Daily Cybersecurity
Threat Intelligence

Operation Tovar: What It Was and How A Key Botnet Was Eliminated

This article from Heimdal Security analyzes new malware threats, detailing their infection vectors, capabilities, and indicators of compromise. Understanding these threats helps organizations strengthen their defensive posture against evolving malicious software.

Attackers Exploit N-able Patch Bypass Flaw on RMM Servers

This Dark Reading article reports on a newly discovered authentication bypass vulnerability, CVE-2026-18577, in N-able's N-central platform. Attackers are exploiting this flaw to gain administrator access to the remote monitoring and management servers.

N-able N-central exploitation results in RMM tool deployment

This Sophos Threat Research article describes how threat actors exploit CVE-2026-18577 to compromise N-able N-central servers. After gaining access, they deploy additional remote monitoring and management tools and establish network tunnels.

Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS

Cisco has disclosed an actively exploited high-severity vulnerability in ASA and FTD software. The flaw, CVE-2026-20349, allows an unauthenticated attacker to trigger a denial-of-service through crafted HTTP requests to the Remote Access SSL VPN service.

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Attackers are exploiting a recently patched directory-traversal vulnerability in Broadcom VMware vCenter to execute arbitrary code. They establish persistence using malicious cron jobs and reverse_ssh, with over 360 victims across 47 countries.

[deleted]