Find what you’re looking for
Browse everything
6,868 results in Threat Reports
Critical Zero-Click RCE in Avada WordPress Theme Exposes 1 Million+ Websites
A critical vulnerability chain tracked as CVE-2026-18431 in the popular Avada WordPress theme and Fusion Builder plugin enables unauthenticated attackers to execute arbitrary PHP code through a sophisticated six-step zero-click attack. The flaw, discovered by Wordfence's AI-powered Argus system, affects Avada versions up to 7.16 and Fusion Builder versions up to 3.16, potentially compromising over 1 million websites. The exploit chains together authorization bypass, input validation failures, trust boundary violations, and file handling weaknesses to achieve complete server compromise. ThemeFusion has released patches in versions 7.16.1 and 3.16.1 respectively. This incident highlights the growing sophistication of WordPress theme vulnerabilities and demonstrates how AI-powered security research tools are accelerating both vulnerability discovery and exploitation timelines. The complex multi-step attack chain represents an evolution in web application threats that bypass traditional security controls.
The Q2 2026 Vulnerability Crisis: When AI Acceleration Meets Exploit-First Disclosure
Q2 2026 witnessed an unprecedented surge in registered CVEs driven by widespread AI adoption in vulnerability research and application development. The period saw the emergence of the Dirty Frag family of Linux kernel vulnerabilities, including CVE-2026-43284 and CVE-2026-43500, which enable local privilege escalation through exploitation of the networking subsystem and page cache mechanisms. Simultaneously, security researcher Nightmare Eclipse published multiple Windows vulnerabilities including BlueHammer, RedSun, and YellowKey with functional exploits before CVE assignment or patches became available, establishing a dangerous precedent of exploit-first disclosure. The quarter also revealed significant security gaps in AI tools and LLM platforms, with injection vulnerabilities and improper access controls becoming increasingly prevalent as organizations rapidly integrate AI technologies without adequate security considerations.
How FBI Takedown of Chinese QTFY Network Exposes Critical Zero Trust Gaps
In August 2026, the FBI disrupted a sophisticated Chinese state-sponsored cyber espionage operation conducted by the QTFY threat group, operated by Nanjing Xinjiuwei Network Technology Company. The group utilized QScan and QTRouter platforms to create an obfuscation network of compromised IoT devices and commercial proxies, enabling attacks against critical U.S. infrastructure including NASA, the Federal Reserve, Department of Energy, and the U.S. Senate. The operation leveraged zero-day vulnerabilities in Ivanti CSA appliances and numerous N-day exploits to establish persistent access while using the botnet to mask attack origins. This incident demonstrates the evolving sophistication of state-sponsored threat actors who are increasingly adopting industrialized, multi-tenant infrastructure models for large-scale espionage campaigns. The use of legitimate commercial proxy services mixed with compromised devices represents a significant challenge to traditional IP-based blocking and geographic filtering defenses.
Iranian APT Nimbus Manticore Deploys Advanced SSH Tunneling and Backdoor Tools
In August 2026, cybersecurity researchers discovered new infrastructure and previously undocumented malware tools used by Nimbus Manticore, an Iranian state-sponsored hacking group linked to the Islamic Revolutionary Guard Corps (IRGC). The threat actor has expanded their arsenal with a TWOSTROKE-like C++ backdoor and an SSH tunneling utility that masquerades as Windows Terminal Server SDK components. Group-IB's analysis revealed extensive infrastructure spanning Europe and the Middle East, indicating an expanded targeting profile beyond their traditional focus on defense, aerospace, and military organizations in the Middle East and United States. This incident highlights the continued evolution of Iranian APT capabilities and their persistent focus on establishing long-term access to critical infrastructure. As nation-state actors increasingly develop sophisticated toolsets and expand their geographic reach, organizations must prioritize comprehensive network visibility and east-west traffic monitoring to detect lateral movement and command-and-control activities.
North Korean APT Group Exploits AI Development Supply Chain in Sophisticated Campaign
In July 2026, Amazon's threat intelligence team identified a North Korean state-sponsored hacker group behind multiple open-source supply chain attacks targeting NPM packages including axios, debug, chalk, and typo-crypto. The DPRK-linked threat actor demonstrated evolved tradecraft leveraging generative AI to enhance their attack methodologies. Simultaneously, AWS published 21 security bulletins addressing critical vulnerabilities across open-source SDKs, MCP servers, and developer tools, with key themes including credential disclosure, SSRF attacks, command injection, and insufficient input validation in AI-integrated workflows. This incident highlights the growing sophistication of nation-state actors exploiting the software supply chain, particularly as organizations rapidly adopt AI-powered development tools and agent-based workflows that expand the attack surface through LLM integrations.
First Android Malware Targeting Car Head Units Discovered in MoYu Group Campaign
In August 2026, Kaspersky researchers discovered JarService, the first documented Android malware specifically targeting automotive head units. The malware, attributed to the MoYu Group behind the notorious BadBox botnet, infected DoFun-manufactured car head units by exploiting vulnerabilities in the TWCore firmware update system. The multistage downloader spreads through legitimate update functionality and ultimately deploys click-fraud malware and reverse-proxy modules to recruit infected vehicles into a botnet for ad fraud purposes. While the infected infotainment systems pose no direct physical safety risks to drivers, this represents a significant expansion of botnet operations into connected vehicle infrastructure. This incident highlights the growing threat surface as cybercriminals increasingly target IoT and connected vehicle ecosystems. With automotive systems becoming more interconnected and the rise of software-defined vehicles, securing update mechanisms and embedded systems has become critical for preventing botnet recruitment and protecting connected infrastructure from exploitation.
