Compromised ConnectWise Cloud Backup credentials let attackers access M365 tenants, assign admin roles, and add secrets for ...
UTA0576 exploits CVE-2026-104935 and chained Ivanti Connect Secure flaws to gain root access using in-memory payloads and log ...
Hotejka is a Russian-language affiliate program operating a Help Traffic Distribution System (TDS) to distribute tech support scams. The operation relies on large numbers of disposable Cloudflare ...
Japanese web systems face rising data leaks as attackers exploit API flaws, weak authentication, and software vulnerabilities ...
A Windows privilege-boundary vulnerability affects the Windows Health and Optimized Experiences service (whesvc) and the Windows Diagnostics Lua engine. An attacker running low-privileged or WPAD LPAC ...
Fake event invitations lead victims through RSVP and CAPTCHA pages to install a RAT, enabling attackers to remotely control ...
Unauthorized access incidents at Japanese organizations leaked personal data via known flaws, Metabase SQL injection, API ...
A critical unauthenticated SQL injection vulnerability in Metabase version 0.58 and later allows attackers to obtain administrator access to the application database. This flaw can enable theft of ...
Adception abuses Google ads, Bing redirects, compromised sites, and clipboard manipulation to deliver malicious payloads to ...