https://malwarebrief.com/section/malware/ghostbat-rat-targets-indian-android-users-via/Malware Briefen2026-10-15T12:42:48ZGhostBat RAT Targets Indian Android Users via Fake Traffic Challan SMShttps://malwarebrief.com/section/cyber-attacks/firms-face-backlash-as-ai-ransomware-gangs-coerce/Malware Briefen2026-10-15T12:07:31ZFirms face backlash as AI ransomware gangs coerce staff via family threatshttps://malwarebrief.com/section/malware/cikabika-rat-abuses-discord-and-ngrok-for-remote/Malware Briefen2026-10-15T11:55:32ZCikaBika RAT Abuses Discord and Ngrok for Remote Access and Data Thefthttps://malwarebrief.com/section/malware/air-force-ops-risked-data-via-local-usbs-blurring/Malware Briefen2026-10-15T10:55:10ZAir Force Ops Risked Data via Local USBs Blurring Classified Lines in Afghanistanhttps://malwarebrief.com/section/vulnerabilities/organisations-urged-to-patch-qnap-qumagie-2-9-2/Malware Briefen2026-10-15T10:11:05ZOrganisations Urged to Patch QNAP QuMagie 2.9.2 to Block Critical CVE-2026-50612 Symlink Compromisehttps://malwarebrief.com/section/vulnerabilities/qsirch-path-traversal-flaw-exposes-system-data-to/Malware Briefen2026-10-15T09:51:10ZQsirch Path Traversal Flaw Exposes System Data to Remote Attackershttps://malwarebrief.com/section/cyber-attacks/fbi-arrests-ransomware-negotiator-at-conference/Malware Briefen2026-10-15T07:10:29ZFBI arrests ransomware negotiator at conference over ShinyHunters probehttps://malwarebrief.com/section/cyber-attacks/75-000-organizations-targeted-by-yam-store/Malware Briefen2026-10-15T01:41:53Z75,000 organizations targeted by YAM Store network that sent 1 billion phishing messages globallyhttps://malwarebrief.com/section/cyber-attacks/south-korean-financial-firms-hit-by-ai-pentest/Malware Briefen2026-10-15T00:10:26ZSouth Korean Financial Firms Hit by AI Pentest Tool Breach Exfiltrating 67k Recordshttps://malwarebrief.com/section/vulnerabilities/organisations-urged-to-patch-sql-server-2017-2022/Malware Briefen2026-10-15T00:10:26ZOrganisations urged to patch SQL Server 2017-2022 to stop authenticated remote code execution via heap overflowhttps://malwarebrief.com/section/vulnerabilities/sharepoint-code-injection-flaw-cve-2026-102863/Malware Briefen2026-10-14T22:24:37ZSharePoint Code Injection Flaw CVE-2026-102863 Threatens Server Privilegeshttps://malwarebrief.com/section/vulnerabilities/pan-os-admin-script-injection-flaw-threatens/Malware Briefen2026-10-14T20:13:28ZPAN-OS Admin Script Injection Flaw Threatens Firewalls, Panorama; No Active Exploitation Reportedhttps://malwarebrief.com/section/vulnerabilities/unauthenticated-rce-in-e107-cms-install-script/Malware Briefen2026-10-14T19:12:25ZUnauthenticated RCE in e107 CMS Install Script Compromises Server Privilegeshttps://malwarebrief.com/section/vulnerabilities/drupal-field-ui-flaw-exposes-sites-to/Malware Briefen2026-10-14T18:59:19ZDrupal Field UI Flaw Exposes Sites to Unauthenticated Remote Code Executionhttps://malwarebrief.com/section/vulnerabilities/net-recursion-flaw-cve-2026-58280-risks-service/Malware Briefen2026-10-14T14:53:36Z.NET Recursion Flaw CVE-2026-58280 Risks Service Outages Across Platformshttps://malwarebrief.com/section/cyber-attacks/seo-poisoning-tricks-msp-admins-into-handing-over/Malware Briefen2026-10-14T10:25:28ZSEO poisoning tricks MSP admins into handing over WatchGuard credentials via fake download pageshttps://malwarebrief.com/section/vulnerabilities/local-attackers-can-elevate-privileges-via/Malware Briefen2026-10-14T10:07:10ZLocal attackers can elevate privileges via Windows SmartScreen memory flawhttps://malwarebrief.com/section/vulnerabilities/windows-nlb-flaw-exposes-infrastructure-to/Malware Briefen2026-10-14T03:18:58ZWindows NLB Flaw Exposes Infrastructure to Unauthenticated Remote Code Execution Without Prior Authenticationhttps://malwarebrief.com/section/vulnerabilities/organisations-face-critical-risk-as/Malware Briefen2026-10-14T02:38:52ZOrganisations Face Critical Risk as Unauthenticated Attackers Run Code via Microsoft PPP EAP-TLS Heap Overflowhttps://malwarebrief.com/section/vulnerabilities/esri-portal-users-face-critical-risk-as-cve-2026/Malware Briefen2026-10-13T17:00:33ZEsri Portal Users Face Critical Risk as CVE-2026-69227 Grants Unauthenticated Admin Accesshttps://malwarebrief.com/section/vulnerabilities/organisations-face-critical-credential-theft-risk/Malware Briefen2026-10-13T17:00:33ZOrganisations face critical credential theft risk in Ivanti Xtraction prior to v2026.4https://malwarebrief.com/section/vulnerabilities/quarkus-code-generation-flaw-drops-security-roles/Malware Briefen2026-10-13T15:13:32ZQuarkus Code Generation Flaw Drops Security Roles on Custom Endpointshttps://malwarebrief.com/section/vulnerabilities/wazuh-cluster-workers-can-overwrite-config-files/Malware Briefen2026-10-13T14:50:07ZWazuh Cluster Workers Can Overwrite Config Files to Gain Root Accesshttps://malwarebrief.com/section/vulnerabilities/unpatched-grav-oauth-plugin-exposes-sites-to/Malware Briefen2026-10-13T12:58:58ZUnpatched Grav OAuth plugin exposes sites to remote admin takeover via predictable credentials