Grivyonx Intelligence Hub
Zero-days, ransomware, data breaches and active exploitation, explained with practical defence advice.
Berlin's state administration has confirmed it will not comply with ransom demands from hackers who compromised the city's government network in August. Forensic investigations have since revealed additional unauthorized data transfers from a critical government department.
By Gourav Rajput
Cosmos Labs has issued a critical security warning after discovering that a fundamental flaw in the shared Cosmos EVM module was actively exploited to drain funds from multiple blockchain networks. The vulnerability, which remained unaddressed despite prior knowledge of its existence, affected six separate blockchains between August 20 and August 25, 2026.
By Gourav Rajput
Security researchers have disclosed that a previously unknown flaw in the PaperCut NG and MF print server suite enables an attacker to execute arbitrary code without any authentication. The flaw combines two separate weaknesses that allow the adversary to bypass access controls and run malicious commands directly on the server.
By Gourav Rajput
The U.S. Cybersecurity and Infrastructure Security Agency flagged a critical ownCloud flaw after attackers stole sensitive nuclear research data from a Philippine institution. This article breaks down the vulnerability, the attack chain, and actionable defenses.
By Gourav Rajput
Cybersecurity researchers have identified a coordinated campaign involving 19 malicious browser extensions targeting both Google Chrome and Microsoft Edge users. These extensions, active over the past six months, were designed to steal sensitive wallet information and drain cryptocurrency assets from unsuspecting victims. The discovery highlights the growing sophistication of browser-based cyberattacks.
By Gourav Rajput
Operational technology environments face a unique cybersecurity crisis: when an attack strikes, there is often nothing left behind to investigate. Unlike IT networks rich with logs and alerts, OT systems offer attackers a silent playground. This article explores why cyber deception technology has become the critical missing layer for protecting industrial operations.
By Gourav Rajput
Two critical remote code execution vulnerabilities have been identified in Unitree's G1 EDU humanoid robot platform, with one exploit pathway originating through Bluetooth Low Energy communications. Security researcher Olivier Laflamme demonstrated how attackers can achieve root-level access on the robot's locomotion processing unit, raising serious concerns about the security of consumer and research robotics platforms.
By Gourav Rajput
Security researchers have identified two critical factory implants embedded in firmware for routers manufactured by Shenzhen Zhibotong Electronics, raising serious concerns about supply chain integrity in consumer networking equipment.
By Gourav Rajput
cPanel has urgently released security patches addressing a critical flaw that could enable a single hosting customer to execute code with root-level privileges on an entire server. The vulnerability, tracked as CVE-2026-65643, affects all currently supported versions of cPanel and WHM, raising serious concerns across the shared hosting ecosystem.
By Gourav Rajput
PaperCut has warned that a zero‑day vulnerability is actively exploited, affecting every version of its NG and MF print management software. Emergency patches for versions 25 and 26 are now available, and the vendor urges all customers to apply them immediately to stop further attacks.
By Gourav Rajput
Researchers identify a new APT28-linked backdoor named HOOKEDAGE targeting European governments and diplomatic agencies. This lightweight Windows script was deployed between late 2025 and early 2026, posing significant risks to sensitive institutions across Romania, Spain, and Turkey.
By Gourav Rajput
A massive security revelation has uncovered that thousands of routers distributed across the globe come pre-loaded with hidden backdoors. These devices, manufactured by a Chinese company and sold under various brand names, have raised alarm among cybersecurity researchers and users alike.
By Gourav Rajput
The latest ThreatsDay briefing reveals a staggering 296,000‑device IoT botnet, coordinated attacks on more than 100 water treatment facilities, and a newly discovered SharePoint remote‑code‑execution chain. Learn how attackers are using fake login pages, bogus security scans, and seemingly useful apps to gain footholds, and what defenders can do to stay ahead.
By Gourav Rajput
Cybersecurity researchers have revealed a concerning security weakness in Amazon's AI-powered development environment, Kiro. The flaw, uncovered by Mindguard, could allow attackers to silently extract sensitive information through carefully crafted prompt injections and the platform's Kiro Powers feature. The vulnerability affects Kiro IDE version 0.7.45 on Windows and currently lacks a formal CVE identifier, raising questions about how quickly users can be notified and how patch cycles should evolve for AI-native development tools. As agentic IDEs become more deeply embedded in enterprise workflows, this discovery highlights a new class of risk that goes far beyond traditional software bugs.
By Gourav Rajput
In a significant development for regional law enforcement, Australian authorities have formally charged two men from Western Australia in connection with the notorious TeamPCP hacking collective. The duo, aged 23 and 21, are accused of orchestrating a series of supply chain compromises that impacted widely used open‑source security scanners and an AI gateway earlier this year. Their court appearance on August 27 signals the start of a legal process that could set important precedents for how nations tackle sophisticated cyber‑crime networks.
By Gourav Rajput
European governments are reconsidering their use of popular chat platforms after Russian cyber‑espionage groups began targeting officials through Signal and WhatsApp. The shift raises new security challenges and highlights the evolving tactics of state‑backed threat actors.
By Gourav Rajput
Australian Federal Police have apprehended two men linked to TeamPCP, a notorious cybercrime group responsible for the most prolonged software supply chain attack campaign on record. The operation highlights the growing danger of malicious open-source packages and the critical importance of operational security for threat actors. This breakthrough reveals how behavioral analysis and open-source intelligence can unmask even sophisticated syndicates. Our analysis explores the tactical missteps that led to their identification and what this means for securing the software development lifecycle.
By Gourav Rajput
A sophisticated malware campaign using the open-source Spark RAT is currently targeting users and organizations across Cambodia. By leveraging legitimate driver vulnerabilities, attackers are successfully disabling critical security defenses.
By Gourav Rajput
