Malicious ScreenConnect deployments observed
Categories: Threat ResearchTags: advisory, connectwise, ScreenConnect
Home / News
Cyber security news
Stay up to date with the latest cyber security news and threats from around the world.
November 10, 2026
November 9, 2026
N-able issues advisory on critical vulnerabilities
Categories: Threat ResearchTags: advisory, N-able
ARTEX: Attackers apply agentic AI
<p>An agentic AI pentesting framework is being used in the wild by threat actors</p>Categories: Threat ResearchTags: Agentic AI, Attack Tools, AI
October 29, 2026
Malicious Claude Code extension distributed through Cursor marketplace
Categories: Threat ResearchTags: advisory, Cursor
October 28, 2026
AI used in Aur0ra ransomware testing and execution
The GOLD OGRE threat group has used AI extensively to develop tools and to orchestrate and execute ransomware operationsCategories: Threat ResearchTags: AI, Ransomware, Aur0ra
October 27, 2026
Node2Shell (CVE-2026-111497) in active exploitation
Categories: Threat ResearchTags: advisory, vulnerability, Node2Shell, Brotli
October 20, 2026
Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)
Categories: Threat ResearchTags: advisory, vulnerability, php
October 19, 2026
BRONZE SANDCASTLE deploys modified Meterpreter shells
<p>The China-based threat group uses DLL sideloading in these attacks</p>Categories: Threat ResearchTags: BRONZE SANDCASTLE, Meterpreter, Sandboxie
October 18, 2026
Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion
No novelty required to be effectiveCategories: Threat Research, X-ops, Sophos SecOpsTags: incident response
ConnectWise Cloud Backup application abused in cross-tenant token sweep
<p>Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants</p>Categories: Threat ResearchTags: connectwise
October 12, 2026
building intent-based access control without reading minds
<p>This article was first published <a href="https://www.linkedin.com/pulse/building-intent-based-access-control-without-reading-minds-borges-dxg6e/" target="_self">on LinkedIn</a>.</p>Categories: AI Research, Threat ResearchTags: AI, AI RESEARCH, Threat Research
October 4, 2026
Citrix NetScaler vulnerability (CVE-2026-88779) in active exploitation
Categories: Threat ResearchTags: advisory, vulnerability, Citrix
September 29, 2026
TerminalFix and Lorem Ipsum Loader enable covert tunneling
The activity is linked to a broader campaign that previously used a different delivery mechanismCategories: Threat ResearchTags: TerminalFix, clickfix, Lorem Ipsum Loader
September 27, 2026
Citrix NetScaler vulnerabilities (CVE-2026-88771, CVE-2026-88772) in active exploitation
Categories: Threat ResearchTags: advisory, vulnerability, Citrix
September 24, 2026
Kiteworks recommends server shutdown pending possible attack
Categories: Threat ResearchTags: advisory, Kiteworks