May 25, 2026 Hackers are actively abusing a flaw in shared Content Delivery Network (CDN) infrastructure to hide malicious traffic behind trusted, high-reputation domains, effectively slipping past the security tools …
KnowledgeDeliver LMS Zero-Day Exploited to Deploy BLUEBEAM Web Shell
May 25, 2026 A newly disclosed zero-day vulnerability in the KnowledgeDeliver Learning Management System (LMS) has been actively exploited in the wild to deploy the BLUEBEAM in-memory web shell, according …
Iranian APT Uses SEO Poisoning to Deliver Fake SQL Developer Malware Installer
May 25, 2026 A well-known Iranian threat group has found a new way to push malware onto people’s machines. Instead of sending phishing emails, the group built a fake website …
Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and disinformation campaigns …
Kazuar Malware Evolves Into Modular Espionage Ecosystem for Secret Blizzard Operations
May 25, 2026 A Russian state-sponsored threat group has quietly upgraded one of its most powerful cyber weapons, and the result is a spying tool that is harder to detect, …
Hackers Actives Scanning SonicWall Firewall Interfaces – 597,000 Sessions Observed
May 25, 2026 A sharp rise in internet-wide scanning activity targeting SonicWall firewall management interfaces has been detected, raising concerns about a potential pre-disclosure reconnaissance phase tied to new vulnerabilities. …
Italian Authorities Dismantled CINEMAGOAL App that Enables Access to Various Streaming Platforms
May 25, 2026 Italian law enforcement has dismantled a large-scale audiovisual piracy network centered around a sophisticated application called CINEMAGOAL, which enabled users to access premium streaming services without authorization. The …
MiniUpdate RAT Uses Azure-Hosted C2 Domains for Targeted Espionage Campaigns
May 25, 2026 A new wave of targeted espionage attacks has put technology professionals across the United States, Israel, and the United Arab Emirates on high alert. The threat comes …
WhatsApp Chat Histories Stored Unencrypted on macOS and iOS
May 25, 2026 Security researchers have revealed that WhatsApp chat histories may be stored unencrypted on both macOS and iOS devices, raising fresh concerns about local data protection and cross-application …
CISA Warns of Drupal Core SQL Injection Vulnerability Exploited in Attacks
May 25, 2026 CISA has issued an urgent alert regarding a critical SQL injection vulnerability in Drupal Core, tracked as CVE-2026-9082, which is now being actively exploited in real-world attacks. …