Skip to content
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

Swati KhandelwalAug 11, 2026Vulnerability / Windows Security Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows… 

Read More »Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
FBI says cybercriminals are hacking into victims’ online accounts to steal their intimate pictures

FBI says cybercriminals are hacking into victims’ online accounts to steal their intimate pictures

The FBI is warning that cybercriminals are hacking into the social media accounts of adults and children to steal their intimate explicit images and videos. The perpetrators rely largely on social engineering tactics to target… 

Read More »FBI says cybercriminals are hacking into victims’ online accounts to steal their intimate pictures
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

Ravie LakshmananAug 11, 2026Botnet / Vulnerability Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botnet that comes with significant improvements to improve its operational resilience and conduct… 

Read More »Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee’s Client

Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee’s Client

Swati KhandelwalAug 11, 2026Vulnerability / Software Security Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter’s. The flaw… 

Read More »Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee’s Client
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

Ravie LakshmananAug 11, 2026Social Engineering / Malware The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT workers in the… 

Read More »Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Swati KhandelwalAug 11, 2026Vulnerability / Enterprise Security Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found… 

Read More »Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt

DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt

The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a bid to improve operational resilience. “Its recovery ecosystem combines the Session messaging network… 

Read More »DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt