GitHub’s Advisory Database reached an all-time high in May 2026, publishing 1,560 reviewed security advisories, more than five times its typical monthly output. Despite this milestone, the platform still struggled …
PoC Released for NTLM Reflection Bypass Flaw that Enables SYSTEM Access on Windows Server
June 30, 2026 A working proof-of-concept (PoC) exploit has been released for a new NTLM reflection bypass flaw that enables SYSTEM-level access on Windows Server 2025, raising fresh concerns about …
SimpleHelp Authentication Bypass Vulnerability Exploited in the Wild to Deploy TaskWeaver Loader
June 30, 2026 A critical authentication bypass vulnerability in SimpleHelp Remote Monitoring and Management (RMM) software is being actively exploited in the wild. This enables attackers to deploy advanced malware, …
Mustang Panda Abuses Zoho WorkDrive for Command-and-Control and Data Exfiltration
June 30, 2026 A China-aligned cyber espionage group known as Mustang Panda has been caught running two simultaneous attack campaigns against Indian government and energy targets, using a trusted cloud …
X Launches Hosted MCP Servers to Connect Cursor, Claude, and Other AI Tools
June 30, 2026 X (formerly Twitter) has officially launched hosted Model Context Protocol (MCP) servers, enabling AI development tools such as Grok Build, Cursor, and Claude Desktop to seamlessly connect …
New Windows Backdoor Mistic Enables In-Memory Code Execution and Credential Theft
June 30, 2026 A newly identified Windows backdoor called Mistic has been quietly making its way through enterprise networks since April 2026, giving attackers persistent, low-profile access that is extremely …
Kali Linux 2026.2 Released With 9 New Tools and VM Boot Tweaking
June 30, 2026 Kali Linux team officially released Kali Linux 2026.2 right on schedule at the close of Q2 2026, delivering a compelling mix of desktop environment upgrades, infrastructure modernization, …
Nissan Confirms Data Breach Following Oracle PeopleSoft 0-Day Attacks
June 30, 2026 Nissan Americas has officially confirmed a data breach affecting current and former employees across four countries after threat actors exploited a critical zero-day vulnerability in Oracle PeopleSoft …
WhatsApp Launches New Username Feature to Communicate Without Exposing Phone Numbers
June 29, 2026 WhatsApp introduces a new privacy update that lets users connect using unique handles, eliminating the need to share phone numbers with strangers or new group members. Earlier, …
EvilTokens Phishing Breaches Finance Firms Using “Ghost” Code Across U.S. and European Businesses
June 29, 2026 EvilTokens can keep serious account-takeover activity out of your SOC’s view by relying on “ghost” code that only surfaces after the browser decrypts it. Because of this, analysis …