Federal agencies operating on-premises Microsoft SharePoint Server are under a hard patch deadline today — July 4, 2026 — after the U.S. Cybersecurity and Infrastructure Security Agency confirmed on ...

SOCRadar researchers found one operator logged into both INC Ransom and Lynx negotiation panels using FortiBleed’s own ...

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your security tools look.

A notorious ransomware group secretly infiltrated the network of a major company for up to two months by hiding command and control (C&C) traffic in Microsoft Teams, before unleashing their attack, ...

DragonForce ransomware used a custom malware named 'Backdoor.Turn' to hide command-and-control traffic inside Microsoft Teams relay infrastructure. The backdoor abuses the Traversal Using Relays ...

Our tracking of OceanLotus activities from 2024–2026 reveals a shift in operational focus. During this period, the Vietnam-aligned OceanLotus adopted a more selective approach to external operations ...

Symantec confirms DragonForce ransomware operators used Microsoft Teams TURN relays for covert C2 traffic Custom Go‑based RAT “Backdoor.Turn” masked malicious activity as normal Teams communications ...

Roundcube Webmail administrators are being pressed to install emergency updates after maintainers fixed a set of security flaws that could expose email systems to database manipulation, script ...

A China-linked espionage campaign targeted exposed REDCap servers to deploy the InfiniteRed malware and steal sensitive data from a medical institution in North America. Google Threat Intelligence ...