Mastering AWS Multi-Stage Attack Detection Through Cross-Service Correlation
AWS published a comprehensive guide detailing how cybersecurity teams can detect sophisticated multi-stage attacks by correlating signals across multiple cloud services including CloudTrail, GuardDuty, VPC Flow Logs, and Route 53 Resolver. The guidance demonstrates how attackers move through five phases - initial access, discovery, privilege escalation, lateral movement, and exfiltration - leaving distinct signatures in different AWS services. By combining AWS detection capabilities with business-specific context such as data classification and access norms, security teams can identify attack patterns that individual service alerts might miss, particularly when threat actors use legitimate credentials and authorized API calls to mask their activities. This guidance becomes critical as cloud environments face increasingly sophisticated attacks where adversaries leverage valid authentication mechanisms and blend malicious activities with normal business operations. The rise of multi-cloud environments and the growing sophistication of nation-state actors make cross-service correlation essential for modern threat detection.
State Actors and Ransomware Groups Converge on Edge Infrastructure: What the Tenable-SentinelOne Analysis Reveals
A joint analysis by Tenable and SentinelOne of 93 CVE-actor attribution pairs revealed that state-sponsored threat actors and cybercriminals independently converge on the same edge infrastructure vulnerabilities across major vendors including F5, Fortinet, Citrix, and Ivanti. The research found that 54% of F5 customer environments have at least one exposed, actively-exploited CVE, while twelve vulnerabilities showed confirmed multi-nexus attribution spanning China, Russia, DPRK, Iran, and ransomware groups. High-priority CVEs paradoxically take 24 days longer to remediate than standard vulnerabilities, creating extended windows of opportunity for attackers targeting VPN gateways, firewalls, and remote access appliances. This convergence highlights the urgent need for organizations to rethink their approach to edge device security as nation-state actors increasingly share attack surfaces with cybercriminals, making traditional threat-model assumptions obsolete in an era of blended adversary tactics.
Critical Nvidia NemoClaw Flaw Exposes AI Agents to Persistent Poisoning Attacks
In August 2026, security researchers from Cyera's Oasis Identity Research discovered a critical vulnerability in Nvidia's NemoClaw tool that enables AI agent poisoning through DNS rebinding attacks. The flaw stems from improper network configuration of the Ollama API, which binds to 0.0.0.0:11434 instead of localhost, exposing an unauthenticated model server to browser-based attacks. Attackers can exploit this through malicious web pages to gain persistent control over local LLM instances, silently injecting hidden instructions into chat templates that corrupt AI agent behavior across all subsequent conversations. This represents a new class of AI infrastructure vulnerability where traditional networking flaws cascade into persistent model compromise, affecting organizations deploying autonomous AI agents with elevated system access. This incident highlights the emerging risks of agentic AI deployment where infrastructure misconfigurations can lead to persistent model corruption, demonstrating how traditional security concepts must evolve for AI-powered systems as organizations rapidly adopt autonomous agents.
Forcepoint Exposes Critical AI Vulnerability: Hidden Prompts Manipulate Email Summarizers
In August 2026, Forcepoint X-Labs researchers demonstrated how attackers can manipulate AI-powered email summarizers through hidden HTML prompt injections. The proof-of-concept study showed that malicious instructions embedded in invisible text can cause AI assistants like Claude Haiku 4.5 to generate false summaries, altering critical information such as invoice amounts and meeting dates. The attack succeeded in all 10 test runs, with recipients receiving no indication that the AI-generated summaries contained corrupted data. This research validates OWASP's consistent ranking of prompt injection as the top risk for LLM applications since 2023. This incident highlights the growing urgency around AI security as organizations increasingly deploy autonomous AI agents with expanded capabilities beyond simple summarization, including email sending and meeting scheduling functions that could amplify attack impact.
How Interpol's Jackal IV Exposed the Hidden Infrastructure Behind Global Cybercrime
Interpol's Operation Jackal IV concluded in August 2026 as a coordinated international law enforcement effort targeting West African cybercrime syndicates across 22 countries. The operation resulted in 58 arrests and identification of 263 additional suspects, focusing particularly on Black Axe and similar transnational organized crime networks responsible for business email compromise, romance scams, and cryptocurrency fraud. Unlike previous operations, Jackal IV emphasized intelligence gathering and infrastructure disruption over arrest numbers, targeting crime-as-a-service networks that provide domains and money laundering support to cybercriminal groups. Authorities seized $3.8 million in assets across Argentina, South Africa, Romania, and Italy, dismantling call center operations and shell company networks. This operation highlights the evolving sophistication of West African cybercrime infrastructure and the increasing reliance on specialized service providers. The emphasis on disrupting criminal support networks rather than individual operators reflects law enforcement's strategic shift toward degrading entire criminal ecosystems that enable large-scale cyber-enabled financial fraud.
NovaCookies Phishing Service Commercializes Microsoft 365 Session Theft for $320/Month
In August 2026, researchers from Island discovered NovaCookies, a sophisticated adversary-in-the-middle (AitM) phishing-as-a-service platform targeting Microsoft 365 users for $320 per month. The service provides turnkey phishing infrastructure including domains, hosting, and real-time session theft capabilities that bypass multifactor authentication by stealing authenticated session cookies rather than just credentials. NovaCookies targets hundreds of organizations across multiple regions with over 755 dedicated domains, with more than half of targeted organizations located in the US. The platform combines trusted document platforms like DocuSign with legitimate Microsoft redirects and disposable infrastructure to create highly evasive campaigns that appear as ordinary sign-in events. This incident highlights the evolution of phishing attacks toward session hijacking techniques that render traditional MFA protections ineffective, representing a significant shift in the threat landscape that organizations must address with enhanced browser security and phishing-resistant authentication methods.