Aggregator

Between December 2025 and early January 2026, an unidentified solo operator carried out one of the most technically significant cyberattacks […]

The post How Hackers Used Anthropic’s Claude to Breach the Mexican Government appeared first on HawkEye.

A previously undocumented threat activity cluster has been attributed to an ongoing malicious campaign targeting education and healthcare sectors in the U.S. since at least December 2025. The campaign is being tracked by Cisco Talos under the moniker UAT-10027. The end goal of the attacks is to deliver a never-before-seen backdoor codenamed Dohdoor. "Dohdoor utilizes the DNS-over-HTTPS (DoH)

Submit #759622 / VDB-347999

Submit #759621 / VDB-347998

Submit #759606 / VDB-347997

Submit #759603 / VDB-347996

Submit #759601 / VDB-347995

A vulnerability was found in Discourse up to 2025.12.1/2026.1.0. It has been declared as critical. Impacted is the function WebhooksController of the component Webhook Endpoint. Such manipulation leads to improper authentication. This vulnerability is referenced as CVE-2026-26077. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability was found in Flair up to 0.4.1. It has been classified as problematic. This issue affects the function LanguageModel of the component Model Handler. This manipulation causes deserialization. The identification of this vulnerability is CVE-2026-3071. The attack can only be executed locally. There is no exploit available.

Submit #758666 / VDB-347994

Submit #758665 / VDB-347993

Submit #758664 / VDB-347992

本文展示美国国家级超级计算机 “塞拉（Sierra）” 的退役全流程，同时揭秘了超算行业的服役规则、退役处置标

A vulnerability was found in Google Cloud Vertex AI Workbench and classified as problematic. This vulnerability affects unknown code. The manipulation results in information disclosure. This vulnerability was named CVE-2026-2244. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

A newly discovered Android Remote Access Trojan (RAT) named Oblivion is raising serious concerns across the mobile security community. Sold on a public hacking forum for as little as $300 a month, this malware is built to silently take over Android devices without the victim ever knowing.​ What makes Oblivion different from other underground RATs […]

The post New $300 Android RAT With Automated Permission Bypass and Hidden Remote Control appeared first on Cyber Security News.

Специалисты Solar 4RAYS обнаружили пять успешных заражений в одной системе после фишинговой атаки.

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco SD-WAN flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two Cisco SD-WAN flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the catalog: This week, Cisco warned of a critical Cisco SD-WAN vulnerability, tracked […]

微软释出了可选更新 KB5077241，正式向 Windows 11 v25H2 和 24H2 用户提供了知名系统监控工具 Sysmon。Sysmon 是 Sysinternals 套件的一部分，它能监控系统活动，记录到事件日志中。它能提供进程创建、网络连接以及文件创建时间变化的详细信息，能用于识别恶意或异常活动。如果用户已经安装了 Sysmon，需要先卸载，安装后用管理员权限运行 sysmon -i 命令启用该功能。

Attack Spotlights Threats, Risks Facing Healthcare Supply Chain
UFP Technologies, a Massachusetts-based maker of single-use medical devices and other healthcare supplies, has notified the U.S. Securities and Exchange Commission of a cyber incident discovered on Valentine's Day that involved the theft or destruction of company data.

State Officials Investigating Breach of Back-Office Services Provider Found in 2025
The victim count in the 2024 hack on back-office support services vendor Conduent Business Services has just ballooned again, with the Xerox-spinoff now reporting to Wisconsin regulators that the incident affected "25 million-plus" people nationwide.