⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Following GreenPlasma, <a...
LegacyHive is a new Windows proof-of-concept (PoC) exploit released by the threat actor Nightmare-Eclipse, following previous disclosures like GreenPlasma, YellowKey, MiniPlasma, RoguePlanet, and GreatXML. The PoC targets Windows profile initialization abuse through offline registry manipulation, exploiting vulnerabilities that may not have been fully patched in Microsoft's July 2026 Patch Tuesday updates. This technique could allow attackers to escalate privileges or maintain persistence on compromised systems.
n8n patched a high-severity expression-sandbox escape vulnerability (GHSA-gv7g-jm28-cr3m, CVSS 8.7) that lets authenticated workflow editors execute OS commands on the n8n server. Security Joes discovered the flaw while probing n8n's February fix for CVE-2026-27577 for bypasses.
Cyble's analysis of the global threat landscape in H1 2026 reveals 261 distinct threat actor profiles operating simultaneously. Nation-state APT groups are the largest category at 45.2%, followed by ransomware operators at 28.7%, highlighting the dominance of state-sponsored cyber threats.
Cyble's analysis of the global threat landscape in H1 2026 reveals 261 distinct threat actor profiles operating simultaneously. Nation-state APT groups are the largest category at 45.2%, followed by ransomware operators at 28.7%, highlighting the dominance of state-sponsored cyber threats.
You may have heard your peers say, “Cybercrime has become industrialized.” But did you have any proof? We do.