Schedule a Demo

Cyber Security

Cyber Security
Cyber Security

Hackers Abuse PowerShell Commands to Deliver SmartRAT Through Brazilian Bank Phishing Page

hackers-abuse-powershell-commands-to-deliver-smartrat-through-brazilian-bank-phishing-page

A new cyberattack campaign has emerged, using cleverly crafted phishing pages and PowerShell tricks to deliver a dangerous piece of malware called SmartRAT. The attack targets Brazilian banking customers and combines social engineering with AI-generated web pages to make the threat feel disturbingly real. Researchers say the campaign marks a troubling shift in how attackers […]

Microsoft Confirms Defender RoguePlanet 0-Day Exploit and Working to Release Patch

microsoft-confirms-defender-rogueplanet-0-day-exploit-and-working-to-release-patch

Microsoft has officially acknowledged a critical zero-day vulnerability in Microsoft Defender, publicly dubbed “RoguePlanet,” and confirmed it is actively developing a security patch to address the flaw. Tracked as CVE-2026-50656, the vulnerability was formally published on June 16, 2026, by the Microsoft Security Response Center (MSRC) and carries a CVSS score of 7.8 (Important) under […]

Google Cloud Vertex AI Allows Attacker to Hijack Victims Model and Poison it

google-cloud-vertex-ai-allows-attacker-to-hijack-victims-model-and-poison-it

A newly disclosed vulnerability in Google Cloud Vertex AI could have allowed attackers to hijack machine learning model uploads and execute malicious code in victim environments, according to research shared with Google under responsible disclosure. The issue affects the Vertex AI Python SDK (google-cloud-aiplatform) and stems from a combination of predictable cloud storage bucket naming […]

CISA Warns of Oracle PeopleSoft 0-Day Vulnerability Exploited in Ransomware Attacks

cisa-warns-of-oracle-peoplesoft-0-day-vulnerability-exploited-in-ransomware-attacks

CISA has added a critical Oracle PeopleSoft vulnerability, tracked as CVE-2026-35273, to its Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. The flaw affects Oracle PeopleSoft Enterprise PeopleTools and enables unauthenticated attackers to gain full control over affected systems. The vulnerability is classified under CWE-306 (Missing Authentication for Critical Function), indicating a […]

UNC3753 Uses Screen-Sharing Sessions and RMM Tools to Exfiltrate Sensitive Legal Data

unc3753-uses-screen-sharing-sessions-and-rmm-tools-to-exfiltrate-sensitive-legal-data

A sophisticated cybercriminal group has been quietly targeting law firms and professional services organizations across the United States since the beginning of 2026. The campaign is financially motivated and relies heavily on deception rather than technical exploits. Victims are manipulated into handing over access to their own systems, and by the time they realize what […]

The Half-Life of Threat Intelligence: WhenDoesan IOC Stop Being Useful?

the-half-life-of-threat-intelligence:-whendoesan-ioc-stop-being-useful?

The concept of the IOC — the Indicator of Compromise — sits at the operational heart of modern threat detection. Block the IP. Flag the domain. Quarantine the hash. The logic is clean and satisfying. But embedded in every IOC is an invisible timestamp that most detection pipelines never read.  Intelligence ages. It decays. And […]

Novo Nordisk Confirms Cyber Attack Hackers Accessed Patient Medical Data and Internal AI Assets

novo-nordisk-confirms-cyber-attack-hackers-accessed-patient-medical-data-and-internal-ai-assets

Danish pharmaceutical giant Novo Nordisk has confirmed a cyberattack in which threat actors gained unauthorized access to internal IT systems, exfiltrating pseudonymized patient data from clinical trials and, according to the alleged attackers, a trove of proprietary AI model assets. Novo Nordisk disclosed the incident on June 11, 2026, stating that attackers copied “certain non-public […]

Nearly 14,000 SimpleHelp Servers Exposed Amid Critical Authentication Bypass Disclosure

nearly-14,000-simplehelp-servers-exposed-amid-critical-authentication-bypass-disclosure

Nearly 14,000 internet-facing SimpleHelp servers are exposed following the disclosure of a critical authentication bypass vulnerability tracked as CVE-2026-48558. The flaw raises serious concerns for enterprises using the remote monitoring and management (RMM) platform. Horizon3.ai identified the vulnerability through its autonomous research initiative “Sua Sponte,” which leverages AI-driven analysis to uncover exploitable flaws. The issue […]

Microsoft Site Showing Warning Following Certificate Expiry

microsoft-site-showing-warning-following-certificate-expiry

Microsoft seems to have failed certificate management after a domain used by sysadmins globally to test connectivity to Microsoft 365 started generating untrusted connection warnings in browsers on Monday. The connectivity.office.com domain a widely relied-upon tool for IT professionals to verify their network’s connectivity to Microsoft 365 and confirm that firewalls aren’t silently blocking critical […]

PromptSnatcher Ad Blocker Extensions Steal AI Chats From ChatGPT, Claude, and Gemini

promptsnatcher-ad-blocker-extensions-steal-ai-chats-from-chatgpt,-claude,-and-gemini

Two browser extensions masquerading as ad blockers have been caught secretly recording private conversations from ChatGPT, Claude, Gemini, and five other major AI platforms. The extensions, named “Smart Adblocker” and “Adblock for Browser,” were installed by roughly 90,000 users before the scheme was uncovered. Users genuinely received ad-blocking functionality while their most sensitive AI conversations […]