soc

Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite Executive summary  A group of Russian state-supported cyber actors has been targeting and compromising various Western government and commercial organizations using the Zimbra Collaboration Suite (ZCS) software since at least July 2025. The Russian state-supported advanced persistent threat (APT) group’s activity is […]

The dark token economy is a parallel market where unauthorized proxy services resell access to frontier LLMs like Claude, GPT, and Gemini at up to 90% below official pricing. Proxy operators source tokens through fraudul

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability CVE-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability   CVE-2026-63030 WordPress Core Interpretation Conflict Vulnerability   CVE-2026-60137 WordPress Core SQL Injection Vulnerability These types of vulnerabilities are frequent […]

CVE-2026-6875 Hits ServiceNow AI Platform Attackers are reportedly exploiting CVE-2026-6875, a critical pre-authentication vulnerability in the ServiceNow AI Platform . The flaw can allow an unauthenticated attacker, und

SonicWall SMA Flaws Lead to KNUCKLEBALL Malware SonicWall SMA 1000 appliances were compromised in a zero-day campaign involving custom malware, root-level access, credential gathering, and attempts to move deeper into vi