⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Law enforcement training is not keeping pace with the volume and rapid evolution of cybercrimes. Officers primarily need to learn the basics of cyber investigation, but insufficient focus and budgets hinder progress.
This week's ThreatsDay bulletin covers multiple critical security issues including a Gogs 10.0 RCE vulnerability, n8n workflow-to-RCE attacks, and signed driver abuse by threat actors. Legitimate applications are being weaponized to help malware blend in with trusted software.
The U.S. government warned of an active threat campaign targeting critical infrastructure organizations using AI-generated exploit scripts against Siemens S7 PLCs. The activity is assessed to be broader in scope than just Siemens PLCs, with attackers using internet scanning services like Censys and ZoomEye to identify exposed devices.
Advisory at a Glance Title A Tale of Two SOCs: Insights From Two Red Team Assessments Original Publication August 25, 2026 Executive Summary The Cybersecurity and Infrastructure Security Agency (CISA) conducted simultaneous red team assessments at two organizations and observed different defensive outcomes. In both environments, the red team achieved full domain compromise and accessed sensitive business systems (SBSs) and cloud resources.
Pakistan's Transparent Tribe threat actor has refreshed its toolset for cyberattacks targeting Afghan organizations. The group is targeting immature organizations run by the Taliban but has been less successful against prepared Indian government agencies.
A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files for remote code execution on the server. The flaw affects millions of WordPress sites using the popular page builder plugin.