https://threatvectr.com/story/hackers-hit-unpatched-fastjson-bug-in-spring-boot-apps-no-fix-yet ThreatVectr en 2026-07-25T13:48:00.033Z Hackers Hit Unpatched Fastjson Bug in Spring Boot Apps, No Fix Yet https://threatvectr.com/story/insurance-phishing-gets-faster-attackers-now-hijack-accounts-in-real-time ThreatVectr en 2026-07-25T12:22:00.416Z Insurance phishing gets faster: attackers now hijack accounts in real time https://threatvectr.com/story/devman-ransomware-runs-a-one-stop-web-portal-for-its-criminal-affiliates ThreatVectr en 2026-07-25T12:18:00.099Z DevMan Ransomware Runs a One-Stop Web Portal for Its Criminal Affiliates https://threatvectr.com/story/chatgpt-goes-dark-worldwide-as-openai-scrambles-to-fix-outage ThreatVectr en 2026-07-25T10:01:00.442Z ChatGPT goes dark worldwide as OpenAI scrambles to fix outage https://threatvectr.com/story/gitlab-flaw-lets-any-logged-in-user-run-commands-on-self-hosted-servers ThreatVectr en 2026-07-25T09:02:00.898Z GitLab Flaw Lets Any Logged-In User Run Commands on Self-Hosted Servers https://threatvectr.com/story/rockwell-automation-fixes-four-code-execution-bugs-in-arena-simulation-software ThreatVectr en 2026-07-25T09:00:00.777Z Rockwell Automation Fixes Four Code-Execution Bugs in Arena Simulation Software https://threatvectr.com/story/boards-do-care-about-cybersecurity-they-just-dont-understand-it ThreatVectr en 2026-07-24T23:19:00.880Z Boards Do Care About Cybersecurity. They Just Don't Understand It. https://threatvectr.com/story/ontrac-tells-customers-hackers-were-inside-its-network-for-three-days-in-march ThreatVectr en 2026-07-24T20:15:00.693Z OnTrac tells customers hackers were inside its network for three days in March https://threatvectr.com/story/a-single-default-setting-in-azure-automation-could-have-let-hackers-steal-any-te ThreatVectr en 2026-07-24T19:07:00.023Z A Single Default Setting in Azure Automation Could Have Let Hackers Steal Any Tenant's Cloud Identity https://threatvectr.com/story/hotel-wi-fi-hijack-campaign-quietly-harvests-microsoft-365-logins-from-business- ThreatVectr en 2026-07-24T18:13:00.573Z Hotel Wi-Fi hijack campaign quietly harvests Microsoft 365 logins from business travellers https://threatvectr.com/story/north-korean-hackers-run-fake-zoom-and-teams-sites-to-rob-crypto-wallets ThreatVectr en 2026-07-24T16:28:00.051Z North Korean Hackers Run Fake Zoom and Teams Sites to Rob Crypto Wallets https://threatvectr.com/story/vatican-prayer-app-left-700000-users-names-and-emails-exposed-for-anyone-to-grab ThreatVectr en 2026-07-24T15:30:00.441Z Vatican Prayer App Left 700,000 Users' Names and Emails Exposed for Anyone to Grab https://threatvectr.com/story/certighost-new-exploit-turns-ordinary-windows-users-into-domain-controllers ThreatVectr en 2026-07-24T15:09:00.746Z Certighost: New Exploit Turns Ordinary Windows Users Into Domain Controllers https://threatvectr.com/story/three-security-stories-you-may-have-missed-industrial-switches-russian-email-spy ThreatVectr en 2026-07-24T14:37:00.200Z Three Security Stories You May Have Missed: Industrial Switches, Russian Email Spying, and a Rail Ransomware Shakedown https://threatvectr.com/story/ai-coding-assistants-are-being-tricked-into-downloading-fake-packages ThreatVectr en 2026-07-24T14:30:00.665Z AI Coding Assistants Are Being Tricked Into Downloading Fake Packages