Eduard Kovacs

The vulnerability in TeamT5 ThreatSonar Anti-Ransomware was recently added to CISA’s KEV catalog.

The Everest ransomware group has taken credit for a hacker attack on Vikor Scientific, now called Vanta Diagnostics.

PayPal blamed an application error for the exposure of customer personal information for nearly 6 months. 

The flaw tracked as CVE-2026-2329 can be exploited without authentication for remote code execution with root privileges. 

CISA has updated its KEV entry for CVE-2026-1731 to alert organizations of exploitation in ransomware attacks.

The FBI has confirmed that the Ploutus malware, which has been around for over a decade, is still being used in the wild.

The company is investigating whether any customer or employee data was stolen by hackers.

The malware leverages Gemini to analyze on-screen elements and ensure that it remains on the device even after a reboot.

The Ministry of Economy reported discovering unauthorized access to the national bank account registry FICOBA.

The blockchain-based lender has confirmed a data breach after ShinyHunters leaked over 2GB of data allegedly stolen from the company.

Security researchers have seen the vulnerabilities being exploited to deliver shells, conduct reconnaissance, and download malware.

The cyberattack disrupted information and booking systems and lasted for several hours. 

The malware has been preinstalled on many devices but it has also been distributed through Google Play and other app stores.

The Series A funding round, led by Bain Capital, brings the total raised by Cogent to $53 million.

Novee researchers discovered 16 vulnerabilities in Foxit and Apryse PDF tools that could have been exploited via malicious documents or URLs.

The vulnerability added to CISA’s KEV catalog affects ThreatSonar Anti-Ransomware and it was patched in 2024.

Koi has developed an endpoint security solution that Palo Alto will use to enhance its products.

GTIG and Mandiant said the zero-day tracked as CVE-2026-22769 has been exploited by UNC6201 since at least 2024.

Eurail has confirmed that the stolen data is up for sale, but it’s still trying to determine how many individuals are impacted.

Polish police said they found evidence of cybercrime on the 47-year-old suspect’s devices.