ServicesBlogPricingContactContact Now

Grivyonx Intelligence Hub

Cyber Security News and Analysis - Page 23

Zero-days, ransomware, data breaches and active exploitation, explained with practical defence advice.

Cyber Security

Massive Chrome VPN Extension Scam Hits Russian‑Speaking Users

A recent investigation uncovered a sprawling network of 737 VPN and proxy extensions for Google Chrome that were hijacking user traffic. These add‑ons, spread across at least 40 developer accounts, amassed more than 75,000 installations, primarily targeting Russian‑language users eager to bypass blocked services. The extensions masqueraded as legitimate privacy tools while secretly funneling data through an undisclosed proxy infrastructure.

By Gourav Rajput

Cyber Security

Adobe Patches Critical ColdFusion & Campaign Classic Flaws (CVSS 10.0)

Adobe has just rolled out a set of urgent security updates that close three high‑risk gaps in its ColdFusion server and Campaign Classic platform. The most dangerous of these flaws carries a perfect CVSS score of 10.0, enabling attackers to inject operating system commands and potentially take full control of the underlying host. Organizations are urged to apply the fixes immediately to prevent exploitation that could result in arbitrary code execution and privilege escalation.

By Gourav Rajput

Cyber Security

VMware vCenter Flaw Lets Attackers Keep Remote Access

New research shows that threat actors are exploiting CVE‑2026‑59310, a critical directory‑traversal vulnerability in VMware vCenter, to execute arbitrary code and gain persistent remote access. The flaw, rated 9.8 on the CVSS scale, can be leveraged without valid credentials, making it a high‑priority target for attackers.

By Gourav Rajput

Cyber Security

ShieldBreak Zero-Day Shows Microsoft Defender Patch Bypass

Chaotic Eclipse, also known as INFINITE NIGHTMARE, published a proof‑of‑concept for ShieldBreak, a zero‑day that bypasses Microsoft Defender’s patch for CVE‑2026‑50656, granting SYSTEM privileges. Early indicators suggest the flaw can be triggered remotely without user interaction, leaving organizations exposed until Microsoft issues a fix.

By Gourav Rajput

Cyber Security

Microsoft Closes 398 Security Holes, Patches Active Zero‑Day

Microsoft has delivered a massive security update that addresses 398 vulnerabilities across Windows and related software. Among the fixes is a zero‑day already being exploited in the wild, plus two flaws that had been discussed publicly before today’s release. The update underscores the critical need for organizations and individuals to apply patches promptly to close these security gaps.

By Gourav Rajput

Cyber Security

Gunra Ransomware Targets Critical Infrastructure via Fortinet Vulnerabilities, Circumventing MFA

<h2>Introduction</h2><p>The cyber threat landscape is evolving rapidly, with ransomware groups like Gunra leveraging stolen code and outdated technology to breach even the most secure systems. Critical infrastructure—ranging from power grids to healthcare networks—is increasingly under siege. This article explores how Gunra exploits Fortinet vulnerabilities and bypasses MFA to execute devastating attacks.</p><h2>Understanding the Gunra Ransomware Operation</h2><p>Gunra operates as a ransomware-as-a-service (RaaS) model, enabling affiliates to deploy customized attacks. By leveraging leaked Conti ransomware code and outdated Fortinet infrastructure, they target organizations with weak patching practices. Their success lies in exploiting human and technical gaps rather than sophisticated techniques alone.</p>

By Gourav Rajput

Cyber Security

Kimwolf v7 Android Botnet Uses HTTP/2 to Evade Security Detection

Cybersecurity researchers have uncovered a sophisticated update to the Kimwolf botnet known as v7, featuring improved operational resilience through HTTP/2-based traffic engineering. This advancement allows the malware to blend into normal internet activity, complicating threat detection and response efforts.

By Gourav Rajput

Cyber Security

DeadLock Ransomware Leverages Polygon Blockchain for Resilient Extortion

The DeadLock ransomware operation has adopted a novel approach to operational resilience by anchoring its command-and-control and leak infrastructure on the Polygon blockchain. By leveraging smart contracts and the decentralized Session messaging protocol, the threat actor has created an extortion pipeline that resists conventional sinkholing and domain seizure tactics used by defenders. This shift signals a maturation in ransomware economics, where criminal groups treat infrastructure as a strategic asset class rather than disposable tooling. Security teams must now account for blockchain-based persistence when designing incident response playbooks and threat hunting hypotheses.

By Gourav Rajput

Cyber Security

OpenAI Launches GPT-5.6-Cyber for Advanced Security Research

OpenAI has unveiled GPT-5.6-Cyber, a new AI model tailored for cybersecurity tasks. This specialized tool aims to enhance vulnerability research, penetration testing, and incident response capabilities while adjusting safety protocols for professional use. The model represents a significant step in AI-driven security innovation.

By Gourav Rajput

Cyber Security

Gunra Ransomware Exploits Fortinet & Schneider Electric Flaws in Global Attacks

A joint cybersecurity advisory from the United States and South Korea has exposed a sophisticated ransomware campaign leveraging known vulnerabilities in Fortinet and Schneider Electric products. The Gunra ransomware variant is actively targeting critical infrastructure sectors globally, including healthcare, finance, and government services. This article breaks down the attack chain, mitigation strategies, and what this escalation means for organizational defense postures.

By Gourav Rajput

Cyber Security

BdThemes Plugin Hijacked via Malicious JSON to Spawn Fake WordPress Admins

Security researchers uncovered a sophisticated supply chain compromise affecting the BdThemes plugin repository. By poisoning JSON files, attackers introduced rogue administrative accounts without altering source code. WordPress.org responded by disabling downloads while site owners are urged to audit their installations and reinforce defensive measures.

By Gourav Rajput

Cyber Security

Water System Cyberattacks Spread Across US States

Cyberattacks against water treatment facilities and distribution networks are escalating across more than a dozen U.S. states. These intrusions are exploiting weakly protected, internet-facing programmable logic controllers (PLCs), raising serious concerns about the cybersecurity posture of critical public utilities.

By Gourav Rajput