⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Cisco Talos disclosed multiple vulnerabilities across three software products: WolfSSL, GeoVision, and VTK-DICOM. WolfSSL, an open-source library for secure data transfer, had three flaws, including improper input validation (CVE-2026-28739, CVE-2026-25106) and an integer underflow (CVE-2026-33091). GeoVision, a security technology provider, was found to have 14 vulnerabilities spanning 37 CVEs, including memory corruption (CVE-2026-12488), OS command injection (CVE-2026-12486), buffer overflows (CVE-2026-12485), and privilege escalation (CVE-2026-42368).
Google has temporarily disabled an AI feature in Google Earth that allowed users to generate artificial images based on real satellite data. The feature, launched on July 30 using Google’s Nano Banana 2 image generator, enabled users to create photorealistic deepfakes by combining text prompts with real-world geographic details.
The China-nexus threat actor UAT-7810 is expanding its Operational Relay Box (ORB) networks by exploiting vulnerabilities in unpatched Ruckus and ASUS routers to deploy custom malware, including upgraded backdoors like "LONGLEASH" and "DOGLEASH." These ORB networks serve as covert infrastructure for other APT groups, allowing them to mask their origins and route malicious traffic through compromised edge devices, bypassing traditional defenses. The group's investment in multi-platform tools highlights their focus on resilience and evasion, posing a significant blind spot for defenders.
Recently, the AhnLab SEcurity intelligence Center (ASEC) identified a case of phishing emails that disguise themselves as payment confirmation notices.
AhnLab ASEC identified phishing emails posing as payment confirmations from Korean companies. These emails contain malicious XLS files that infect systems upon opening.
AhnLab ASEC identified phishing emails disguised as payment confirmation notices. The emails impersonate employees of a Korean company and trick recipients into opening a malicious XLS file.