⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article describes NatJack, a new attack class that abuses assumptions in NAT implementations to hijack TCP sessions, spoof DNS, expose ports, and exhaust NAT tables. Researcher Malcolm Stagg presented findings at Black Hat USA 2026, with CVEs assigned for Windows and Linux implementations.
This article from Cyble provides a deep dive into Europe's ransomware landscape in H1 2026, highlighting 866 attacks and a shift toward organized threat actors. Qilin dominates with 158 incidents, concentrating on Germany and specific sectors like construction and manufacturing.
Cyble's report details a ransomware surge in Europe during the first half of 2026, with 866 attacks and a concentration of power among five major threat actors. Qilin emerged as the top threat, targeting Germany heavily and focusing on construction and professional services.
This article describes a widespread phishing campaign using adversary-in-the-middle (AitM) techniques to hijack Microsoft 365 accounts and steal payroll-related emails. The attackers use residential proxies and legitimate services to bypass security filters and maintain access.
This article details an active phishing campaign using adversary-in-the-middle techniques to hijack Microsoft 365 accounts. The goal is to identify financial workflow personnel and gather related emails, using residential proxies to evade detection.
[v2] PortSwigger researchers built an AI-assisted system called HTTP Terminator that discovered novel HTTP desynchronization techniques and identified a zero-day vulnerability in Apache Traffic Server, tracked as CVE-2026-63078. The system analyzed over 30,000 potential desync vectors across authorized bug bounty programs, identifying roughly 700 vulnerable targets including banks, government systems, and an airport.