UTA0576 exploits CVE-2026-104935 and chained Ivanti Connect Secure flaws to gain root access using in-memory payloads and log ...

Hi! You may not know me, but to be brief let’s just mention I conduct cyber forensics, investigations and security awareness for living for 25+ years. A few weeks ago I got called in to do some ...

Google Threat Intelligence Group identified STOCKSTAY, a multi-component .NET backdoor used by the Russia-linked threat actor Turla. The malware is built with a modular design that includes a tunneler ...

PHP has disclosed CVE-2026-115560, a new remote code execution risk affecting web applications that use an unusual combination of PHP session configuration and runtime behavior. The issue was ...

Local privilege-escalation bugs remain especially dangerous when they turn an ordinary user foothold into immediate root access. The CVE-2026-46300 vulnerability, nicknamed Fragnesia, is a ...

CVE-2026-48095 in 7-Zip has raised fresh concerns around malicious archive handling and user-driven exploitation. According to GitHub Security Lab, the flaw is a heap buffer write overflow in 7-Zip’s ...

Throughout March 2025, defenders observed increasing cyber-espionage activity by the UAC-0219 hacking group targeting Ukrainian critical sectors WRECKSTEEL malware. In April, CERT-UA issued a novel ...

#!/bin/bash # ARTEX Simulation Script # Target: Localhost Web Server TARGET_URL="http://localhost" echo "[+] Starting ARTEX Reconnaissance Simulation..." # Step 1 ...

Siemens has confirmed active exploitation of a high-severity DLL side-loading vulnerability in Siemens Software Center, a desktop application used to download, install, activate, and update Siemens ...

Following closely after the Interlock ransomware attacks that used a new custom RAT delivered through a modified ClickFix variant called FileFix, a new malicious campaign has emerged, also leveraging ...

The China-linked APT group UAT-7810 is continuing to expand its LapDogs Operational Relay Box network with a toolkit of custom malware that includes LONGLEASH, DOGLEASH, and JARLEASH. The actor ...

Node.js has released security updates addressing CVE-2026-111497, a high-severity vulnerability in its bundled Brotli decompression code that can potentially enable remote code execution. The flaw is ...