Phishing · Sep 17, 2026
CISA Recommends Use of Cyber Decoys to Spot Intruders Earlier
The Cybersecurity and Infrastructure Security Agency (CISA) has issued new guidance urging businesses, government…
M
Mahesh Kumar Sahoo
Mahesh covers ransomware gangs, data leak sites, and dark web marketplaces, mapping how stolen data surfaces and gets sold. Follows ShinyHunters-style groups across leak forums.
253 stories filedFiled by Mahesh Kumar Sahoo
Darkweb · Sep 17, 2026
APT36 Deploys Rust-Based Spyware in Fresh Campaign Against Indian and Afghan Defense Agencies
A cyber espionage group linked to Pakistan, known as APT36, has launched a new intrusion effort aimed at government and…
Malware · Sep 17, 2026
Chinese State‑Linked Group Deploys New SparroWocky Backdoor in Latin American Government Hacks
A cyber‑espionage outfit tied to China, known in security circles as FamousSparrow, has begun leveraging a freshly…
Phishing · Sep 17, 2026
ISC patches fourteen BIND vulnerabilities, including DoH crash bug
The Internet Systems Consortium (ISC) rolled out two new versions of its widely used BIND DNS server—9.20.29 and…
Breaches · Sep 17, 2026
Gyazo Image‑Sharing Service Discloses Massive Data Breach Impacting Over 23 Million Users
Gyazo, the image‑sharing platform owned by Kyoto‑based Helpfeel, disclosed a security incident that compromised the…
CVE & Exploits · Sep 17, 2026
Cisco Issues Emergency Alert for Critical ISE Zero‑Day Actively Exploited in the Wild
Cisco has issued an emergency advisory after confirming that a newly discovered zero‑day flaw in its Identity Services…
Phishing · Sep 17, 2026
Banking Malware Employs ‘KREMLIN’ Toolkit to Covertly Install Malicious Chrome and Edge Extensions
A newly identified banking‑focused malware campaign has begun deploying a custom toolkit called KREMLIN to…
Threats · Sep 16, 2026
SecurityWeek Launches Virtual Summit on Managing Expanding Attack Surfaces
SecurityWeek is hosting a live virtual summit today that will focus on the growing challenge of attack surface…
CVE & Exploits · Sep 16, 2026
Google Fixes Critical Pixel Modem Flaw After Evidence of Targeted Exploits
Google has rolled out its September 2026 security update for Pixel smartphones, closing a high‑severity zero‑day…
CVE & Exploits · Sep 16, 2026
CISA Issues Guidance on 17 Active Directory Attack Vectors as Enterprises Brace for Identity Threats
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a new advisory warning that threat actors are…
Threats · Sep 15, 2026
Exein Raises $270 Million, Valued at $1.7 B, to Accelerate Physical AI Security Platform
Cybersecurity firm Exein announced a $270 million financing round that lifts its post‑money valuation to $1.7 billion,…
Malware · Sep 15, 2026
BambooToken Malware Harnesses MQTT to Command Windows and Linux Infections
Cybersecurity analysts have identified a new cross‑platform malware family, dubbed BambooToken, that exploits the…