cyberintel.kalymoon.com · 44369 articles · updated every 4 hours · grows forever
Insider Brief PRESS RELEASE — Princeton University’s Quantum Initiative will accelerate the next generation of quantum science research and discovery with the support of a major gift from Andy Floranc…
Introduction P3 Global Intel advertises itself as a “fully integrated and state-of-the-art tip acquisition and tip management solution that has quickly become the leading choice of Crime Stoppers Prog…
Claude Code, Gemini CLI, GitHub Copilot agents vulnerable to prompt injection via comments Researchers disclosed a new “Comment and Control” attack technique that abuses comments in code repositories …
A vulnerability identified as critical has been detected in wpxpo PostX Plugin up to 5.0.5 on WordPress. This impacts the function ultp_shareCount_callback . The manipulation leads to missing authoriz…
A vulnerability labeled as critical has been found in shahinurislam Career Section Plugin up to 1.6 on WordPress. Affected is the function appform_options_page_html . The manipulation results in path …
A vulnerability marked as problematic has been reported in WSO2 API Manager, Identity Server, Open Banking AM, Open Banking IAM and Identity Server as Key Manager . Affected by this vulnerability is a…
A vulnerability described as critical has been identified in Dell Storage Manager up to 8.0 . Affected by this issue is some unknown functionality. Such manipulation leads to improper privilege manage…
A vulnerability classified as problematic has been found in WSO2 API Manager . This affects an unknown part of the component Publisher . Performing a manipulation results in xml external entity refere…
A vulnerability classified as problematic was found in WSO2 API Manager . This vulnerability affects unknown code of the component Authentication Endpoint . Executing a manipulation can lead to cross …
A vulnerability, which was classified as problematic , has been found in WSO2 API Manager and Identity Server . This issue affects some unknown processing of the component Authentication Endpoint . Th…
A vulnerability, which was classified as problematic , was found in WSO2 API Manager . Impacted is an unknown function. The manipulation results in cross site scripting. This vulnerability is reported…
A vulnerability has been found in WSO2 Identity Server up to 5.2.0.34 and classified as problematic . The affected element is an unknown function of the component Access Token Handler . This manipulat…
Introduction Advances in AI model-powered exploitation have demonstrated that general-purpose AI models can excel at vulnerability discovery, even without being purpose-built for the task. Eventually,…
Prolific Threat Actor Focused on Using Malware to Facilitate Cargo Theft Cargo-stealing hackers have a new trick up their sleeve: using a third-party code-signing service makes their remote management…
Google Chrome is the most widely used browser in the world, yet a sweeping new analysis reveals it offers users almost no protection against fingerprinting and data leaks that quietly expose their ide…
March 2026 turned out to be one of the more active months for vulnerability exploitation this year. Security researchers tracked 31 high-impact vulnerabilities that were actively used against real-wor…
A critical authentication bypass vulnerability in Nginx UI, tracked as CVE-2026-33032 with a maximum CVSS score of 9.8, is currently being actively exploited in the wild. This flaw allows unauthentica…
Cisco has issued a critical security advisory warning of a severe vulnerability in its cloud-based Webex Services. Tracked as CVE-2026-20184, this flaw carries a maximum Common Vulnerability Scoring S…
Cybercriminals have found a new way to sneak malware past traditional security filters by hijacking a legitimate AI workflow automation tool called n8n. Rather than building their own infrastructure f…
A newly identified information-stealing malware called NWHStealer is quietly making its way onto Windows systems through a well-disguised campaign that uses fake VPN websites, gaming mods, and hardwar…
Education publishing giant McGraw-Hill has confirmed a data breach following an extortion attempt, with more than 100GB of stolen data now publicly distributed online, exposing the personal informatio…
Cisco has issued an urgent security advisory warning of multiple vulnerabilities in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC). According to the official Cisco sec…
A threat cluster tracked as UAC-0247 has been running an active campaign since early 2026, targeting local governments and municipal healthcare institutions across Ukraine, including clinical hospital…
Two American nationals have been sentenced to federal prison for operating a sophisticated “laptop farm” scheme. The operation successfully infiltrated over 100 U.S. companies, generating more than $5…