‘Stanley’ Toolkit Turns Chrome Into Undetectable Phishing Vector Summary Researchers at Varonis have detailed a malware‑as‑a‑service kit called “Stanley” that produces malicious Chrome extensions capable of overlaying attacker‑controlled phishing pages…
Critical Telnet Server Flaw Exposes Forgotten Attack Surface Summary A critical authentication bypass in the GNU InetUtils telnetd server (CVE-2026-24061) allows attackers to bypass authentication by injecting an “-f root”…
Dozens more are charged in Ploutus ATM jackpotting conspiracy Summary The US Department of Justice has unveiled a federal grand jury indictment charging 31 people accused of using Ploutus malware…
Let them eat sourdough: ShinyHunters claims Panera Bread as stolen credentials victim Summary ShinyHunters claims it has stolen data from Panera Bread — reportedly more than 14 million records containing…
Office zero-day exploited in the wild forces Microsoft OOB patch Summary Microsoft has released an out-of-band (OOB) Office patch to address CVE-2026-21509, a zero-day security feature bypass vulnerability with a…
Daily briefing: Largest ever ‘superposition’ pushes quantum boundary Summary Physicists observed quantum interference in clusters of about 7,000 sodium atoms — roughly 8 nm across — with superpositions extending 133…
Russian state hackers likely behind wiper malware attack on Poland’s power grid Summary Researchers at cybersecurity firm ESET attribute a late‑December cyberattack on Poland’s energy sector to Sandworm, a Russia‑linked…
Exploited Zero-Day Flaw in Cisco UC Could Affect Millions Summary Cisco has disclosed and patched CVE-2026-20045, a remote code execution vulnerability in its Unified Communications products, including Unified Communications Manager…
Patch or die: VMware vCenter Server bug fixed in 2024 under attack today Summary A critical out-of-bounds write vulnerability in VMware vCenter Server’s DCERPC implementation (CVE-2024-37079) with a CVSS score…
Fortinet admits FortiGate SSO bug still exploitable despite December patch Summary Fortinet has confirmed that attackers are still able to bypass a December patch for a critical SAML-based single sign-on…
