Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware
Ravie LakshmananSep 11, 2026Vulnerability / Malware
Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center...
ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories
Ravie LakshmananSep 10, 2026Hacking News / Cybersecurity News
A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?”
An extension...
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog after they landed in attackers' crosshairs.
The vulnerabilities are...
ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories
Ravie LakshmananSep 03, 2026Hacking News / Cybersecurity News
The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A simple request...
Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones
The most common way into a company last year was to ask.
A web page tells the visitor to prove they are not a robot. While they read the instructions,...
Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets
Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX's artificial intelligence (AI)-powered coding assistant Cursor to break into target networks, according to findings from CloudSEK...
Berlin Refuses to Pay Hackers Who Stole Data From the City’s State Network
Berlin's state government has confirmed that it is the target of an extortion attempt following the August compromise of the city's state administrative network, and said it will not...
ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New...
Ravie LakshmananAug 27, 2026Hacking News / Cybersecurity News
A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one of the...
WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
Cybersecurity researchers have flagged two new malware families called WordlistLoader and SynkLoader that's used to deliver next-stage payloads and likely sell access to ransomware groups.
According to findings from...
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More
Ravie LakshmananAug 20, 2026Hacking News / Cybersecurity News
A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do.
Signed drivers get turned against...
