Ionut Arghire

The threat actor behind the Axios supply chain attack has been aiming at other maintainers in its social engineering campaign.

The improper access control bug in FortiClient EMS allows unauthenticated attackers to execute arbitrary code remotely.

Hackers stole over 300GB of data from the Commission’s AWS environment, including personal information.

A Chinese threat actor exploited the video conferencing platform to perform reconnaissance, escalate privileges, and execute additional payloads.

The vulnerabilities can be chained together to bypass authentication and upload arbitrary files to the server.

Using automated scanning and the Nexus Listener collection framework, the hackers compromised over 750 systems.

The attackers prepared infrastructure and multiple nonce-based transactions, took over an admin key, and drained five vaults.

The bugs could lead to authentication bypass, remote code execution, information disclosure, and privilege escalation.

In January 2026, a threat actor hacked the hospital’s internal network and stole personal and health information.

The AI recruiting firm is investigating the incident as Lapsus$ claimed the theft of 4TB of Mercor data.

The malware can spy on victims, steal their information, and make configuration changes on devices.

The company will accelerate product development, scale go-to-market efforts, and expand its global footprint.

The startup will expand its AI research team, train additional security models, and scale enterprise adoption.

The malware steals credentials, installs a malicious browser extension, and can spread via USB drives.

Jonathan Spalletta exploited smart contract vulnerabilities to steal approximately $55 million in cryptocurrency and cause Uranium to shut down.

A long-lived NPM access token was used to bypass the GitHub Actions OIDC-based CI/CD publishing workflow and push backdoored package versions.

After validating stolen credentials using TruffleHog, the hacking group started AWS services enumeration and lateral movement activities.

Attackers can exploit the bugs through prompt injection, chaining them together to escape the sandbox and execute arbitrary code.

The SQL injection vulnerability allows unauthenticated attackers to execute arbitrary code remotely, via crafted HTTP requests.

Remotely exploitable, the integer underflow vulnerability impacts StrongSwan releases spanning 15 years.