#Attackers

Sansec reports a long-running campaign active since July 2025 that infected 953 online stores, mostly running Magento, by injecting malicious JavaScript lo

Security researchers analyzed a Microsoft 365 phishing campaign utilizing adversary-in-the-middle relays to capture sessions and replay stolen tokens at sc

Unit 42 details how attackers leveraged agentic AI platforms for post-exploitation following PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619.

The internet took a massive hit this week, and I had a front-row seat to the chaos. On 21 October...

The PHP2Shell Crisis: A Deep Dive into the Vulnerabilities That Shook the Web On October...

Hackers who hit GMO's trading servers demanded money and threatened 70+ brokers. GMO refused to pay and asked Tokyo to strike back.

Gunmen opened fire at a funeral in a Greek Orthodox church in Karak, Jordan, killing seven and wounding 40. Here is what we know so far.

Password Attacks: How Hackers Try to Steal Your Passwords Introduction We use...

This is part 2 of the series "Protect Your Own Service Yourself — Self-Defense Security in the Age of...

Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed

AWS researchers detected attempts targeting two PHP security flaws on Oct. 17; official fixes were released on Oct. 21. Known together as PHP2Shell, the fl

LiteLLM disclosed that attackers compromised security controls to publish a malicious package version featuring a backdoor and credential stealer to PyPI a

Staffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft

Attackers can bypass WordPress authentication, run commands as an administrator, and then install malicious plugins on affected sites.

WP Maps Pro versions 6.1.0 and earlier contain a critical vulnerability (CVE-2026-8732) that allows unauthenticated attackers to create administrator accounts and take full control of WordPress sites.

Threat actors are exploiting CVE-2026-35616 in FortiClient EMS to push disguised credential stealers to all managed endpoints at scale. Arctic Wolf and WatchTowr detail how attackers abuse management infrastructure for silent deployment and browser data…

7-Zip version 26.00 and earlier contain a critical heap buffer overflow (CVE-2026-48095) in the NTFS handler that allows attackers to execute arbitrary code via a crafted archive.…

“It only took 47 minutes for the ethical hacker to find what we missed for months.” That was the...

The two hacks came a little over two weeks apart. On 1 April, attackers drained roughly $285 million from Drift Protocol, a Solana-based derivatives exchange, after spending months posing as a quantitative trading firm to trick employees into authorising…

Attackers stole a limited amount of internal credential material after malware hidden in poisoned packages reached two staff machines