Cyber Threat News

Malware 2026-08-06

Malware & phishing activity digest — 2026-08-06

458 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-08-06

Ransomware activity digest — 2026-08-06

100 organizations were newly listed on ransomware leak sites, with the most active groups being clop, everest, Dark Project. Figures are aggregated from public

Vulnerability 2026-08-05

New actively exploited vulnerability: CVE-2026-63077

CVE-2026-63077 (JetBrains TeamCity Deserialization of Untrusted Data Vulnerability) affecting JetBrains was added to CISA's Known Exploited Vulnerabilities cata

Malware 2026-08-05

Malware & phishing activity digest — 2026-08-05

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-08-05

Ransomware activity digest — 2026-08-05

44 organizations were newly listed on ransomware leak sites, with the most active groups being Orova, incransom, qilin. Figures are aggregated from public leak-

Vulnerability 2026-08-04

New actively exploited vulnerability: CVE-2026-9198

CVE-2026-9198 (IBM Langflow Code Injection Vulnerability) affecting IBM was added to CISA's Known Exploited Vulnerabilities catalog, indicating active exploitat

Vulnerability 2026-08-04

New actively exploited vulnerability: CVE-2026-34486

CVE-2026-34486 (Apache Tomcat Missing Encryption of Sensitive Data Vulnerability) affecting Apache was added to CISA's Known Exploited Vulnerabilities catalog,

Vulnerability 2026-08-04

New actively exploited vulnerability: CVE-2026-18556

CVE-2026-18556 (N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability) affecting N-able was added to CISA's Known Exploited Vu

Malware 2026-08-04

Malware & phishing activity digest — 2026-08-04

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Ransomware 2026-08-04

Ransomware activity digest — 2026-08-04

29 organizations were newly listed on ransomware leak sites, with the most active groups being safepay, lockbit5, anubis. Figures are aggregated from public lea

Vulnerability 2026-08-03

New actively exploited vulnerability: CVE-2026-18577

CVE-2026-18577 (N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability) affecting N-able was added to CISA's Known Exploited Vu

Ransomware 2026-08-03

Ransomware activity digest — 2026-08-03

100 organizations were newly listed on ransomware leak sites, with the most active groups being thegentlemen, qilin, CRPxO. Figures are aggregated from public l

Malware 2026-08-03

Malware & phishing activity digest — 2026-08-03

497 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Malware 2026-08-02

Malware & phishing activity digest — 2026-08-02

398 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Malware 2026-08-01

Malware & phishing activity digest — 2026-08-01

466 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Malware 2026-07-31

Malware & phishing activity digest — 2026-07-31

365 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Malware 2026-07-30

Malware & phishing activity digest — 2026-07-30

500 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Vulnerability 2026-07-29

New actively exploited vulnerability: CVE-2026-20316

CVE-2026-20316 (Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability) affecting Cisco was added to CISA's Known Exploited Vulnerabil

Malware 2026-07-29

Malware & phishing activity digest — 2026-07-29

384 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Malware 2026-07-28

Malware & phishing activity digest — 2026-07-28

190 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).

Vulnerability 2026-07-27

New actively exploited vulnerability: CVE-2026-16812

CVE-2026-16812 (Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability) affecting Arista was added to CISA's Known Exploited Vulnerabilities c

Vulnerability 2026-07-27

New actively exploited vulnerability: CVE-2025-68686

CVE-2025-68686 (Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability) affecting Fortinet was added to CISA's Known Exploite

Malware 2026-07-27

Malware & phishing activity digest — 2026-07-27

516 new malicious URLs and indicators were observed from public threat-intelligence feeds (abuse.ch URLHaus).