Cybersecurity News - Page 16

The attack involved an infrastructure-level breach at Notepad++’s hosting provider, not vulnerabilities in the application’s source code.

Mandiant is tracking the activity across multiple threat clusters, including UNC6661, UNC6671, and UNC6240.

Flare says it found more than 208,500 publicly exposed MongoDB servers, including 3,100 that required no authentication.

In brief: Ivanti, Microsoft and Fortinet fix zero-days, eScan hit with a supply chain attack, and more.

In a separate development, US authorities have seized the dark web and clearnet domains of the RAMP cybercrime forum.

Dragos assessed that Electrum works closely with another threat cluster Kamacite that focuses on initial access.

The flaw (CVE-2026-24858) was actively exploited in the wild by two malicious FortiCloud accounts.

The flaw, tracked as CVE-2025-8088, allows attackers to place malicious files on a victim’s system by tricking users into opening specially crafted RAR archives.

The campaigns, dubbed ‘Gopher Strike’ and ‘Sheet Attack,’ were discovered in September 2025.

Stanley is marketed as an easy-to-use phishing platform that works by hijacking user navigation and overlaying a full-screen iframe with attacker-controlled content.