Daily Archives: Nov 2, 2026

Attackers are sending forged court notifications to organizations in Colombia and using those messages to install XWorm, a remote access tool that gives operators full control of an infected machine. The emails are designed to appear like legitimate legal correspondence. The attachments are hidden Windows scripts...

Veeam has released security updates to correct a critical authorization bypass in Veeam Backup & Replication that could allow an attacker without credentials to circumvent access checks on the CDP Coordinator Service. Tracked as CVE-2026-108142, the vulnerability has a CVSS v4.0 score of 9.1 and affects...

Camera Management Software Compromised to Deliver Malware Attackers have used compromised camera management software to deploy malware on Windows systems, leveraging a legitimate Microsoft program to execute malicious code and maintain persistence. These incidents illustrate how surveillance-management...