…North Carolina Ports confirms cyberattack disrupting operations Hackers disrupt over 30 Minnesota water utilities in coordinated OT attack Closing the Identity Gaps in Critical Infrastructure Security EU sanctions Russian GRU military hackers…
Critical Palo Alto VPN bug now exploited by Qilin ransomware gang By Sergiu Gatlan July 21, 2026 06:12 AM The Qilin ransomware gang is exploiting a critical PAN-OS GlobalProtect authentication…
…For instance, Multiple Ivanti zero-days have been exploited in recent years to breach a wide range of targets (such as government agencies worldwide), including two critical Endpoint Manager Mobile (EPMM) vulnerabilities…
CISA orders urgent action on actively exploited Langflow RCE flaw By Sergiu Gatlan July 22, 2026 07:43 AM The Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government…
…Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their systems by Saturday against ongoing attacks exploiting a critical vulnerability in the Oracle E-Business Suite (EBS) financial application…
…Although hacktivism typically refers to cyberattacks intended to promote a political or ideological message rather than cause widespread damage, the two groups have been linked to multiple attacks targeting critical infrastructure in…
…Cybersecurity and Infrastructure Security Agency (CISA) added the two flaws to its Known Exploited Vulnerabilities (KEV) Catalog on July 14, ordering Federal Civilian Executive Branch (FCEB) agencies to patch their systems within…
…Last Thursday, the Metabase business intelligence and data analytics platform announced that its Cloud hosting service had been targeted in data-theft attacks leveraging a critical zero-day SQL injection vulnerability . In…
…First, the infrastructure used in the attacks overlaps with a covert VPS network previously associated with multiple China-linked actors. Another clue is the presence of Chinese-language artifacts in earlier phishing…
…site as one of 43 new victims likely targeted in data theft attacks against Internet-exposed PTC Windchill and FlexPLM instances exploiting a critical improper input validation vulnerability tracked as CVE-2026…
