Security Bulletin

The DoppelCart operation, identified by cybersecurity startup Nebty, operates an extensive network of fake online stores, with over 105,000 sites still active.

Sergei Anatolyevich Filimonov and his alleged co-conspirators operated an extensive scheme starting in November 2023, which involved spoofing bank domains to obtain customer credentials, according to US authorities.

Researchers discovered more than 3,300 unique victims across 461 organizations.

How CIRCIA creates an information-sharing framework for private companies and the federal government.

A Nemzetbiztonsági Szakszolgálat Nemzeti Kiberbiztonsági Intézet riasztást ad ki a Microsoft szoftvereket érintő kritikus kockázati besorolású sérülékenységek kapcsán azok súlyossága, a szoftverek széleskörű elterjedtsége, valamint az egyes...

The RAT employs a concealed loader and a worm that actively scans for exposed Android Debug Bridge (ADB) services to install itself on vulnerable devices.

The AI Cyber Defense Pilot will involve state, local, tribal, and territorial governments, along with critical infrastructure organizations like the Multi-State Information Sharing and Analysis Center (MS-ISAC).

The platform, developed by former military red team operators, systematically ingests threat reports from sources like CISA, Mandiant, and Microsoft.

The MikroTrick attack chain exploits two critical vulnerabilities: CVE-2026-67276, an SSH authentication bypass, and CVE-2026-86060, an SSH session privilege escalation.

The first vulnerability, CVE-2026-59346, is a critical integer-overflow flaw within the VMXNET3 virtual network adapter.

The Malagasy government has submitted two cybercrime bills to parliament, aiming to modernize the national cybercrime framework and ratify the UN Convention against Cybercrime (Hanoi Convention).