57
60
60
Google Warns of Pixel Firmware Security Flaw Exploited as Zero
60
60
Ivanti Pulse Secure Found Using 11-Year
60
60
60
60
60
New Ivanti Vulnerability Observed as Widespread Security Concerns Grow
60
New Critical AMI BMC Vulnerability Enables Remote Server Takeover and Bricking
60
60
57
Microsoft's May Patch Tuesday Fixes 38 Flaws, Including 2 Exploited Zero
60
57
60
60
New Dell BIOS Bugs Affect Millions of Inspiron, Vostro, XPS, Alienware Systems
60
Realtek SDK flaws exploited to deliver Mirai bot variant
60
60
60
60
Critical Flaws in AMI MegaRAC BMC Software Expose Servers to Remote Attacks
60
60
Android Car Malware Spreads Through Built
Kaspersky found MoYu Group malware infecting DoFun Android car head units via firmware updaters, enabling ad fraud and proxy botnet operations.
Kaspersky discovered in June 2026 the first documented malware specifically infecting Android-based car head units, spread through the built-in updater (TWCore) of DoFun head unit firmware via a dropper dubbed JarService. The multi-stage implant supports nine commands enabling unwanted ads, ad fraud, and additional module downloads, and installs the zhima reverse proxy module. The campaign is attributed with high confidence to the MoYu Group behind the BADBOX ad fraud and residential proxy scheme; the distribution issue was fixed after responsible disclosure.
58
60
60
60
Muhstik Botnet Attacks Tomato Routers to Harvest New IoT Devices
Unit 42 found a Muhstik botnet variant brute-forcing Tomato router web authentication to harvest IoT devices for crypto mining and DDoS attacks.
Palo Alto Networks Unit 42 researchers in December 2019 identified a new Muhstik botnet variant scanning Tomato routers on TCP 8080 and brute-forcing default admin credentials, targeting roughly 4,600 exposed devices found via Shodan. The variant also scans WordPress and Webuzo installations and exploits the Oracle WebLogic deserialization flaw CVE-2019-2725 for unauthenticated remote code execution. Muhstik, active since March 2018, self-propagates like a worm and typically monetizes infections through cryptocurrency mining and DDoS attacks controlled via an IRC C2 channel.
32
Researchers Reveal ReVault Attack Targeting Dell ControlVault3 Firmware in 100+ Laptop Models
60
60
60
60
60
60
60
60
60
60