VTA

Fake Maccy Clipboard Manager Delivers Rust Infostealer to macOS Users Credited by Unsplash VTA-000187 – Fake Maccy Clipboard Manager Delivers Rust Infostealer to macOS Users A sophisticated macOS credential-theft campaign is targeting users through a fake version of the legitimate Maccy … Read More

Actively Exploited Adobe Joomla Langflow Vulnerabilities Credited by Unsplash VTA-000186 – Actively Exploited Adobe Joomla Langflow Vulnerabilities The U.S. Cybersecurity and Infrastructure Security Agency has added four security flaws to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation. These … Read More

Langflow RCE Exploited in AI – Agent – Driven Database Ransomware Activity Credited by Unsplash VTA-000185 – Langflow RCE Exploited in AI – Agent – Driven Database Ransomware Activity Security researchers have reported a ransomware and extortion incident involving a threat … Read More

Microsoft Defender Zero Days Expose Windows Systems Credited by Unsplash VTA-004565 – Microsoft Defender Zero Days Expose Windows Systems Microsoft recently warned of two zero-day vulnerabilities in its Defender software that have been exploited in attacks. The first vulnerability, tracked … Read More

Malware Targets Financial Institutions With Brushworm And Brushlogger Credited by Curated VTA-004564 – Malware Targets Financial Institutions With Brushworm And Brushlogger A targeted cyberattack against a South Asian financial institution leveraged two custom malware tools to establish persistence, steal sensitive … Read More

Fortinet Infrastructure Targeted in Campaign Using Open-Source AI Offensive Framework Credited by Freepik VTA-004563 – Fortinet Infrastructure Targeted in Campaign Using Open-Source AI Offensive Framework CyberStrikeAI marks a new era in cyber threats, where an open-source AI-native platform designed for … Read More

AI Enhanced Campaign Breaches 600+ FortiGate Firewalls Without Zero-Day Credited by Freepik VTA-004562 – AI Enhanced Campaign Breaches 600+ FortiGate Firewalls Without Zero-Day Amazon Threat Intelligence has uncovered a Russian-speaking, financially motivated threat actor that leveraged commercial generative AI services … Read More

Automated Cloud Service Abuse Enables TeamPCP’s Large‑Scale Ransomware Campaign Credited by Freepik VTA-004561 – Automated Cloud Service Abuse Enables TeamPCP’s Large‑Scale Ransomware Campaign TeamPCP, also known as PCPcat or ShellForce, is a cybercrime group that launched a massive worm-like campaign … Read More

Critical SQL Injection Flaw Exposes FortiClient EMS to Remote Code Execution Credited by Freepik VTA-004560 – Critical SQL Injection Flaw Exposes FortiClient EMS to Remote Code Execution Fortinet recently published a PSIRT advisory (FG-IR-25-1142) highlighting a critical security flaw in FortiClient EMS, the enterprise management server … Read More