Tag Archive

Security researchers have found new ways to build fake domains that resemble trusted brands while still appearing as readable Unicode in Chromium-based browsers. The issue can make phishing pages look real because users may see a familiar name and no …

Microsoft is investigating an Exchange admin center access issue that may prevent some administrators from opening the web portal used to manage Exchange Online. Affected admins may encounter an “Internal Server Error” message, according to the Microsoft 365 Status update …

Nippon Columbia Group disclosed a malware infection on October 8, 2026, that may have exposed millions of Daiichi Kosho customer and employee records after a contractor’s employee computer was infected. Daiichi Kosho says data theft and misuse remain unconfirmed, and …

Casbaneiro malware is hiding its main command and control traffic until an infected user visits a targeted banking website. The Windows banking trojan combines phishing messages, location checks, staged downloads, and separate data collection servers to make an active infection …

A phishing campaign is abusing Microsoft Power BI to deliver rogue ScreenConnect installations and give attackers lasting remote access to Windows systems. The operation uses a fake reference document hosted on Microsoft’s real service, making the opening link appear safe …

Decepticon is an open-source autonomous red team agent that connects AI reasoning with hands-on security testing. Its integration with Claude Code and OpenAI Codex lets operators manage assessments from familiar coding tools. Rather than simply scanning ports and writing reports, …

CISA has added a long-standing Apache Struts flaw, tracked as CVE-2016-3081, to its Known Exploited Vulnerabilities catalog after confirming that attackers are using it in real-world attacks. The issue is a command injection vulnerability in Apache Struts that can allow …

Midnight Mimosa is reaching Android phones before their owners even press the power button. The malware arrives inside device firmware, giving its operators a hidden foothold that does not depend on a malicious download, a phishing link, or someone accepting …

A Discourse image upload exploit allowed basic users to read server files by chaining a JPEG processing delay, Ghostscript execution, and ImageMagick features. The research also exposed a separate cache poisoning flaw that could run JavaScript for anonymous visitors. Researchers …