Latest Cybersecurity Threats

Real-time threat intelligence from trusted sources

A recently identified vulnerability in FortiClient Endpoint Management Server (EMS), tracked as CVE-2026-35616, is being actively exploited to deploy information-stealing malware, according to a report from Arctic Wolf. This flaw has a high severity rating of 9.1 and allows attackers to execute remote code without needing authentication, making it particularly dangerous. Organizations using FortiClient EMS should be on high alert as the vulnerability can be exploited through specially crafted requests. The vulnerability was patched in April, but the ongoing exploitation highlights the importance of timely updates and monitoring for suspicious activity. Companies must ensure they have applied the latest patches to protect their systems from these attacks.

Impact: FortiClient Endpoint Management Server (EMS)
Remediation: Organizations should apply the patch released in April to FortiClient EMS to mitigate the vulnerability. Regularly monitor systems for any unauthorized access or unusual activity.
Read Original

Recent research shows that cybercriminals have shifted tactics from typosquatting—where they create malicious packages with misspelled names—to developing more sophisticated open source packages that closely mimic legitimate code. This new approach allows attackers to trick users into downloading and installing harmful software without them realizing it. The implications are significant, as developers and organizations relying on open source software may inadvertently use these compromised packages, leading to potential data breaches or system vulnerabilities. Users must remain vigilant and verify the authenticity of packages before installation to prevent falling victim to these impersonation tactics.

Impact: Open source software packages, particularly those in popular repositories like npm or PyPI
Remediation: Users should verify the authenticity of software packages before installation and consider using tools that can scan for known malicious packages.
Read Original

A man was arrested in Buren, Netherlands, for allegedly hacking into the computer systems of Ajax, a prominent football club. The suspect is accused of unauthorized access to Ajax's systems multiple times earlier this year. This incident raises concerns about the security of sports organizations, which can be vulnerable to cyberattacks that may compromise sensitive data or disrupt operations. The arrest reflects ongoing efforts by law enforcement to tackle cybercrime and protect digital assets in the sports industry. As cyber threats grow, it is crucial for organizations to bolster their cybersecurity measures to prevent similar incidents in the future.

Impact: Ajax football club's computer systems
Remediation: N/A
Read Original

A newly discovered zero-day vulnerability in the Gogs self-hosted Git service allows attackers to execute remote code on servers that are exposed to the internet. This flaw poses a significant risk to organizations using Gogs for version control, as malicious actors could potentially gain full control over affected systems. Currently, there are no patches available to fix this issue, leaving users vulnerable until a solution is released. The exploitation of this vulnerability is particularly concerning because it can lead to data breaches or further attacks within an organization's infrastructure. Users and administrators of Gogs should take immediate action to secure their installations and monitor for any unusual activity.

Impact: Gogs self-hosted Git service
Remediation: Users are advised to secure their installations and monitor for unusual activity until a patch is released.
Read Original

The article discusses how older data, which companies may have forgotten about, is becoming increasingly valuable as AI technologies advance. However, this revival of old data can pose significant security risks, as it may contain outdated or sensitive information that organizations have not adequately protected. Companies leveraging AI need to be aware of these potential vulnerabilities and take steps to secure their data assets. If not managed properly, these risks can derail AI initiatives and lead to data breaches or compliance issues. It's essential for organizations to assess their historical data for security risks before moving forward with AI projects.

Impact: N/A
Remediation: Organizations should assess and secure old data assets, implement data governance policies, and conduct regular security audits to mitigate risks.
Read Original

A Romanian man was sentenced to 56 months in federal prison for hacking into a computer network used by the Oregon state government. This incident was part of a broader series of cyberattacks that targeted multiple victims across the United States. The hacker's activities included unauthorized access to sensitive governmental information, which raises concerns about the security of public sector networks. Such breaches can compromise not only data integrity but also the trust of citizens in their government. The case serves as a reminder of the ongoing risks posed by cybercriminals, particularly those operating from abroad.

Impact: Oregon state government computer network
Remediation: N/A
Read Original

Edamame, a startup based in France, has launched a new platform designed to monitor AI coding agents for potential issues like 'intent drift,' which refers to a deviation from their intended programming. The platform uses host telemetry and AI analysis to detect problems in real time, including secret theft and supply-chain attacks. This is significant as it addresses the growing concern over how AI systems can behave unpredictably and pose risks to software integrity and data security. By implementing such a system, companies can better protect their applications and sensitive information from malicious activities. This innovation could be crucial for organizations relying on AI-driven coding agents to ensure they operate safely and as intended.

Impact: AI coding agents, software applications using AI
Remediation: N/A
Read Original

Microsoft has raised concerns about the recent disclosure of several unpatched security vulnerabilities without prior notice. The company stated that these uncoordinated disclosures could put customers at significant risk by exposing them to potential attacks. This situation affects users of Microsoft's products, as they may not be aware of the vulnerabilities or have the necessary patches to protect their systems. The lack of coordinated communication from researchers or security firms can lead to confusion and increased vulnerability. Microsoft urges that such disclosures be handled responsibly to ensure that users are adequately protected and informed.

