JINX-0164 Threat Actor Targets Cryptocurrency Firms with macOS Malware
Previously unknown threat group uses fake recruiting lures and custom malware to target digital asset…
Year: 2026
CISA adds three actively exploited vulnerabilities to KEV catalog
Federal agencies must patch Daemon Tools Lite, TanStack, and Nx Console flaws by assigned deadlines…
CISA warns of DoS vulnerability in ABB automation systems
Critical infrastructure operators urged to patch ABB B&R Automation Runtime after disclosure of unauthenticated network…
Cisco Patches Maximum Severity Flaw in Secure Workload REST API
CVE-2026-20223 allows unauthenticated attackers to access sensitive data through insufficient API validation.
Microsoft Copilot Cowork Vulnerability Enables Data Exfiltration via Email
Security flaw allows attackers to steal OneDrive files through prompt injection and automated email messages…
CISA Adds LiteSpeed Plugin Vulnerability to Exploited List
CVE-2026-48172 privilege escalation flaw in LiteSpeed cPanel plugin now under active exploitation
Microsoft Mitigates YellowKey BitLocker Bypass Vulnerability CVE-2026-45585
The company has released a mitigation for the publicly disclosed zero-day flaw that allows attackers…
ABB Zenon Industrial Control Software Exposed to Authentication Bypass
CISA warns of vulnerability allowing unauthorised system reboots in widely deployed industrial automation platform.
CERT-In Orders 12-Hour Critical Patch Windows for Internet-Facing Systems
India's cybersecurity agency cites AI-assisted attack automation as driver for accelerated patching requirements.
Weekly Security Summary Highlights Linux Vulnerabilities and Defender Zero-Days
Security roundup covers development tool compromise, legacy system vulnerabilities, and evolving phishing tactics