Threat Desk

CVE & Exploits · 6h ago

HPE Issues Firmware Fixes After Critical Flaws Discovered in Instant On Access Points

Hewlett Packard Enterprise (HPE) has rolled out a set of firmware updates for its Networking Instant On series of…

Malware · 15h ago

U.S. Treasury Targets Venezuelan Network Behind ATM Malware Scheme

The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions against ten individuals and…

CVE & Exploits · 16h ago

OpenAI Disrupts Coordinated Effort to Extract Model Reasoning, Blames Chinese Competitor

OpenAI announced on Wednesday that it had halted a coordinated campaign aimed at distilling and extracting the…

Phishing · 17h ago

Malicious Custom GPTs Exploit Trusted Domains to Distribute Remote‑Access Trojans

Security researchers have uncovered a new wave of attacks that weaponize custom versions of ChatGPT to serve as bait…

Threats · 17h ago

Study Finds Automakers Distribute Driver Data Across Advertising Networks

A recent investigation has uncovered that many vehicle manufacturers routinely provide detailed, personally…

Phishing · 21h ago

Cybercriminals Exploit MSP360 RMM Tool in Sophisticated Phishing Scheme

Microsoft has issued an alert about a wave of phishing attacks that distribute a malicious installer masquerading as…

CVE & Exploits · 1d ago

Google Finds AI-Detected Flaws More Prone to Remote Code Execution

Google's security research team has released a study indicating that software vulnerabilities identified by artificial…

CVE & Exploits · 1d ago

Ukrainian Cyber Agency Flags ‘DarkSword’ iPhone Exploit Amid Surge in Russian Mobile Attacks

Ukraine’s State Service for Special Communications and Information Protection (SSSCIP) has issued a warning about a…

Threats · 1d ago

Microsoft to Harden Entra ID Against Script Injection Threats from October

Microsoft announced that its Entra ID authentication platform will receive additional safeguards against external…

CVE & Exploits · 1d ago

Weeks-Long Zero-Day Campaign Exploits NetScaler Flaws in Government and Finance Sectors

Security researchers have observed a sustained intrusion campaign that leverages two newly disclosed NetScaler…

CVE & Exploits · 1d ago

Apple Issues Alert as Zero-Day Flaw Becomes Weapon in Targeted Campaigns

Apple has confirmed that a newly disclosed vulnerability, identified as CVE-2026-86950, is being actively exploited in…

Malware · 1d ago

Malicious Ads Promote Custom ChatGPTs That Deploy ClickFix RATs

Security researchers have identified a new wave of malicious campaigns that exploit custom versions of OpenAI's…