https://threatvectr.com/story/a-weaponised-svg-file-let-researchers-run-commands-on-bings-own-servers ThreatVectr en 2026-07-24T13:25:00.361Z A Weaponised SVG File Let Researchers Run Commands on Bing's Own Servers https://threatvectr.com/story/europol-pulls-4340-links-tied-to-the-com-extortion-network ThreatVectr en 2026-07-24T13:12:00.313Z Europol Pulls 4,340 Links Tied to 'The Com' Extortion Network https://threatvectr.com/story/aegisai-raises-dollar36-million-to-fight-ai-generated-phishing-emails ThreatVectr en 2026-07-24T12:27:00.528Z AegisAI Raises $36 Million to Fight AI-Generated Phishing Emails https://threatvectr.com/story/ai-agents-need-more-than-a-watchful-eye-they-need-a-leash ThreatVectr en 2026-07-24T11:58:00.093Z AI Agents Need More Than a Watchful Eye. They Need a Leash. https://threatvectr.com/story/illinois-man-gets-76-months-for-phishing-750-womens-snapchat-accounts ThreatVectr en 2026-07-24T11:42:00.759Z Illinois man gets 76 months for phishing 750 women's Snapchat accounts https://threatvectr.com/story/ai-assistant-turned-loose-on-thai-finance-ministry-network ThreatVectr en 2026-07-24T11:15:00.543Z AI Assistant Turned Loose on Thai Finance Ministry Network https://threatvectr.com/story/golden-chickens-malware-crew-returns-with-four-new-tools ThreatVectr en 2026-07-24T11:12:00.320Z Golden Chickens Malware Crew Returns With Four New Tools https://threatvectr.com/story/five-major-ai-coding-tools-keep-inventing-the-same-fake-software-packages ThreatVectr en 2026-07-24T11:09:00.056Z Five Major AI Coding Tools Keep Inventing the Same Fake Software Packages https://threatvectr.com/story/after-tycoon2fa-was-shut-down-phishing-criminals-went-looking-for-new-tricks ThreatVectr en 2026-07-24T10:50:00.544Z After Tycoon2FA Was Shut Down, Phishing Criminals Went Looking for New Tricks https://threatvectr.com/story/redis-patches-four-code-execution-bugs-after-ai-agent-finds-zero-days ThreatVectr en 2026-07-24T09:04:00.127Z Redis Patches Four Code-Execution Bugs After AI Agent Finds Zero-Days https://threatvectr.com/story/ai-scanner-finds-eight-serious-bugs-in-nodebb-forum-software ThreatVectr en 2026-07-24T08:57:00.589Z AI Scanner Finds Eight Serious Bugs in NodeBB Forum Software https://threatvectr.com/story/cisa-orders-three-day-fix-as-clop-hits-ptc-windchill-flaw ThreatVectr en 2026-07-24T07:59:00.198Z CISA orders three-day fix as Clop hits PTC Windchill flaw https://threatvectr.com/story/when-ai-speaks-your-language-but-its-security-doesnt ThreatVectr en 2026-07-24T07:33:00.183Z When AI Speaks Your Language But Its Security Doesn't https://threatvectr.com/story/australian-regulator-fines-tab-dollar27-million-for-spam-and-telemarketing-breac ThreatVectr en 2026-07-24T00:19:00.972Z Australian Regulator Fines TAB $2.7 Million for Spam and Telemarketing Breaches https://threatvectr.com/story/dolphin-x-the-new-malware-that-uses-ai-to-pick-which-victims-to-rob-first ThreatVectr en 2026-07-23T21:49:00.651Z Dolphin X: The New Malware That Uses AI to Pick Which Victims to Rob First https://threatvectr.com/story/check-points-admin-console-has-a-critical-flaw-that-hands-attackers-the-keys-to- ThreatVectr en 2026-07-23T20:54:00.063Z Check Point's Admin Console Has a Critical Flaw That Hands Attackers the Keys to Everything https://threatvectr.com/story/origin-energy-confirms-data-breach-hacker-claims-2-million-customer-records-held