⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The Warlock ransomware group, linked to China, is exploiting SharePoint vulnerabilities to attack water and telecom operators in Portuguese and Spanish-speaking nations. The group also targets government and education sectors, emphasizing the need for patching.
A Chinese threat actor known as Warlock is conducting ransomware attacks against large organizations in Spain and Portugal, displaying characteristics of both cybercrime gangs and state-sponsored APTs. The group's targeting of unexpected regions indicates a broader strategic agenda.
Cribl has introduced Cribl Detect, a SIEM solution that builds on its telemetry pipeline platform to provide detection, investigation, and response. It differs from traditional SIEMs by adding analytics to existing data flows rather than requiring data to be ingested into a separate engine.
The TIKTOUK toolkit is a credential collection system targeting WordPress sites, using multiple components to probe, extract, and recover credentials and secrets. It operates with a central hub that coordinates tasks and collects results, indicating a well-organized attack framework.
Symantec CBX is a new security solution now available worldwide, specifically designed to combat AI-accelerated threats. It represents a response to the evolving landscape where attackers use AI to enhance their operations.
CISA disclosed two missing authorization vulnerabilities (CVE-2026-101104, CVE-2026-96613) in Meari IoT Cloud Platform OpenAPI Service. These flaws allow authenticated users to manipulate other devices and access sensitive data.