ARCHIVE
Tag: phishing
-
Threat digest: 2026-10-31
A record $6.3bn theft from Binance, attributed to North Korea, dominates the day, alongside two exploited Ivanti VPN flaws, a CVSS 10.0 GitLab remote code execution flaw used…
-
Threat digest: 2026-10-30
Binance confirms a breach with up to $5.8 billion in outflows in what may be the largest exchange theft on record, CISA adds GitLab and Cisco flaws to…
-
Threat digest: 2026-10-29
PHP2Shell exploitation escalates into a rooted 25-server intrusion that reached a US government-affiliated network, two more actively exploited flaws enter CISA's KEV list with deadlines inside a fortnight,…
-
Threat digest: 2026-10-25
PHP exploitation attempts keep climbing, a leaked LiteLLM master key turned into a poisoned package release, a ten week token replay campaign slipped past MFA at 79 organisations,…
-
Threat digest: 2026-10-18
A stolen ConnectWise backup credential opened Microsoft 365 tenants across its managed service provider customer base, while California confirmed that millions of student records were copied from a…
-
Threat digest: 2026-10-17
Two actively exploited flaws entered CISA's known exploited list on the same day, a BeyondTrust authentication bypass used by a China-linked group and a Fortinet path traversal tied…
-
Threat digest: 2026-10-16
Freshly confirmed exploitation of Atlassian Data Center and Ivanti Connect Secure flaws leads the day, alongside Microsoft's record patch release, a Linux kernel bug that breaks cloud sandbox…
-
Threat digest: 2026-10-15
Three exploited vulnerabilities added to CISA's catalog, including zero-days in Palo Alto firewalls and Cisco email gateways plus unpatched Ahsay backup flaws, headline a day that also brought…
-
Threat digest: 2026-10-10
SonicWall's maximum-severity SMA1000 flaw is now being exploited in the wild, Ledger is investigating a reported 87 million dollar drain from wallets bought through a reseller, and a…