A threat actor is allegedly selling a zero-day exploit for a Windows Remote Desktop Services privilege escalation vulnerability, tracked as CVE-2026-21533, for a staggering $220,000 on a dark web forum. …
Critical Zero-Click Command Injection in AVideo Platform Allows Stream Hijacking
Zero-Click Command Injection AVideo Platform Allows Stream Hijacking A critical vulnerability in AVideo, a widely used open-source video hosting and streaming platform. Tracked as CVE-2026-29058, this zero-click flaw carries a …
Cognizant TriZetto Data Breach Exposes Health Information of 3.4 Million Patients
Cognizant TriZetto Data Breach TriZetto Provider Solutions, a healthcare technology subsidiary of the IT services giant Cognizant, has officially disclosed a massive cybersecurity data breach affecting the sensitive health information …
Malicious imToken Chrome Extension Caught Stealing Mnemonics and Private Keys
Malicious imToken Chrome Extension Socket’s Threat Research Team has discovered a malicious Google Chrome extension named “lmΤoken Chromophore” that actively steals cryptocurrency wallet credentials. Masquerading as a harmless hex color …
OpenAI Launches Codex Security that Discover, Validate and Patch Vulnerabilities
OpenAI Launches Codex Security OpenAI has announced the launch of Codex Security, an application security agent engineered to autonomously identify, validate, and remediate complex vulnerabilities within enterprise and open-source codebases. …
New ClickFix Attack leverages Windows Terminal for Payload Execution
Cybersecurity researchers have uncovered a new wave of ClickFix attacks that now exploit Windows Terminal to deliver malicious payloads directly onto victim machines. Unlike earlier iterations of this social engineering …
RMM Tools Essential for IT Operations but Increasingly Weaponized by Attackers
Remote Monitoring and Management (RMM) tools are the backbone of modern IT operations. Security professionals rely on them daily to patch systems, troubleshoot issues, and manage entire networks from anywhere. …
FBI Investigates Hack on its Wiretap and Critical Surveillance Systems
FBI Investigates Hack The Federal Bureau of Investigation has confirmed a cybersecurity incident targeting a sensitive internal network used to manage wiretapping operations and foreign intelligence surveillance warrants, raising serious …
Microsoft 365 Outage Hits North America as CDN Misconfiguration Disrupts Multiple Services
Microsoft 365 Outage Hits North America Microsoft is actively investigating a service disruption affecting multiple Microsoft 365 products for users in the North American region, with engineers pointing to Content …
China-Nexus Hackers Attacking Telecommunication Providers With New Malware
A China-linked advanced persistent threat actor has been actively targeting telecommunications providers across South America since 2024, deploying three new malware implants to gain deep access into critical network infrastructure. …