60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
Network Attack Trends: Internet of Threats (November 2020
60
Top 30 Critical Security Vulnerabilities Most Exploited by Hackers
60
60
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
US agencies warn of AI-assisted attacks on exposed Siemens PLCs; the week also saw GitLab CVE-2026-19478 exploited and trojanized npm packages found.
The weekly recap leads with a US government warning that threat actors use AI-generated scripts and Censys/ZoomEye scanning to attack internet-exposed Siemens S7 PLCs in water, energy and manufacturing, calling it an active threat. Other stories include active exploitation of GitLab CVE-2026-19478 (CVSS 9.4, unauthenticated project rewriting), 14 trojanized npm packages delivering the RedC2 4.0 Linux backdoor, and the Zombie Card attack that revives expired Visa cards for contactless payment fraud. It also covers suspected Russian clusters UNC6293, UNC7005 and UNC5976 phishing campaigns, a faster Cloudflare Workers Spectre JWT leak, and a bespoke Cl0p JSP web shell deployed after exploiting PTC Windchill flaws.
65
Muhstik Botnet Attacks Tomato Routers to Harvest New IoT Devices
Unit 42 found a Muhstik botnet variant brute-forcing Tomato router web authentication to harvest IoT devices for crypto mining and DDoS attacks.
Palo Alto Networks Unit 42 researchers in December 2019 identified a new Muhstik botnet variant scanning Tomato routers on TCP 8080 and brute-forcing default admin credentials, targeting roughly 4,600 exposed devices found via Shodan. The variant also scans WordPress and Webuzo installations and exploits the Oracle WebLogic deserialization flaw CVE-2019-2725 for unauthenticated remote code execution. Muhstik, active since March 2018, self-propagates like a worm and typically monetizes infections through cryptocurrency mining and DDoS attacks controlled via an IRC C2 channel.
32
May 2026 CVE Landscape
60
April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More
60
Over 60 Software Vendors Issue Security Fixes Across OS, Cloud, and Network Platforms
60
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited
60
Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero
60
Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero
60
Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever Shipped
60
Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs
60
Microsoft Patches 130 Vulnerabilities, Including Critical Flaws in SPNEGO and SQL Server
60
Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero
60
251 Amazon-Hosted IPs Used in Exploit Scan Targeting ColdFusion, Struts, and Elasticsearch
60
Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps Server
60
Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS Vulnerability
60
URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero
60
Microsoft’s Patch Tuesday Fixes 63 Flaws, Including Two Under Active Exploitation
60
3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update
60
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [13 January]
60