FortiGate FortiCloud SSO Authentication Bypass: Active Exploitation of CVE-2025-59718/59719 for Credential Theft and Network Breach
CVE Analysis Center

FortiGate FortiCloud SSO Authentication Bypass: Active Exploitation of CVE-2025-59718/59719 for Credential Theft and Network Breach

Mar 11, 2026 Read →
Critical SAP FS-QUO and NetWeaver Vulnerabilities Exposed in March 2026 Security Patch Day: Immediate Action Required
CVE Analysis Center

Critical SAP FS-QUO and NetWeaver Vulnerabilities Exposed in March 2026 Security Patch Day: Immediate Action Required

Mar 11, 2026 Read →
APT28 Deploys BEARDSHELL and Customized COVENANT Malware for Targeted Cyber Espionage Against the Ukrainian Military
CVE Analysis Center

APT28 Deploys BEARDSHELL and Customized COVENANT Malware for Targeted Cyber Espionage Against the Ukrainian Military

Mar 11, 2026 Read →
ScarCruft Exploits Zoho WorkDrive and USB Malware to Compromise Air-Gapped Government and Defense Networks
CVE Analysis Center

ScarCruft Exploits Zoho WorkDrive and USB Malware to Compromise Air-Gapped Government and Defense Networks

Mar 1, 2026 Read →
Ongoing Cyberattack Exploits Sangoma FreePBX CVE-2025-64328: Over 900 Instances Compromised by Web Shells
CVE Analysis Center

Ongoing Cyberattack Exploits Sangoma FreePBX CVE-2025-64328: Over 900 Instances Compromised by Web Shells

Mar 1, 2026 Read →
ManoMano Zendesk Data Breach Exposes 38 Million Customers Across Europe: Incident Analysis and Security Implications
CVE Analysis Center

ManoMano Zendesk Data Breach Exposes 38 Million Customers Across Europe: Incident Analysis and Security Implications

Mar 1, 2026 Read →
Malicious Go Module github.com/xinfeisoft/crypto Targets Ubuntu and CI/CD Environments With Rekoobe Backdoor and Credential Theft
CVE Analysis Center

Malicious Go Module github.com/xinfeisoft/crypto Targets Ubuntu and CI/CD Environments With Rekoobe Backdoor and Credential Theft

Mar 1, 2026 Read →
Critical CVE-2026-21902 Vulnerability in Juniper Networks PTX Series Routers Running Junos OS Evolved: Full Device Takeover Risk and Mitigation Steps
CVE Analysis Center

Critical CVE-2026-21902 Vulnerability in Juniper Networks PTX Series Routers Running Junos OS Evolved: Full Device Takeover Risk and Mitigation Steps

Mar 1, 2026 Read →
APT37’s Ruby Jumper Malware Targets Air-Gapped Windows Networks with USB-Based Attacks
CVE Analysis Center

APT37’s Ruby Jumper Malware Targets Air-Gapped Windows Networks with USB-Based Attacks

Mar 1, 2026 Read →
UAT-9921 Targets Technology and Financial Sectors with VoidLink Malware via Apache Dubbo Vulnerabilities
CVE Analysis Center

UAT-9921 Targets Technology and Financial Sectors with VoidLink Malware via Apache Dubbo Vulnerabilities

Feb 15, 2026 Read →
Trezor and Ledger Users Targeted by Sophisticated Snail Mail Phishing Attacks: Cryptocurrency Wallet Security Alert
CVE Analysis Center

Trezor and Ledger Users Targeted by Sophisticated Snail Mail Phishing Attacks: Cryptocurrency Wallet Security Alert

Feb 15, 2026 Read →
Technical Analysis of CANFAIL Malware Targeting Ukrainian Defense and Energy Sectors by Suspected Russian Threat Actor
CVE Analysis Center

Technical Analysis of CANFAIL Malware Targeting Ukrainian Defense and Energy Sectors by Suspected Russian Threat Actor

Feb 15, 2026 Read →
Louis Vuitton, Dior, and Tiffany Fined $25 Million for SaaS Customer Management Data Breaches in South Korea
CVE Analysis Center

