June 18, 2026 A novel BootROM vulnerability, dubbed usbliter8, affects Apple devices powered by A12, S4/S5, and A13 SoCs. The exploit chains a hardware-level bug in the Synopsys DWC2 USB …
Hackers Breached Klue Integration to Steal Salesforce CRM Data via OAuth Tokens
June 18, 2026 Threat actors exploited a trusted third-party SaaS integration to silently harvest enterprise CRM data, marking the latest chapter in an escalating wave of OAuth-abuse attacks targeting Salesforce …
Multiple Vulnerabilities in Firefox 152 Enables Remote Code Execution Attacks
June 18, 2026 Mozilla has released Firefox 152 to address multiple high-severity vulnerabilities that could allow remote code execution (RCE) and sandbox escape attacks. The security advisory, published on June …
Hackers Can Leverage SQL Server 2025 AI Features to Exfiltrate Sensitive Data
Hackers are increasingly finding new ways to abuse legitimate enterprise features, and Microsoft SQL Server 2025’s newly introduced AI capabilities are now raising serious security concerns. SpecterOps researchers have demonstrated …
Hackers Abuse Microsoft Fondue.exe to Side-Load APPWIZ.cpl and Execute Malware
June 18, 2026 A newly uncovered attack campaign has brought a rarely scrutinized Windows executable into the spotlight. Threat actors are actively abusing Fondue.exe, a legitimate Microsoft utility built into the …
Hackers Abuse Legitimate RMM Tools to Maintain Persistent Access and Evade Detection
June 18, 2026 Hackers have found a new way to get AI tools to do their dirty work without paying for it. Instead of using their own resources, attackers are …
Modern Data Protection Standards: How Organizations Are Strengthening Cybersecurity in 2026
Organizations today operate in an increasingly hostile cyber threat landscape where data protection has become a critical business requirement. While digital transformation delivers greater efficiency and accessibility, it also expands …
F5 Patches NGINX Vulnerability That Enables Code Execution and DoS Attacks
June 18, 2026 F5 has released an out-of-band security advisory addressing multiple high-severity vulnerabilities in NGINX that could allow attackers to execute arbitrary code and launch denial-of-service (DoS) attacks across …
Hackers Abuse PowerShell Commands to Deliver SmartRAT Through Brazilian Bank Phishing Page
June 18, 2026 A new cyberattack campaign has emerged, using cleverly crafted phishing pages and PowerShell tricks to deliver a dangerous piece of malware called SmartRAT. The attack targets Brazilian …
Evilginx AiTM Attack Captures Microsoft Credentials, MFA Tokens, and Authenticated Sessions
June 18, 2026 A growing wave of targeted phishing attacks is putting Microsoft users at serious risk, and the tool behind it is more sophisticated than most people realize. Security …