// Cyber
Intel Feed

A vulnerability marked as critical has been reported in GeoVision GV-LPCLPC2011 and GV-LPCLPC2211 up to 1.12 . Affected by this issue is some unknown functionality of the component vlsvr . Performing …

A vulnerability described as critical has been identified in WSO2 API Manager up to 3.0.x . This affects an unknown part of the component Destination Handler . Executing a manipulation can lead to ser…

A vulnerability classified as critical has been found in GeoVision GV-LPCLPC2011 and GV-LPCLPC2211 up to 1.12 . This vulnerability affects unknown code of the component vlsvr . The manipulation leads …

A vulnerability classified as problematic was found in GeoVision GV-LPCLPC2011 and GV-LPCLPC2211 up to 1.12 . This issue affects some unknown processing of the component CGI . The manipulation results…

A vulnerability, which was classified as critical , has been found in GeoVision GV-LPCLPC2011 and GV-LPCLPC2211 up to 1.12 . Impacted is an unknown function of the file IEEE8021x_upload.cgi of the com…

A vulnerability, which was classified as problematic , was found in GeoVision GV-LPCLPC2011 and GV-LPCLPC2211 up to 1.12 . The affected element is an unknown function of the file IEEE8021x_upload.cgi …

A vulnerability has been found in GeoVision GV-LPCLPC2011 and GV-LPCLPC2211 up to 1.12 and classified as critical . The impacted element is an unknown function of the file onvif.cgi of the component R…

A vulnerability was found in DAVIDO Bytes::Random::Secure::Tiny up to 1.011 on Perl and classified as problematic . This affects an unknown function. Executing a manipulation can lead to incorrect usa…

A vulnerability was found in DAVIDO Bytes::Random::Secure up to 0.29 on Perl. It has been classified as problematic . This impacts the function Bytes::Random::Secure of the component Functional Interf…

A new and highly sophisticated malware loader has been found hiding inside what appears to be a harmless Minecraft mod. Researchers have uncovered a campaign that blends blockchain technology and soci…

Supply chain attackers are getting more creative, and the latest threat is proof of that. A malware campaign known as Miasma has been caught hiding inside widely used npm packages, using a clever mix …

A Chinese-speaking threat group known as CL-STA-1062 has been running a quiet but aggressive campaign against government agencies and critical energy infrastructure across Southeast Asia. The attacker…

A newly uncovered infostealer called KuinaExtractor has been quietly evolving for over six months, posing a serious and growing threat to users across multiple platforms. Written in the Rust programmi…

A critical authentication bypass vulnerability in the python.org release management API could have allowed attackers to impersonate administrators, potentially redirecting millions of users to malicio…

A serious cybersecurity breach has come to light in Japan, where the country’s Ground Self-Defense Force (JGSDF) unknowingly used malware-infected USB drives on computers connected to classified milit…

Hackers are no longer waiting in your inbox. A newly identified scam technique places fake invoices directly inside shopping app order histories, making them feel more credible than a typical phishing…

A China-linked threat group has been targeting critical infrastructure in Southeast Asia with a new custom backdoor called TinyRCT

When a new AI capability starts making headlines, I see the same pattern play out in boardrooms and executive staff meetings. The technology is introduced as a looming breakthrough for attackers. The …

US lawmakers on Thursday introduced a bill that would require developers of advanced AI models to report major safety and security incidents to the Commerce Department, establishing a federal oversigh…

I work as a principal specialist at a pipeline operator where Operational Technology (OT) is the backbone of the business. I do not report to the board or act as a CISO, but the issues that get raised…

Officers from Poland’s Central Bureau for Combating Cybercrime (CBZC) arrested four suspected members of an organized cybercrime group accused of SIM swap attacks, cryptocurrency theft, and money laun…

Kaspersky researchers have uncovered a previously unknown cyberattack campaign that has compromised government organizations and software development companies in multiple countries. They first stumbl…

Mirage2FA, a phishing kit that combines short-lived HTML smuggling with obfuscated JavaScript loaders to deliver fake Microsoft 365 login pages and steal credentials during MFA prompts, has been ident…

Ransomware attacks against European organizations increased during the first months of 2026, with third-party suppliers becoming a major entry point for attackers. Black Kite examined 2,066 ransomware…