Louis Vuitton, Dior, and Tiffany Fined $25 Million for SaaS Customer Management Data Breaches in South Korea

Feb 15, 2026 Read →
Lazarus Group Targets npm, PyPI, and GitHub Developers With Fake Job Recruiter Malware Campaign
CVE Analysis Center

Lazarus Group Targets npm, PyPI, and GitHub Developers With Fake Job Recruiter Malware Campaign

Feb 15, 2026 Read →
Google Chrome 145 Security Update: Patch Addresses 11 Critical Vulnerabilities, Including High-Severity Remote Code Execution Risks
CVE Analysis Center

Google Chrome 145 Security Update: Patch Addresses 11 Critical Vulnerabilities, Including High-Severity Remote Code Execution Risks

Feb 15, 2026 Read →
Coordinated State-Sponsored Cyber Attacks Target Battlefield Management and Defense Supply Chains: Google Links China, Iran, Russia, North Korea
CVE Analysis Center

Coordinated State-Sponsored Cyber Attacks Target Battlefield Management and Defense Supply Chains: Google Links China, Iran, Russia, North Korea

Feb 15, 2026 Read →
Claude LLM Artifacts Exploited to Distribute Mac Infostealer Malware via ClickFix Attack Chain Targeting macOS Users
CVE Analysis Center

Claude LLM Artifacts Exploited to Distribute Mac Infostealer Malware via ClickFix Attack Chain Targeting macOS Users

Feb 15, 2026 Read →
Google Gemini AI Under Attack: APTs and Cybercriminals Exploit Platform Across the Entire Cyber Kill Chain
CVE Analysis Center

Google Gemini AI Under Attack: APTs and Cybercriminals Exploit Platform Across the Entire Cyber Kill Chain

Feb 12, 2026 Read →
February 2026 Security Patch Report: Microsoft, SAP, Intel, Adobe, and 60+ Vendors Address Critical Vulnerabilities in OS, Cloud, and Network Platforms
CVE Analysis Center

February 2026 Security Patch Report: Microsoft, SAP, Intel, Adobe, and 60+ Vendors Address Critical Vulnerabilities in OS, Cloud, and Network Platforms

Feb 12, 2026 Read →
SolarWinds Web Help Desk Critical Vulnerabilities: Unauthenticated RCE and Authentication Bypass Fixed in Emergency Patch
CVE Analysis Center

SolarWinds Web Help Desk Critical Vulnerabilities: Unauthenticated RCE and Authentication Bypass Fixed in Emergency Patch

Feb 1, 2026 Read →
Under Armour Customer Data Breach 2025: Technical Analysis of Everest Ransomware Attack and Exposed Email Addresses
CVE Analysis Center

Under Armour Customer Data Breach 2025: Technical Analysis of Everest Ransomware Attack and Exposed Email Addresses

Jan 25, 2026 Read →
StackWarp (CVE-2025-29943): Critical SEV-SNP Vulnerability in AMD Zen 1–5 CPUs Exposes Confidential Computing to Privilege Escalation and Key Theft
CVE Analysis Center

StackWarp (CVE-2025-29943): Critical SEV-SNP Vulnerability in AMD Zen 1–5 CPUs Exposes Confidential Computing to Privilege Escalation and Key Theft

Jan 25, 2026 Read →
Sophisticated Multi-Stage Phishing Attack Exploits Microsoft Windows in Russian Organizations Using Amnesia RAT and Hakuna Matata Ransomware
CVE Analysis Center

Sophisticated Multi-Stage Phishing Attack Exploits Microsoft Windows in Russian Organizations Using Amnesia RAT and Hakuna Matata Ransomware

Jan 25, 2026 Read →
Sandworm’s DynoWiper Attack Targeting Polish Combined Heat and Power and Renewable Energy Management Systems: Incident Analysis and Lessons Learned
CVE Analysis Center

Sandworm’s DynoWiper Attack Targeting Polish Combined Heat and Power and Renewable Energy Management Systems: Incident Analysis and Lessons Learned

Jan 25, 2026 Read →