Unit 42 details recent Iranian cyberattack activity, sharing direct observations of phishing, hacktivist activity and cybercrime. We include recommendations for defenders.
The post Threat Brief: March 2026 Escalation of Cyber Risk Related to Iran appeared first on Unit 42.
Cisco Talos continues to monitor the ongoing conflict in the Middle East. As always, we will be watching closely for any cyber-related incidents that are tied to the conflict.
Crims hope for payday from malicious payloads rather than stealing access tokens Microsoft has warned organizations about ongoing OAuth abuse scams that use phishing emails and URL redirects to infect victims' machines with malware and take over their devices.…
Learn how to integrate HSMs for Post-Quantum Key Encapsulation in MCP environments. Protect AI infrastructure with ML-KEM and quantum-resistant hardware.
The post Hardware Security Module Integration for Post-Quantum Key Encapsulation appeared first on Security Boulevard.
Researchers warn that a newly identified open-source AI security testing platform called CyberStrikeAI was used by the same threat actor behind a recent campaign that breached hundreds of Fortinet FortiGate firewalls. [...]
De multiples vulnérabilités ont été découvertes dans Docker Desktop. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données. Google indique que la vulnérabilité...
La société a subi une cyberattaque, mais a pris des mesures de sécurité pour atténuer les risques, et il n'y a pas eu de fuite de données personnelles ou d'impact significatif sur les opérations de l'entreprise.
De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
In late 2025, the OPCOPRO "Truman Show" scam used familiar KYC workflows to establish trust before stealing funds and identity documents. This incident reveals a critical gap: identity verification designed for regulatory compliance falls apart when attackers leverage real peoples’ information and...
RXNT suffered a cybersecurity incident where an unauthorized actor obtained certain data stored on their system, including names, dates of birth, and Social Security numbers, between March 1, 2026, and March 3, 2026. The incident was discovered on March 3, 2026. RXNT notified affected customers on M...
mailcow 2025-01a - Host Header Password Reset Poisoning
WordPress Backup Migration 1.3.7 - Remote Command Execution
Who should be directly liable for online infringement – the entity that serves it up or a user who embeds a link to it? For almost two decades, most U.S. courts have held that the former is responsible, applying a rule called the server test. Under the server test, whomever controls the server that...
Boss Mini v1.4.0 - Local File Inclusion (LFI)
WeGIA 3.5.0 - SQL Injection
Who should be directly liable for online infringement – the entity that serves it up or a user who embeds a link to it? For almost two decades, most U.S. courts have held that the former is responsible, applying a rule called the server test. Under the server test, whomever controls the server that...
Easy File Sharing Web Server v7.2 - Buffer Overflow
A system hardening measure could be bypassed.
A hobbyist developer's new app, which can detect nearby smart glasses, comes amid resistance to always-on recording and listening devices that invade people's privacy.