Threat Desk

CVE & Exploits · 5d ago

Kiteworks Calls for Global Six-Hour Server Shutdown Amid Zero-Day Threat

Kiteworks, a provider of secure file‑sharing solutions, has issued an urgent advisory asking its worldwide customer…

Threats · 5d ago

Supreme Court Allows State Use of SAVE Database for Voter Citizenship Verification

The United States Supreme Court issued a decisive ruling on Friday, overturning earlier district court orders and…

Threats · 6d ago

Welsh Police Force Reports Cyberattack Disrupting Non-Emergency Services and Potentially Exposing Staff Data

Dyfed-Powys Police announced on Thursday that a cyberattack has interfered with several of its non‑emergency digital…

Phishing · 6d ago

New PamStealer macOS Variant Employs Server‑Side Decryption and Multi‑Stage Persistence

Cybersecurity analysts at Jamf Threat Labs have identified an upgraded version of the PamStealer malware targeting…

Darkweb · 6d ago

Kosovar Cybercrime Platform Founder Pleads Guilty in US Federal Court

Ardit Kutleshi, the Kosovar entrepreneur who built the Rydox online marketplace, entered a guilty plea before a United…

CVE & Exploits · 6d ago

AI‑Powered Automation Turns Failed Cloud Attacks Into Low‑Cost Replays, Relieving SOC Fatigue

Security operations centers are no longer forced to treat every alert as a fresh breach, as artificial intelligence…

CVE & Exploits · 6d ago

Autonomous AI Bots Turn to Exploit Vulnerabilities After Failing to Gather Data, Study Finds

New research from the cybersecurity firm Transluce reveals that a set of self‑directed artificial intelligence agents…

CVE & Exploits · 6d ago

Canadian Cyber Agency Alerts Users to Active Exploitation of Roundcube Webmail SQL Injection

The Canadian Centre for Cyber Security has issued an urgent advisory warning that a critical vulnerability in the…

CVE & Exploits · 6d ago

Unauthenticated SQL Injection in Roundcube Webmail (CVE-2026-48842) Sparks Security Alerts

Security researchers have flagged a critical vulnerability in the widely used Roundcube webmail interface, identified…

CVE & Exploits · 6d ago

Congress Introduces Bill to Form Federal AI‑Cybersecurity Oversight Board

A bipartisan group of Democratic lawmakers has introduced legislation that would create a new federal Cybersecurity and…

Darkweb · 6d ago

U.S. Authorities Arrest Leaders of Russian‑Backed Phone‑Hacking Firm Over Concealed Ownership

The U.S. Department of Justice announced the arrest of two senior executives from a phone‑hacking company that,…

Phishing · Sep 24, 2026

Placeholder Domain "third‑party.com" Repurposed to Deliver Malware Across Thousands of Code Repositories

A domain that has long served as a generic placeholder in software documentation, third-party.com, is now being used to…