Swati KhandelwalSep 06, 2026Vulnerability / Network Security Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which […]
Category: Attackers
Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
Ravie LakshmananSep 05, 2026Data Breach / Identity Security JetBrains is urging Cadence users to revoke and rotate all credentials following […]
Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities
Ravie LakshmananSep 05, 2026Vulnerability / Web Security Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft […]
Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious payloads. […]
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
Ravie LakshmananSep 02, 2026Vulnerability / Network Security SonicWall has released security updates to address two security flaws impacting its Secure […]
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
Ravie LakshmananSep 02, 2026Vulnerability / Network Security Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise […]
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
Ravie LakshmananSep 01, 2026Vulnerability / Supply Chain Attack Threat actors are exploiting a newly patched critical security flaw impacting JFrog […]
Attackers Steal METR API Key and Consume AI Credits Worth About $600,000
Ravie LakshmananSep 01, 2026Cyber Attack / Artificial Intelligence METR (short for Model Evaluation and Threat Research and pronounced “Meter”), a […]
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
Ravie LakshmananSep 01, 2026Vulnerability / Artificial Intelligence Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, […]
Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication
Ravie LakshmananAug 28, 2026Vulnerability / Web Security Malicious actors are exploiting a newly patched security flaw in PaperCut NG and […]