⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Threat actors are abusing FTP server banners to hide commands that deliver two new remote access trojans named E4del and PINHOLE. The malware is delivered through malicious FTP banners that appear legitimate to users. E4del and PINHOLE provide attackers with remote access to compromised systems.
Toronto's Hospital for Sick Children (SickKids) reported a data breach exposing personal information of current and former employees and job applicants. The incident stemmed from a flaw in third-party software used by the hospital.
Cisco published security updates addressing nine vulnerabilities in Crosswork platforms and Secure Workload Software, with five of them scoring the maximum CVSS 10.0 severity rating. The critical flaws include CVE-2026-20353, CVE-2026-20354, CVE-2026-20355, CVE-2026-20356, and CVE-2026-20357, all SQL injection or missing authentication vulnerabilities.
While monitoring Android threats in June 2026, we discovered a new piece of Android malware. What struck us as unusual was that it installed like an ordinary user app yet made no attempt to disguise itself as legitimate software: it had no user interface at all.
Ransomware rarely appears out of nowhere. Before encryption, extortion, or data theft begins, attackers often spend time establishing access, stealing credentials, moving laterally, and identifying valuable systems.
A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-19478 (CVSS score: 9.4), a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without requiring credentials, user interaction, or obscure configuration.