ThreatVectr en 2026-07-23T20:35:00.723Z Origin Energy confirms data breach; hacker claims 2 million customer records held for extortion https://threatvectr.com/story/fake-claude-installer-promoted-by-bing-ads-hits-29-organisations-with-sectoprat ThreatVectr en 2026-07-23T20:16:00.242Z Fake Claude installer promoted by Bing ads hits 29 organisations with SectopRAT https://threatvectr.com/story/ai-is-writing-the-new-cybercrime-playbook-here-is-how-defenders-are-answering ThreatVectr en 2026-07-23T19:47:00.050Z AI Is Writing the New Cybercrime Playbook. Here Is How Defenders Are Answering https://threatvectr.com/story/microsofts-new-passkey-system-has-flaws-that-let-old-hacking-tricks-work-again ThreatVectr en 2026-07-23T18:12:00.947Z Microsoft's New Passkey System Has Flaws That Let Old Hacking Tricks Work Again https://threatvectr.com/story/ai-agents-are-breaking-the-security-promises-of-confidential-computing ThreatVectr en 2026-07-23T18:04:00.363Z AI Agents Are Breaking the Security Promises of Confidential Computing https://threatvectr.com/story/ransomware-hit-a-japanese-frozen-food-giant-and-kfc-felt-it ThreatVectr en 2026-07-23T18:00:00.104Z Ransomware Hit a Japanese Frozen-Food Giant and KFC Felt It https://threatvectr.com/story/the-week-malware-wore-a-friendly-face-fake-extensions-poisoned-packages-and-an-i ThreatVectr en 2026-07-23T17:04:00.894Z The Week Malware Wore a Friendly Face: Fake Extensions, Poisoned Packages and an Image That Talked to an AI https://threatvectr.com/story/ukraine-warns-of-hackers-hiding-malware-inside-a-fake-notepad-plugin ThreatVectr en 2026-07-23T17:02:00.735Z Ukraine warns of hackers hiding malware inside a fake Notepad++ plugin https://threatvectr.com/story/a-hidden-linux-flaw-lets-any-local-user-seize-full-control-of-a-machine ThreatVectr en 2026-07-23T16:22:00.788Z A Hidden Linux Flaw Lets Any Local User Seize Full Control of a Machine https://threatvectr.com/story/microsoft-365-hit-by-outage-knocking-out-teams-sharepoint-and-excel ThreatVectr en 2026-07-23T16:07:00.685Z Microsoft 365 hit by outage knocking out Teams, SharePoint and Excel https://threatvectr.com/story/can-you-still-patch-your-way-to-safety-why-the-old-playbook-is-breaking-down ThreatVectr en 2026-07-23T15:56:00.854Z Can You Still Patch Your Way to Safety? Why the Old Playbook Is Breaking Down https://threatvectr.com/story/russian-hackers-are-reading-your-email-just-by-sending-you-one-zimbra-zero-day-e ThreatVectr en 2026-07-23T15:39:00.579Z Russian Hackers Are Reading Your Email Just by Sending You One: Zimbra Zero-Day Explained https://threatvectr.com/story/openai-patches-chatgpt-flaw-that-let-attackers-plant-an-invisible-ai-agent-insid ThreatVectr en 2026-07-23T15:39:00.548Z OpenAI Patches ChatGPT Flaw That Let Attackers Plant an Invisible AI Agent Inside a Company https://threatvectr.com/story/leaky-alibaba-cloud-server-exposes-china-linked-spying-kit-aimed-at-hospitals-an ThreatVectr en 2026-07-23T15:20:00.178Z Leaky Alibaba Cloud Server Exposes China-Linked Spying Kit Aimed at Hospitals and Governments https://threatvectr.com/story/claude-cowork-sandbox-escape-let-ai-agent-read-and-write-files-anywhere-on-a-mac ThreatVectr en 2026-07-23T15:19:00.105Z Claude Cowork Sandbox Escape Let AI Agent Read and Write Files Anywhere on a Mac