JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware
What's new: A new threat actor, tracked as JINX-0164, is targeting cryptocurrency firms using recruitment-themed social engineering tactics and custom...
Year: 2026
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal
What's new: Microsoft has criticized the public disclosure of multiple zero-day vulnerabilities affecting Windows components, including Defender and BitLocker, by...
NSAuditor AI EE 0.15.4 Closes the Silent-Overwrite ?versionId= Attack and Differentiates Public WRITE-Class S3 Access
Nsasoft US LLC has shipped NSAuditor AI EE 0.15.4, the forty-second consecutive trio-publish of its local-first, zero-data-exfiltration enterprise security scanner....
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
What's new: Threat actors are exploiting a critical vulnerability (CVE-2026-35616, CVSS score: 9.1) in FortiClient Endpoint Management Server (EMS) to...
Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code
What's new: A critical RCE vulnerability has been disclosed in Gogs, allowing any authenticated user to execute arbitrary code by...