Impact: Microsoft products, specifically Windows and associated software.
Remediation: Microsoft recommends that users keep their systems updated with the latest patches and security updates.
Read Original

A recently discovered security vulnerability in Gitea, a popular self-hosted Git service, has put around 30,000 deployments at risk. The flaw allows attackers to access private container images, which can lead to the exposure of sensitive information such as source code and user credentials. This vulnerability affects organizations that rely on Gitea for their development workflows, making it crucial for them to act swiftly to secure their systems. The situation raises concerns about the security of self-hosted services and the potential for misuse of exposed data. Companies using Gitea should prioritize patching their installations to mitigate this risk.

Impact: Gitea deployments, private container images
Remediation: Users should patch their Gitea installations to the latest version to address the vulnerability.
Read Original

Carnival Corporation has confirmed a significant data breach that has impacted nearly 6 million individuals. The breach was linked to the ShinyHunters extortion gang, which claimed responsibility for the incident back in April 2026. The compromised data may include sensitive information, though specific details about what was leaked have not been disclosed. This incident raises concerns about the security of personal information within the cruise industry and the potential for identity theft among affected individuals. Carnival has stated that they are investigating the breach and will take necessary steps to enhance their cybersecurity measures moving forward.

Impact: Nearly 6 million individuals affected; specific data types not disclosed.
Remediation: Investigation ongoing; Carnival to enhance cybersecurity measures.
Read Original

A new cyber campaign has emerged, targeting cryptocurrency firms through deceptive recruitment tactics and custom malware designed for macOS systems. Researchers from Wiz have identified this threat actor, known as JINX-0164, which employs social engineering to lure victims into downloading malicious software. The malware is tailored to exploit continuous integration and continuous deployment (CI/CD) infrastructures, increasing the risk of digital asset theft for affected organizations. As cryptocurrency firms often handle significant amounts of valuable digital assets, these attacks could lead to substantial financial losses and damage to their reputations. Companies in the crypto space need to be vigilant and enhance their security measures to protect against these sophisticated threats.

Impact: Cryptocurrency firms, macOS systems, CI/CD infrastructure
Remediation: Companies should implement stronger security protocols, conduct employee training to recognize social engineering attacks, and monitor their CI/CD environments for unusual activity.
Read Original

A recent study by Mysterium VPN revealed that an astonishing 19.6 billion files are publicly accessible on the internet due to misconfigured cloud storage buckets. Among these files, there are around 685,000 credential files and nearly 1 million database dumps. This situation exposes sensitive information and undermines the common belief that data stored with companies is secure. The findings raise significant concerns about data privacy and security, emphasizing that many organizations may not be adequately protecting their data. It’s crucial for companies to review their cloud configurations to prevent unauthorized access to sensitive information.

Impact: Cloud storage services, sensitive data files, credential files, database dumps
Remediation: Companies should review and secure their cloud storage configurations to prevent unauthorized access.
Read Original

A 35-year-old man from Buren, Netherlands, has been arrested by the Dutch National Police for hacking into AFC Ajax's computer systems. The investigation began after the football club discovered that its systems had been accessed without authorization, leading to the exposure of personal records for approximately 300,000 fans. The suspect is believed to have gained unauthorized access multiple times. This incident raises concerns about the security of fan data in sports organizations and the potential risks associated with such breaches. As data privacy becomes increasingly important, this case underscores the need for sports clubs to enhance their cybersecurity measures to protect sensitive information.

Impact: AFC Ajax fan records, personal data of approximately 300,000 fans
Remediation: N/A
Read Original

Despite the growing concerns around cybersecurity, a recent survey of Chief Information Security Officers (CISOs) in northern Europe found that most are not experiencing a significant increase in cyberattacks compared to two years ago. This suggests that while the threat of cyber incidents remains, the situation for many organizations has stabilized. The findings indicate that companies have likely adapted their defenses and strategies against potential attacks, even with the rise of artificial intelligence in cyber operations. Understanding this trend is important for businesses as it helps inform their security postures and resource allocations. Overall, the report provides a snapshot of the current state of cybersecurity in northern Europe, demonstrating resilience in the face of evolving threats.

Impact: N/A
Remediation: N/A
Read Original

Recent research has uncovered a long-running cybercrime operation targeting fans of pirated books, movies, and TV shows. In 2026, experts identified new websites associated with this gang, attracting tens of millions of visitors. These sites have been linked to malware distribution, including a Remote Access Trojan (RAT) that allows attackers to control infected devices. This situation poses significant risks for users who access these pirated materials, as they may unknowingly download harmful software. It's crucial for consumers to be aware of these dangers and consider the security implications of engaging with pirated content.

Impact: Users accessing pirated books, movies, and TV shows; malware including Remote Access Trojans (RATs)
Remediation: Users should avoid accessing pirated content, use security software, and keep their devices updated.
Read Original
Page 1 of 217Next