Search: “Campaign Classic”

112 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 156 Ransomware 75 Vulnerability 65 Threat actor 61 Phishing & fraud 32 Data breach 32 Exploit / PoC 31 Policy & legal 8 Advisory 6 Industry 2 Research 2 AI safety & security 2

SeverityAll critical 127 high 208 medium 112 low 22 info 3

August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse?

August 2026 Patch Tuesday forecast urges risk-based triage as AI inflates CVE volume, flags actively exploited SharePoint RCE CVE-2026-50522 and LegacyHive Windows flaw.

July 2026 Patch Tuesday set records with over 600 CVEs, including 405 for Windows 11 and Server 2025, though only two were exploited zero-days and one was publicly disclosed. The author recommends prioritizing known-exploited and internet-facing vulnerabilities, matching patches to high-risk systems, and accelerating ring-based deployment toward Microsoft's suggested three-day turnaround. Notable items include actively exploited SharePoint RCE CVE-2026-50522 enabling machine key theft, the unassigned LegacyHive Windows User Profile Service flaw, and several end-of-servicing dates for Windows and Exchange.

Help Net SecurityAug 25, 06:52 UTC · 22d agoIndustry in the wildCVE-2026-505221

This couple lost £15,000 to scammers. We followed the money

Security AffairsJul 13, 20:12 UTC · Jul 13, 2021Phishing & fraud

Cryptocurrency mining operations target Windows Server, Redis and Apache Solr servers online

Security AffairsMar 12, 07:28 UTC · Mar 12, 2018Vulnerability CVE-2017-9805 CVE-2017-12629

NavRAT Uses US-North Korea Summit As Decoy For Attacks In South Korea

Cisco TalosMay 31, 23:00 UTC · May 31, 2018Malware

Targeted Attacks in the Middle East Using KASPERAGENT and MICROPSIA

Palo Alto Unit 42Jan 28, 20:33 UTC · Jan 28, 2022Malware

TA544 group behind a spike in Ursnif malware campaigns targeting Italy

Security AffairsOct 3, 19:45 UTC · Oct 3, 2021Malware

Snowshoe Spam Attack Comes and Goes in a Flurry

Cisco TalosAug 20, 09:38 UTC · Aug 20, 2014Vulnerability CVE-2013-2729

New Stealthier ZLoader Variant Spreading Via Fake TeamViewer Download Ads

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2021Malware

Twitter suspends two accounts used by DPRK hackers to catfish security researchers

The RecordDec 18, 00:00 UTC · Dec 18, 2022Exploit / PoC

The Ursnif Gangs keep Threatening Italy

Security AffairsMar 26, 13:45 UTC · Mar 26, 2019Malware

Thousands of consumer routers hacked by Russia's military

Ars Technica · SecurityApr 8, 11:00 UTC · Apr 8, 2026Vulnerability

Cybercriminals abused GitHub, YouTube and VirusTotal to push crypto-stealing malware

Help Net SecurityJun 19, 00:00 UTC · Jun 19, 2026Malware

From Windows to macOS: ClickFix attacks shift tactics with ChatGPT

Security AffairsMar 17, 09:19 UTC · Mar 17, 2026Malware

Adwind Dodges AV via DDE

Cisco TalosSep 24, 14:45 UTC · Sep 24, 2018Malware

How phishing pages admit to being LLM

Kaspersky SecurelistOct 31, 10:00 UTC · Oct 31, 2024Phishing & fraud

GPU-thirsty hackers target architects, designers with cryptomining malware

The RecordSep 7, 17:40 UTC · Sep 7, 2023Malware

Osiris banking trojan shuts down as new Ares variant emerges

The RecordDec 9, 00:00 UTC · Dec 9, 2022Malware

Hundreds of Malicious Domains Registered Ahead of Prime Day

Infosecurity MagazineJul 7, 10:15 UTC · Jul 7, 2025Threat actor

Hackers Targeting Italian Corporate Banking Clients with New Web

The Hacker NewsMay 5, 11:49 UTC · May 5, 2023Malware

Experts warn of deliveries scams that use a COVID

Security AffairsApr 28, 13:11 UTC · Apr 28, 2020Phishing & fraud

Signal phishing campaign targets Germany’s Bundestag President Julia Klöckner

Security AffairsApr 24, 13:58 UTC · Apr 24, 2026Threat actor

Magecart Targets Emergency Services

The Hacker NewsJun 9, 07:07 UTC · Jun 9, 2020Vulnerability

Crypto-Doubling Scams Surge Following Presidential Debate

Infosecurity MagazineOct 3, 10:15 UTC · Oct 3, 2024Phishing & fraud

Emotet resumes spam operations, switches to OneNote

Cisco TalosMar 22, 19:41 UTC · Mar 22, 2023Malware

Experts discovered a new tiny Pos Malware dubbed Pinkkite

Security AffairsMar 15, 06:31 UTC · Mar 15, 2018Malware

Nord Stream pipeline disinformation fits pattern of Russian information warfare

CyberScoopSep 30, 18:03 UTC · Sep 30, 2022Threat actor

'Jigsaw Puzzle' Phishing Attacks Use Morse Code to Hide

Infosecurity MagazineAug 16, 10:19 UTC · Aug 16, 2021Phishing & fraud

Iranian cyberspies target professionals at medical research organizations in the US, Israel

The RecordJan 26, 00:00 UTC · Jan 26, 2023Vulnerability

Mobile Malware Campaign targets users in India through rogue MDM service

Security AffairsJul 13, 14:36 UTC · Jul 13, 2018Malware

Discovering CAPTCHA Protected Phishing Campaigns

Palo Alto Unit 42Jun 6, 12:16 UTC · Jun 6, 2024Threat actor

The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary, (Mon, Aug 31st)

A SANS honeypot caught a real coding-agent session routed to a rogue "free" LLM endpoint, exposing a Windows user's transcript and tool outputs.

A SANS analyst describes how an internet-exposed inference honeypot was discovered, relabeled with sought-after model names like DeepSeek, and enrolled in infrastructure serving "free" LLM backends. On 2026-08-30 an opencode terminal coding agent sent an 88-message, 224 KB transcript 210 times in 91 seconds via a China Unicom relay, exposing directory listings, tool outputs and read file portions. The analyst frames tool-enabled agents treating model endpoints as trusted control planes as a novel risk — a "rogue model endpoint" that could request tool executions on the user's machine.

SANS Internet Storm CenterAug 31, 20:00 UTC · 15d agoAI safety & security1