Yearly Archives: 2026

Malware Targets Financial Institutions With Brushworm And Brushlogger Credited by Curated VTA-004564 – Malware Targets Financial Institutions With Brushworm And Brushlogger A targeted cyberattack against a South Asian financial institution leveraged two custom malware tools to establish persistence, steal sensitive … Read More

Fortinet Infrastructure Targeted in Campaign Using Open-Source AI Offensive Framework Credited by Freepik VTA-004563 – Fortinet Infrastructure Targeted in Campaign Using Open-Source AI Offensive Framework CyberStrikeAI marks a new era in cyber threats, where an open-source AI-native platform designed for … Read More

AI Enhanced Campaign Breaches 600+ FortiGate Firewalls Without Zero-Day Credited by Freepik VTA-004562 – AI Enhanced Campaign Breaches 600+ FortiGate Firewalls Without Zero-Day Amazon Threat Intelligence has uncovered a Russian-speaking, financially motivated threat actor that leveraged commercial generative AI services … Read More

Automated Cloud Service Abuse Enables TeamPCP’s Large‑Scale Ransomware Campaign Credited by Freepik VTA-004561 – Automated Cloud Service Abuse Enables TeamPCP’s Large‑Scale Ransomware Campaign TeamPCP, also known as PCPcat or ShellForce, is a cybercrime group that launched a massive worm-like campaign … Read More

Critical SQL Injection Flaw Exposes FortiClient EMS to Remote Code Execution Credited by Freepik VTA-004560 – Critical SQL Injection Flaw Exposes FortiClient EMS to Remote Code Execution Fortinet recently published a PSIRT advisory (FG-IR-25-1142) highlighting a critical security flaw in FortiClient EMS, the enterprise management server … Read More

Malicious dYdX Libraries Used to Steal Crypto Wallets via npm and PyPI Credited by Freepik VTA-004559 – Malicious dYdX Libraries Used to Steal Crypto Wallets via npm and PyPI A sophisticated supply chain attack targeting dYdX, a popular decentralized finance (DeFi) … Read More

Malicious Bot Skills Signal a Shift in Crypto-Focused Attacks Credited by Freepik VTA-004558 – Malicious Bot Skills Signal a Shift in Crypto-Focused Attacks ClawHavoc represents a sophisticated supply chain attack targeting the ClawHub marketplace for OpenClaw AI bots, where attackers uploaded 341 … Read More

n8n Sandbox Breach Exposes Enterprise AI Systems to Complete Takeover Credited by Freepik VTA-004557 – n8n Sandbox Breach Exposes Enterprise AI Systems to Complete Takeover CVE-2026-25049 represents a critical remote code execution (RCE) vulnerability in n8n, a popular open-source workflow automation platform used … Read More

From Low-Privilege Workflow to Full System Takeover in N8N Credited by Freepik VTA-004556 – From Low-Privilege Workflow to Full System Takeover in N8N The n8n workflow automation platform, widely used to link applications, APIs and custom logic in automated business processes, was … Read More