Overview On July 14, 2026, Microsoft published a security advisory addressing CVE-2026-58644, a critical remote code execution (RCE) vulnerability affecting on-premises Microsoft SharePoint Server deployments. The vulnerability, which carries a…
Executive Summary Cato CTRL has identified a previously undocumented malware loader we track as “Foxveil.” We observed evidence that the malware campaign has been active since August 2025, and we observed…
Malware: BiBi, BiBi-Linux, BiBi-Windows Wiper, BiBi Wiper, ChillWipe, Cl Wiper, CoolWipe, DEADWOOD, Detbosit, DistTrack, GOLD IONIC, Hamsa, Handala, Handala PowerShell Wiper, Handala Wiper, Hatef, Hatef Wiper, INC, Inc. Ransom, INC…
While the Metasploit Framework will be continuing its weekly release cadence, bringing you dear reader our latest content, the Weekly Wrap Up is being shifted to a bi-weekly cadence. The…
Jeremy, the Head of IT, thought it was a normal Monday until his help desk was overwhelmed with login complaints. 37 employees couldn’t log in. Password resets were happening that…
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors A new iOS full-chain exploit, dubbed DarkSword, has been identified, leveraging six zero-day vulnerabilities to fully compromise devices…
Overview On July 17, 2026, a GitHub Security Advisory was published for CVE-2026-63030, a critical unauthenticated remote code execution vulnerability affecting WordPress Core. While the official GitHub security advisory classifies…
On a quiet Tuesday morning, Jerry, a fictional system administrator, logged in as usual. While testing a new integration script, he visited a documentation page on an unfamiliar domain. It…
Malware: Agenda, AgendaCrypt, Akira, Gold Feather, INC, INC Ransom, Makop, Phobos, Qilin, QilinCrypt, Qilin Locker, Shanya, VX Crypt, Warlock, Water Galura, Water Manaul CVEs: CVE-2019-19781, CVE-2020-1472, CVE-2021-40444, CVE-2022-30190, CVE-2023-27532, CVE-2023-27997,…
When you incorporate data from application security scanners into your exposure management platform, you can assess the threat from formerly isolated code flaws using a broader risk context, which illuminates…
