Windows Server 2022 to End Mainstream Support in 60 Days
Microsoft has alerted IT administrators that the mainstream support for Windows Server 2022 is nearing its conclusion, set for October 2026, at which point it will enter extended support. Introduced in March 2021, Windows Server 2022 became widely available in September 2021 as part of the Long-Term Servicing Channel (LTSC) with a decade of support….
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
Expensive attacks are not always the most sophisticated ones. This week provided ample evidence of that. Exposed services were targeted, old vulnerabilities were exploited anew, browser sessions became avenues for attacks, and supply-chain issues continued to extend beyond the initial breach. Much of this stemmed from pre-existing access and security measures that presumed no one…
Microsoft Confirms Global Outage of GitHub
GitHub is currently experiencing downtime for certain users due to a significant outage that is leading to errors throughout the website, API, Actions, Pull Requests, and various other services. The platform acknowledged the outage at 9:40 AM EDT on August 17, 2026, stating that it was looking into reports of performance issues impacting some of…
Microsoft Recognized as a Leader in the 2026 IDC MarketScape for MDR/MXDR for Enterprises
Security teams are tasked with protecting an expanding attack surface with limited personnel and around-the-clock vigilance, facing adversaries who never rest. As cybercriminals increasingly leverage AI to enhance and scale their operations, the frequency, speed, and complexity of threats are on the rise. Bridging this gap requires more than just tools; it necessitates a partner…
New StormEncryptor Ransomware Deployed by China-Linked Hackers, Likely Exploiting N-central Vulnerability
Microsoft has revealed that a financially driven threat group known as Storm-1175, associated with China, has introduced a new ransomware variant called StormEncryptor, which had not been documented before. This new ransomware signifies a departure from the adversary’s earlier use of Medusa ransomware, according to the Microsoft Threat Intelligence Team. According to Microsoft’s posts on…
New StormEncryptor Ransomware Utilized by Ex-Medusa Affiliate
A financially driven threat actor, previously linked to the Medusa ransomware group, has begun using a new ransomware variant known as StormEncryptor. Microsoft Threat Intelligence is monitoring this actor under the designation Storm-1175 and indicates that the recent attacks were likely preceded by the exploitation of an authentication-bypass vulnerability (CVE-2026-18577) in the N-central remote monitoring…
Hackers Target US Companies in FastJson RCE Zero-Day Exploits
Cybercriminals are currently taking advantage of a flaw in the FastJson open-source Java library, which enables remote code execution without the need for user interaction or elevated permissions. This security vulnerability impacts FastJson versions 1.2.68 to 1.2.83 and is being utilized in attacks against various entities in the United States. The malicious activities were detected…
Attackers Take Advantage of Command Injection Vulnerability in Arista VeloCloud Orchestrator
A critical security vulnerability affecting on-premises versions of Arista VeloCloud Orchestrator (VCO) is currently being exploited in the wild. This vulnerability, identified as CVE-2026-16812 (with a CVSS score of 10.0), involves operating system command injection that could enable arbitrary code execution. According to an advisory released by Arista on Monday, “VeloCloud Orchestrator (VCO) on-prem has…
FakeGit Campaign Exploits 7,600 GitHub Repositories to Distribute SmartLoader Malware
Cybersecurity experts have identified close to 7,600 harmful GitHub repositories, with over 800 masquerading as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to disseminate a malware variant known as SmartLoader, as part of an ongoing initiative referred to as FakeGit. According to Oleg Zaytsev, the lead security researcher at Island, in a…
JadePuffer Agentic Attacks Now Target AI Model Data with Ransomware
The autonomous AI agent known as JadePuffer has been enhanced with a custom malware named EncForge, which is designed to encrypt AI-related assets, including training datasets, vector databases, and model checkpoints. Earlier this month, JadePuffer was identified as an agentic threat actor (ATA) capable of autonomously executing all phases of a ransomware attack, from gaining…
