…claim that ViPNet’s update infrastructure itself was compromised. Malware toolset HelloInjector runs its embedded payload, which Kaspersky named HelloProxy, in memory and contacts the command-and-control (C2) server to receive…
Ubiquiti patches three max severity UniFi OS vulnerabilities By Sergiu Gatlan May 22, 2026 08:00 AM Ubiquiti has released security updates to patch three maximum severity vulnerabilities in UniFi OS that…
…Microsoft fixes BitLocker recovery issue only for Windows 11 users Microsoft fixes Windows Autopatch bug installing restricted drivers Microsoft confirms April Windows updates cause backup failures April KB5083769 Windows 11 update causes…
…After months of inactivity, XCSSET has resurfaced with an updated version, v40, that features enhanced evasion techniques and introduces two new components, researchers have found. Researchers at Palo Alto Networks' Unit 42…
…However, any credentials typed in are delivered to a Telegram channel controlled by the attacker. Unlike the more common phishing pages that capture username and password pairs, the campaign uses a live…
…Personal and third-party devices may be loosely controlled or entirely unmanaged. Session trust persists even if device posture degrades mid-session. Identity signals and endpoint signals sit in separate tools with…
…Microsoft fixes Windows Autopatch bug installing restricted drivers Microsoft May 2026 Patch Tuesday fixes 120 flaws, no zero-days Windows 11 KB5089549 & KB5087420 cumulative updates released Microsoft releases emergency updates to fix…
…In a subsequent update, the company revealed that "initial analysis indicates a potential cross-service issue impacting Office for the web experiences." Microsoft has also tagged this ongoing outage as an incident…
…Dell iDRAC9 (PowerEdge BMC) DSA-2026-312 High, 7.8 No BMC flaws affect control beneath the operating system. HP HP PC BIOS (InsydeH2O tools) HPSBHF04134 High, 7.8 No Firmware-update…
ShapedPlugin update flow hacked to infect WordPress sites By Bill Toulas June 18, 2026 08:55 AM Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack that distributed infected…