Grivyonx Intelligence Hub
Zero-days, ransomware, data breaches and active exploitation, explained with practical defence advice.
Cybersecurity experts have uncovered BraZetsu, a sophisticated Python-based malware campaign targeting Windows systems. This threat framework goes beyond typical password stealers by converting compromised machines into revenue-generating inventory for criminal networks.
By Gourav Rajput
A significant data breach at Thomson Reuters has raised serious concerns about the security of sensitive court records across multiple jurisdictions. The company disclosed that an unauthorized party gained access to files from its C-Track court case management platform, potentially compromising Social Security numbers and sealed court documents.
By Gourav Rajput
OpenAI has unveiled Daybreak for Frontline Defenders, a landmark $1 billion program designed to equip organizations protecting essential services with advanced AI-driven cybersecurity capabilities. The initiative addresses the growing asymmetry between sophisticated threat actors and under-resourced defenders in critical infrastructure sectors.
By Gourav Rajput
Researchers have uncovered a sophisticated phishing campaign affecting 46 nations, with the United States accounting for nearly half of the targeted accounts. The operation leverages Canada Revenue Agency tax forms to deceive victims globally.
By Gourav Rajput
Security researchers have uncovered a disturbing case of targeted surveillance against a Serbian student activist, highlighting the ongoing threats posed by sophisticated spyware tools developed by private companies. The Citizen Lab, working alongside the SHARE Foundation, has documented how NSO Group's notorious Pegasus spyware successfully infiltrated an iPhone belonging to a member of Serbia's prominent student protest movement.
By Gourav Rajput
A prominent security researcher has published a proof-of-concept for FalconFlank, a zero-day privilege escalation vulnerability affecting CrowdStrike Falcon Sensor. The flaw exploits the platform's office malicious macros remediation mechanism to escalate privileges on compromised systems.
By Gourav Rajput
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added seven newly discovered security flaws to its Known Exploited Vulnerabilities (KEV) catalog after evidence emerged that attackers are actively exploiting them. Among the newly listed issues is a server‑side request forgery with a perfect CVSS score of 10.0 affecting SonicWall SMA 1000 appliances, which could give an unauthenticated remote user complete control. The agency’s move underscores the accelerating pace at which threat actors are leveraging these weaknesses to install reverse shells, mine cryptocurrency, and establish persistent footholds within compromised networks.
By Gourav Rajput
GPT-6 Astra marks a major milestone in artificial intelligence, becoming the first broadly deployed model to reach the Critical level of cybersecurity capability under the Preparedness Framework. This breakthrough signals a new chapter in how AI can both defend and challenge digital infrastructures worldwide. As organizations face increasingly complex threats, the arrival of such a powerful system raises urgent questions about readiness, governance, and responsible deployment.
By Gourav Rajput
Security researchers have identified critical zero-day vulnerabilities affecting SonicWall SMA 1000 series appliances that could allow threat actors to execute arbitrary code without authentication. The disclosure comes amid heightened exploitation activity targeting edge network devices.
By Gourav Rajput
A new and highly calculated threat operation known as Spring Ring has set its sights on Microsoft Teams users. By using voice phishing tactics, the attackers trick employees into granting remote access, allowing them to hijack active sessions and deploy malicious payloads. This campaign highlights how trusted collaboration tools are increasingly becoming the frontline of modern cyber warfare, pushing organizations to rethink their defensive strategies.
By Gourav Rajput
Fake installers masquerade as trusted software downloads, disabling Windows Update and weakening Microsoft Defender. This campaign primarily targets Chinese‑speaking users and Chinese subsidiaries of multinational firms, causing widespread compromises.
By Gourav Rajput
A sophisticated cybercrime operation known as Gambling Goblin has been silently compromising web servers belonging to Brazilian government agencies and educational institutions. The attackers install malicious Apache modules that covertly redirect incoming visitors to attacker-controlled gambling and sports betting pages.
By Gourav Rajput
Cybersecurity researchers have uncovered a fresh Android banking trojan named StreamRat. The malicious campaign masquerades as a television‑streaming service and is advertised on Meta platforms, primarily aimed at Spanish‑speaking audiences. By exploiting these ads, attackers can seize almost complete control over infected devices, with the campaign already touching roughly 570,950 Meta accounts across the European Union.
By Gourav Rajput
Organizations using SonicWall's Secure Mobile Access 1000 series appliances face critical security risks after two zero-day vulnerabilities were discovered and patched. Security researchers have identified these flaws that may be chained together for devastating attacks.
By Gourav Rajput
Two critical vulnerabilities discovered in GeoNetwork, the open-source geospatial metadata catalog powering numerous government geoportals, can be chained together to achieve unauthenticated remote code execution. Security patches were released in July 2026.
By Gourav Rajput
The U.S. Department of Justice has formally charged a Russian national, Searzhudin Tamirlanovich Aktulaev, after his extradition from Cyprus. He stands accused of orchestrating a large-scale malware campaign disguised through fake Excel documents on a popular freelance platform. The operation reportedly impacted around 80,000 users between 2016 and 2017. U.S. authorities are now pursuing justice in what has become a high-profile international cybercrime case.
By Gourav Rajput
A critical vulnerability in Sangoma Switchvox is being actively exploited by threat actors who are leveraging unauthenticated SQL injection flaws to deploy reverse shells on enterprise VoIP servers. The issue, tracked as CVE-2026-9586 with a near-perfect severity score, allows remote attackers to execute arbitrary code without holding any valid credentials, putting thousands of business communication environments at immediate risk.
By Gourav Rajput
In a landmark operation, international law enforcement agencies have successfully dismantled the notorious Sality peer-to-peer botnet, marking a significant victory against cybercrime infrastructure that had operated for years. The coordinated action, executed on August 31, 2026, involved authorities from multiple countries working alongside private cybersecurity firms to neutralize a threat that had been distributing various malware strains through a decentralized network.
By Gourav Rajput
