Explore

Trendline Trendline
Nessus Agent Vulnerability on Windows Allows Critical System Privilege Exploitation

Nessus Agent Vulnerability on Windows Allows Critical System Privilege Exploitation

Nessus Agent Vulnerability on Windows Allows Critical System Privilege Exploitation
Trendline Trendline
Enterprises Urged to Adopt Agentic AI Defenses Against Advanced Cyber Threats

Enterprises Urged to Adopt Agentic AI Defenses Against Advanced Cyber Threats

Enterprises Urged to Adopt Agentic AI Defenses Against Advanced Cyber Threats
Rapid Read Rapid Read
UNC6692 Employs Email Bombing and Social Engineering to Deploy 'Snow' Malware

UNC6692 Employs Email Bombing and Social Engineering to Deploy 'Snow' Malware

The threat actor UNC6692 has been identified using email bombing and social engineering tactics to deploy the 'Snow' malware. According to the Google Threat Intelligence Group, the attackers overwhelm victims with emails and impersonate IT support to trick them into executing malicious code. The campaign involves a phishing page that mimics a mailbox repair utility, leading to the installation of a JavaScript-based backdoor called Snowbelt. This malware is part of a modular framework that includes Snowglaze and Snowbasin, facilitating unauthorized access and data exfiltration.
Trendline Trendline
GitHub Vulnerability Exposes Millions of Repositories to Potential Exploits

GitHub Vulnerability Exposes Millions of Repositories to Potential Exploits

GitHub Vulnerability Exposes Millions of Repositories to Potential Exploits
Trendline Trendline
Pack2TheRoot Vulnerability in Linux Poses Security Risks

Pack2TheRoot Vulnerability in Linux Poses Security Risks

Pack2TheRoot Vulnerability in Linux Poses Security Risks
Rapid Read Rapid Read
Browser Extensions Found Selling User Data, Raising Privacy Concerns

Browser Extensions Found Selling User Data, Raising Privacy Concerns

A study by LayerX Security has revealed that numerous popular browser extensions are collecting and selling user data, as disclosed in their privacy policies. Over 80 extensions, including those for streaming, ad blocking, and productivity, have been identified as engaging in data monetization. Despite explicit disclosures, many users remain unaware due to the lack of privacy policy visibility. The study highlights that a significant percentage of Chrome Web Store extensions do not publish privacy policies, leaving users vulnerable to data exploitation.
Trendline Trendline
Vimeo Confirms Data Breach Involving User and Customer Information

Vimeo Confirms Data Breach Involving User and Customer Information

Vimeo Confirms Data Breach Involving User and Customer Information
Rapid Read Rapid Read
Germany Investigates Russian-Linked Phishing Attacks on Signal Targeting Officials

Germany Investigates Russian-Linked Phishing Attacks on Signal Targeting Officials

The German government suspects that Russia is behind a series of phishing attacks targeting Signal accounts of high-ranking politicians, military personnel, and journalists. These attacks involved fake Signal security messages that tricked users into linking their accounts to external devices controlled by hackers, allowing access to private conversations and data. The German federal prosecutors have been investigating these cyberattacks since February 2026, with suspicions of espionage. Although Germany has not officially attributed the attacks to Russia, the incidents are part of a broader pattern of cyber activities linked to Russia, especially following its invasion of Ukraine in 2022. The attacks have compromised around 300 Signal accounts, raising concerns about the security of communications among political and military figures.
Trendline Trendline
AI Agent's Error Causes Major Disruption for PocketOS Customers

AI Agent's Error Causes Major Disruption for PocketOS Customers

AI Agent's Error Causes Major Disruption for PocketOS Customers
Trendline Trendline
Silverfort Acquires Fabrix Security to Enhance AI Identity Protection

Silverfort Acquires Fabrix Security to Enhance AI Identity Protection

Silverfort Acquires Fabrix Security to Enhance AI Identity Protection
Rapid Read Rapid Read
GlassWorm Malware Linked to Dozens of Open VSX Extension Clones

GlassWorm Malware Linked to Dozens of Open VSX Extension Clones

Security firm Socket has identified over 70 suspicious extensions on the Open VSX marketplace linked to the GlassWorm malware. These extensions, which are clones of popular ones, were published by newly created GitHub accounts. GlassWorm, first appearing in October 2025, is designed to steal credentials and cryptocurrency. The extensions are likely sleeper agents, intended to deploy malware through future updates. This pattern of cloned extensions mirrors previous GlassWorm waves, where extensions are initially published without a payload and later updated to deliver malware.
Rapid Read Rapid Read
Nessus Agent Vulnerability on Windows Allows System-Level Code Execution

Nessus Agent Vulnerability on Windows Allows System-Level Code Execution

A critical security vulnerability has been identified in Tenable's Nessus Agent for Windows, which could allow attackers to execute arbitrary code with SYSTEM privileges. This flaw involves a symlink attack, where attackers can manipulate file operations to delete critical system files, leading to full control over the affected machine. The vulnerability poses a significant threat to organizations using Nessus Agents for vulnerability assessments, especially those installed on high-value or internet-adjacent systems. Tenable has released a patch in version 11.1.3 to address this issue and urges immediate updates to mitigate risks.