Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Amid discussions about how artificial intelligence can facilitate cybercrime, some threat.
Cybercriminals hijacked Google Ads searches for popular AI developer tools to funnel over 2,000 victims toward malicious download pages before quietly moving their operation onto claude.ai's own platform, turning the trusted domain into a delivery mechanism for credential-stealing malware.
Cisco has addressed a critical zero-day vulnerability, tracked as CVE-2026-20262, affecting its Catalyst SD-WAN Manager, formerly known as SD-WAN vManage. This flaw allows an authenticated remote attacker to create or overwrite files on the system’s underlying operating system, potentially leading to root privilege escalation.
Cisco has patched a zero-day vulnerability (CVE-2026-20262) in its Catalyst SD-WAN Manager, formerly known as SD-WAN vManage, which was exploited in the wild before fixes were widely deployed. The flaw allows authenticated attackers with write access to upload or overwrite files via the web UI, potentially leading to root privilege escalation.
ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel.
ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel driver for advanced stealthiness