VTA

AI Enhanced Campaign Breaches 600+ FortiGate Firewalls Without Zero-Day Credited by Freepik VTA-004562 – AI Enhanced Campaign Breaches 600+ FortiGate Firewalls Without Zero-Day Amazon Threat Intelligence has uncovered a Russian-speaking, financially motivated threat actor that leveraged commercial generative AI services … Read More

Automated Cloud Service Abuse Enables TeamPCP’s Large‑Scale Ransomware Campaign Credited by Freepik VTA-004561 – Automated Cloud Service Abuse Enables TeamPCP’s Large‑Scale Ransomware Campaign TeamPCP, also known as PCPcat or ShellForce, is a cybercrime group that launched a massive worm-like campaign … Read More

Critical SQL Injection Flaw Exposes FortiClient EMS to Remote Code Execution Credited by Freepik VTA-004560 – Critical SQL Injection Flaw Exposes FortiClient EMS to Remote Code Execution Fortinet recently published a PSIRT advisory (FG-IR-25-1142) highlighting a critical security flaw in FortiClient EMS, the enterprise management server … Read More

Malicious dYdX Libraries Used to Steal Crypto Wallets via npm and PyPI Credited by Freepik VTA-004559 – Malicious dYdX Libraries Used to Steal Crypto Wallets via npm and PyPI A sophisticated supply chain attack targeting dYdX, a popular decentralized finance (DeFi) … Read More

Malicious Bot Skills Signal a Shift in Crypto-Focused Attacks Credited by Freepik VTA-004558 – Malicious Bot Skills Signal a Shift in Crypto-Focused Attacks ClawHavoc represents a sophisticated supply chain attack targeting the ClawHub marketplace for OpenClaw AI bots, where attackers uploaded 341 … Read More

n8n Sandbox Breach Exposes Enterprise AI Systems to Complete Takeover Credited by Freepik VTA-004557 – n8n Sandbox Breach Exposes Enterprise AI Systems to Complete Takeover CVE-2026-25049 represents a critical remote code execution (RCE) vulnerability in n8n, a popular open-source workflow automation platform used … Read More

From Low-Privilege Workflow to Full System Takeover in N8N Credited by Freepik VTA-004556 – From Low-Privilege Workflow to Full System Takeover in N8N The n8n workflow automation platform, widely used to link applications, APIs and custom logic in automated business processes, was … Read More

Microsoft Releases Emergency Fix CVE-2026-21509 for Actively Exploited Office Zero-Day Credited by Freepik VTA-004555 – Microsoft Releases Emergency Fix CVE-2026-21509 for Actively Exploited Office Zero-Day In late January 2026, Microsoft released an emergency out-of-band patch for a serious zero-day vulnerability affecting its widely used Office suite. … Read More

Fortinet Blocks Exploited FortiCloudSSO Zero Day Vulnerability Credited by Freepik VTA-004554 – Fortinet Blocks Exploited FortiCloudSSO Zero Day Vulnerability Fortinet has disclosed a critical authentication bypass vulnerability in its FortiCloud SSO feature, actively exploited in the wild across FortiOS, FortiManager, … Read More