Security News & Threat Intelligence
What Is the FortiWeb SQL Injection Vulnerability (2025) and How Can You Patch It to Prevent SQL Attacks?
In 2026, Fortinet disclosed a critical FortiWeb vulnerability allowing unauthenticated SQL injection via HTTP/HTTPS requests, with a CVSS score of 9.6. Affected versions include FortiWeb 7.0.0–7.6.3. Attackers can rem...
How Did Cybercriminals Impersonating an IPS Officer Scam ₹78.6 Lakh from an Elderly Couple in Chhatrapati Sambhajinagar?
In July 2026, an elderly couple in Chhatrapati Sambhajinagar lost ₹78.6 lakh after cybercriminals impersonated senior IPS officer Vishwas Nangare Patil using AI-generated video calls. The attackers falsely accused the...
How Does SIEM Work? Complete Guide to Security Information and Event Management System
Learn how SIEM (Security Information and Event Management) works, including its processes, benefits, stages, and real-world applications. Step-by-step breakdown and comparison table included.
What is the McDonald’s AI bot data breach involving 64 million applicants?
In July 2026, McDonald’s AI-powered hiring platform suffered a significant data breach exposing personal information from around 64 million job applicants worldwide. Researchers accessed the admin panel using the pass...
What Is the Latest Palo Alto GlobalProtect VPN Vulnerability Allowing Privilege Escalation in 2026?
Palo Alto Networks disclosed a critical security vulnerability in its GlobalProtect VPN client in July 2026, which allows locally authenticated users to escalate privileges to root access on macOS and Linux systems, o...
What Is the Opossum Attack? Understanding TLS Desynchronization Vulnerabilities That Let Hackers Inject Data into Secure Channels
The Opossum Attack is a newly identified cross-protocol TLS desynchronization vulnerability affecting HTTP, SMTP, FTP, and other services. It allows attackers to bypass encryption and inject unauthorized content into ...
What is the new PerfektBlue Bluetooth vulnerability affecting vehicles globally in 2026?
PerfektBlue represents a major security risk to modern vehicles using OpenSynergy’s BlueSDK Bluetooth stack. It combines four distinct CVEs, with CVE-2024-45434 rated as critical. Attackers can remotely exploit cars v...
What are IoT and OT Cyberattacks, and how can they impact critical infrastructure?
IoT and OT cyberattacks target Internet of Things (IoT) devices and Operational Technology (OT) systems—components essential to industrial control, manufacturing, utilities, and smart infrastructure. These attacks exp...
What are IoT and OT Cyberattacks? How do they impact industrial networks in 2026?
IoT (Internet of Things) and OT (Operational Technology) cyberattacks target interconnected devices and industrial control systems used in sectors like manufacturing, energy, utilities, and smart infrastructure. These...
Ultra-Realistic Deepfakes in the GenAI Era | Understanding the Evolving Threat Landscape and What It Means for Cybersecurity in 2026
Ultra-realistic deepfakes, powered by Generative AI, are being actively used in 2026 for advanced social engineering attacks, fraud, corporate espionage, and political disinformation. These AI-generated media forms ca...
What is LDAP Injection in Symfony and How Can You Prevent It?
LDAP injection in Symfony is a serious security flaw where unvalidated user inputs are directly included in Lightweight Directory Access Protocol (LDAP) queries, allowing attackers to manipulate authentication or dire...
What is BERT ransomware and how does it target ESXi virtual machines?
BERT ransomware is a virtualization-aware malware strain that targets VMware ESXi servers. It forcibly shuts down running virtual machines using ESXi commands before encrypting the underlying VM files. This disrupts s...
Microsoft Suspends 3,000 Outlook and Hotmail Accounts Linked to North Korean IT Worker Scam Posing as Remote Employees - 2025 Crackdown
In July 2026, Microsoft suspended over 3,000 Outlook and Hotmail accounts tied to North Korea’s APT group "Jasper Sleet," who infiltrated Fortune 500 firms using fake identities and “laptop farms.” These operatives po...
What is the APT36 BOSS Linux attack and how are weaponized ZIP files used to compromise systems?
APT36, a Pakistan-based threat actor group, is now targeting India's BOSS Linux systems with phishing attacks that deliver weaponized ZIP files. These ZIPs contain malicious .desktop launchers and ELF payloads that st...
What is the SafePay ransomware and how does it use double extortion to target businesses?
SafePay is a recent ransomware threat that emerged in late 2024 and continues to spread rapidly across industries in 2026. It uses a double extortion strategy—stealing sensitive data before encrypting files—to pressur...
What is the Next.js cache poisoning vulnerability (CVE-2025-49826) and how does it lead to Denial of Service (DoS) attacks?
A serious security flaw (CVE-2025-49826) was discovered in Next.js versions 15.1.0 to 15.1.8, allowing attackers to poison the cache and serve blank pages to users. This vulnerability impacts sites using Incremental S...
![Top 10 Famous Ethical Hackers in India [Updated 2026]](https://www.webasha.com/blog/uploads/images/202608/image_140x98_da23f65c290cfbf1237d77aec58a2f0f.jpg)
