Phishing in the Fog of War: A Surge in State-Aligned Espionage Campaigns

Handala Claims Destructive Wiper Attack on GCC Nation’s Critical Infrastructure

Active Exploitation of Critical Adobe Prototype Pollution Flaw

Masjesu: Exploit-Driven Botnet with Stealth, Scale, and Staying Power

UAT-10362 Deploys LucidRook Malware Against Taiwanese NGOs

Pawn Storm’s Dual Zero-Day Exploit Unleashed Important according to Google magic

Iranian-Affiliated CyberAv3ngers Exploits Internet-Exposed PLCs in U.S.

APT28 Exploits SOHO Routers for Large-Scale DNS Hijacking and Credential Theft

Spraying for Access: Iran-Aligned Actors Turn Weak Credentials into Intelligence

TrueConf Zero-Day Abused in Operation TrueChaos to Weaponize Software Updates

Fortinet EMS Left Defenseless by CVE-2026-35616

Axios npm Supply Chain Attack: What You Need to Know

CVE-2026-5281: Chrome Dawn Flaw Sparks In-the-Wild Zero-Day Attacks

CVE-2026-3055: Silent Memory Leak in NetScaler Actively Exploited

Tracking Beast: Tools, Techniques, and Tradecraft in RaaS Operations

FAUX#ELEVATE: Obfuscated VBS Campaign Targeting Enterprise HR System

TeamPCP’s Automated Supply Chain: From Trivy to LiteLLM in a Multi-Ecosystem Breach

Iranian MOIS Leverages Telegram-Based C2 in Espionage Campaign Targeting Dissidents

MuddyWater: Iran’s Adaptive Cyber Espionage Machine

March 2026 Linux Patch Roundup

From Disclosure to Exploitation Overnight of a CVE-2026-33017 Langflow Flaw

What’s new on HivePro