breach Exposed AWS Credentials After TeamCity RCE Exploitation
JetBrains disclosed a Cadence breach via CVE-2026-63077 TeamCity RCE, exposing AWS credentials, backups and S3 files from Aug 8-24, 2026.