DoppelCart Fraud Network Uses 119,000 Fake Shops to Steal Credit Cards

A sophisticated and expansive fraud network, codenamed "DoppelCart," has been uncovered, operating an astonishing network of over 119,000 fake e-commerce websites designed to harvest sensitive payment card information from unsuspecting…

Microsoft Releases Unprecedented Security Update Addressing 966 Vulnerabilities, Including Two Actively Exploited Zero-Days

Microsoft unleashed its September 2026 Patch Tuesday with a record-breaking release of security updates designed to address a staggering 966 vulnerabilities across its product ecosystem. This substantial rollout includes patches…

Mathspace Data Breach Exposes Over One Million Students, Staff, and Parents in Australia and New Zealand

An extensive data breach at Mathspace, a prominent online mathematics learning platform, has resulted in the exposure of personal information belonging to over 1 million students, school staff, and their…

BigBear 2.0 Phishing Service Bypasses MFA at 258 Organizations, Steals Over 5,000 Microsoft 365 Credentials

A sophisticated phishing-as-a-service (PhaaS) framework, dubbed BigBear 2.0, has achieved a significant breach, successfully circumventing multi-factor authentication (MFA) at 258 organizations and compromising over 5,000 Microsoft 365 credentials. This alarming…

StyleSmuggler Zero-Day Exploited to Deploy Linux Backdoor

A critical zero-day vulnerability, identified as "StyleSmuggler," is actively being exploited in the wild to deploy a sophisticated Linux backdoor across all versions of Magento and Adobe Commerce platforms. Security…

Trezor Expands Data Breach Notification to Over 81,000 Customers Following Shipping Provider’s Non-Compliance

Prague, Czech Republic – [Current Date] – Cryptocurrency hardware wallet manufacturer Trezor has significantly expanded its data breach notification, revealing that a breach initially affecting nearly 14,000 customers has now…

N-able Releases Emergency Hotfix for Critical Remote Code Execution Vulnerability in N-central Platform

N-able has issued an emergency hotfix to address a maximum-severity remote code execution (RCE) vulnerability that has been identified within its N-central remote monitoring and management (RMM) platform. This critical…

Google Warns of New Chrome Zero-Day Flaw Exploited in Attacks

Google has issued an urgent security alert, announcing the release of an update for its Chrome browser to patch a critical, high-severity zero-day vulnerability within the V8 JavaScript and WebAssembly…

ASCII Smuggling Evolves: Attackers Deploy Invisible Unicode Characters to Evade Sophisticated Email Security Filters

Threat actors have escalated their tactics in the ongoing battle against email security, now employing a sophisticated technique known as ASCII smuggling to conceal malicious phishing lures. This method leverages…

Microsoft Exchange Online Suffers Widespread Email Delays Due to Ongoing Service Incident

Microsoft is actively working to resolve a significant ongoing incident impacting its Exchange Online service, leading to widespread delays in the sending and receiving of emails between internal and external…