Ransomfeed Daily News
Mustang Panda Deploys SolidPDFCreator Stage-1 Backdoor Against India Targets
13/07/2026 15:09
Researchers identified a Windows DLL backdoor dubbed SolidPDFCreator and attributed it to the China-linked threat group Mustang Panda, describing the...
Ransomfeed Daily News
OAuth Client ID Spoofing Enables Stealthy Microsoft Entra Account Enumeration
13/07/2026 15:08
Proofpoint reported that attackers are increasingly abusing OAuth client ID spoofing against Microsoft Entra ID to enumerate accounts and validate cr...
Ransomfeed Daily News
Ghostcommit Uses PNG-Hidden Prompts to Make AI Coding Agents Leak Secrets
13/07/2026 15:08
Researchers disclosed Ghostcommit, a proof-of-concept software supply-chain attack that hides prompt-injection instructions inside a PNG image refere...
Ransomfeed Daily News
Allies Attribute Turla Espionage and Router Intrusions to Russia’s FSB Centre 16
13/07/2026 15:05
The UK, France, the EU, and partner cyber agencies publicly attributed a broad cyber-espionage campaign to FSB Centre 16, linking the Russian intelli...
Ransomfeed Daily News
CERT Polska Discloses Four Vulnerabilities in GNU gawk
13/07/2026 14:05
CERT Polska disclosed four vulnerabilities in GNU gawk, tracked as CVE-2026-40467, CVE-2026-40468, CVE-2026-40469, and CVE-2026-40553. The issues wer...
Ransomfeed Daily News
Debian 13.6 Ships Broad Security Fixes and Secure Boot Certificate Updates
13/07/2026 02:06
Debian has released Debian 13.6 as a point update focused on security and maintenance, alongside Debian 12.15 for the previous stable branch. Debian ...
Ransomfeed Daily News
Ryuk Operator Pleads Guilty as BlackCat Negotiator Gets Prison Sentence
13/07/2026 01:06
U.S. prosecutors announced two significant ransomware case outcomes: Armenian national Karen Serobovich Vardanyan pleaded guilty to conspiracy and co...
Ransomfeed Daily News
Keycloak fixes FGAPv2 privilege escalation and multiple access control flaws
13/07/2026 00:53
Keycloak disclosed and patched a high-severity privilege escalation flaw, CVE-2026-9795, in its Fine-Grained Admin Permissions v2 (FGAPv2) feature af...
Ransomfeed Daily News
Google and FBI Disrupt NetNut Residential Proxy Network Used by Malware Operators
07/07/2026 14:10
Google said it disrupted NetNut—also known as Popa—a large residential proxy network that investigators linked to malware delivery, command-and-c...
Ransomfeed Daily News
Alibaba Bans Claude Code Over Alleged Hidden China-Detection Logic
07/07/2026 14:09
Alibaba has ordered employees to stop using Anthropic’s Claude Code for work and reportedly directed them to remove other Anthropic products, class...
Ransomfeed Daily News
Multiple Open Source Projects Disclose High-Impact RCE, Injection, and Traversal Flaws
07/07/2026 07:21
Several open source projects disclosed serious vulnerabilities affecting developer and infrastructure tooling, including remote code execution, SQL i...
Ransomfeed Daily News
Adobe ColdFusion RDS File-Write Flaw Faces Active Exploitation
07/07/2026 04:04
Adobe ColdFusion is facing active exploitation of CVE-2026-48282, a maximum-severity flaw tied to RDS arbitrary file write that can be abused without...
Ransomfeed Daily News
France to End Certification of Non-Quantum-Safe Encryption Products
07/07/2026 02:06
France's cybersecurity agency, ANSSI, said it will stop certifying security products that lack post-quantum or quantum-resistant encryption begi...
Ransomfeed Daily News
Teen Arrested for Bandai Channel Attack That Canceled 46,000 Subscriptions
07/07/2026 01:07
Japanese police arrested a 15-year-old high school student from Saitama Prefecture for allegedly carrying out a sustained cyberattack against Bandai ...
Ransomfeed Daily News
OpenSSH 10.4 fixes multiple flaws and adds optional post-quantum signatures
07/07/2026 00:06
OpenSSH has released version 10.4 with eight security fixes affecting both client and server components, including sftp, scp, sshd, ssh, ssh-agent, a...
Ransomfeed Daily News
Microsoft Edge Patches Multiple High-Severity RCE and Security Bypass Flaws
06/07/2026 06:04
Microsoft Edge (Chromium-based) has received fixes for multiple high-severity vulnerabilities, including remote code execution flaws CVE-2026-58289, ...
Ransomfeed Daily News
Malicious npm Rollup Polyfills Linked to Lazarus Target Developer Environments
06/07/2026 04:05
Researchers identified a malicious npm supply-chain campaign that impersonated Rollup polyfill tooling to compromise developer workstations and CI/bu...
Ransomfeed Daily News
Medtronic Data Breach Exposed Personal and Health Information in ShinyHunters Attack
05/07/2026 23:04
Medtronic disclosed that unauthorized actors accessed certain corporate IT systems between April 13 and April 19, exposing personal and health-relate...
Ransomfeed Daily News
Linux Kernel Flaws Expose Systems to Local Root Escalation
05/07/2026 19:07
Researchers disclosed two separate Linux kernel privilege-escalation flaws that can give local attackers root access across a wide range of systems, ...
Ransomfeed Daily News
PolinRider Supply Chain Campaign Hijacks Developer Packages and Uses Blockchain Dead Drops
05/07/2026 19:06
Researchers reported a broad software supply chain campaign targeting developers and cryptocurrency users through hijacked packages, browser extensio...
Ransomfeed Daily News
PamStealer macOS Infostealer Uses Fake Maccy Apps and PAM Password Validation
03/07/2026 11:12
Researchers have identified PamStealer, a previously unseen macOS malware family distributed through fake websites impersonating the legitimate Maccy...