Ransomware Scam Group Claims It Can Help Delete Stolen Data, but Turns Out to Be a Double-Extortion Scheme

451/69 Thursday, August 20, 2026 Cybersecurity experts have identified a shift in ransomware-related threats, with the emergence of a group calling itself Ransom Busters. The group sends emails to organizations that have already fallen victim to ransomware attacks, claiming that it can breach the attackers’ servers and help delete the stolen data in exchange for […]

ThaiCERT

August 20, 2026

Forminator Vulnerability Could Allow PHP File Uploads and Code Execution on WordPress Websites

450/69 Wednesday, August 19, 2026 Security researchers have disclosed a Critical vulnerability, CVE-2026-15748, in the Forminator Forms plugin for WordPress, which is installed on more than 600,000 websites. The vulnerability has a CVSS severity score of 9.8 and could allow unauthenticated attackers to upload malicious files, including PHP files, to affected websites, potentially leading to […]

ThaiCERT

August 19, 2026

SafePal Reports Data Breach Affecting 39,798 Customers Through Vulnerability in Order-Tracking Plugin

449/69 Wednesday, August 19, 2026 SafePal, a cryptocurrency security company, disclosed a data breach affecting approximately 39,798 customers after attackers exploited an authorization vulnerability in the order-tracking function of a plugin related to customer order data. The vulnerability allowed unauthorized individuals to access other customers’ order information. The incident affected customers who placed orders between […]

ThaiCERT

August 19, 2026

Researchers Find AI Agents Creating Malware to Attack Each Other During Simulated Testing

448/69 Wednesday, August 19, 2026 Researchers from Anthropic identified unexpected behavior during AI testing when three groups of Claude model agents, each assigned different operational goals, came into conflict and began attacking one another to compete for workspace on the system. The incident serves as a clear case study showing that if AI agent systems […]

ThaiCERT

August 19, 2026

PATCHCORD Backdoor Found Using Google Sheets as C2 in Cyber Espionage Campaign

447/69 Tuesday, August 18, 2026 Security researchers have disclosed a cyber espionage campaign using a backdoor malware named PATCHCORD, targeting telecommunications providers in Afghanistan and critical infrastructure organizations in South Asia. The attackers used fake VPN installers and telecommunications management tools disguised to appear as software used by the target organizations, tricking users into installing […]

ThaiCERT

August 18, 2026

Large-Scale DDoS Attack Causes Widespread Threema Service Outage

446/69 Tuesday, August 18, 2026 Threema, a paid secure messaging provider from Switzerland that focuses on privacy and security, disclosed that its services were affected by multiple large-scale Distributed Denial of Service (DDoS) attacks, resulting in communication issues and service disruptions. However, organizations using Threema On-Prem were not affected because that system runs on the […]

ThaiCERT

August 18, 2026

Fortune 500 Organizations Fall Victim to Azure Data Theft Campaign

445/69 Tuesday, August 18, 2026 Preliminary reports indicate that a threat actor using the name TheHatman has advertised for sale data allegedly stolen from the Azure environments of several leading Fortune 500 organizations. The potentially affected organizations include global brands such as McDonald’s, Tata Consultancy Services (TCS), Vodafone, HCL Technologies, and InterContinental Hotels Group (IHG). […]

ThaiCERT

August 18, 2026

Attempts Detected to Exploit SAP Commerce Cloud Vulnerability That Could Allow Code Execution on Systems

444/69 monday, August 17, 2026 Cybersecurity company Defused Cyber has detected attempts to exploit CVE-2026-58231 in SAP Commerce Cloud after SAP released patches for the vulnerability. The flaw is rated Critical, with a CVSS score of 10.0, and could allow unauthenticated attackers to execute code on affected systems and access internal components of the application. […]

ThaiCERT

August 17, 2026

CTM360 Finds More Than 3,000 Recruitment Phishing URLs Using Browser-in-the-Browser Technique to Steal Credentials

443/69 monday, August 17, 2026 Cybersecurity researchers from CTM360 have published a report on a large-scale phishing campaign named RecruitTrap, which uses fake recruitment processes or job interview invitations to steal Google and Facebook credentials. In some cases, the campaign can also relay Multi-Factor Authentication (MFA) requests in real time. CTM360 stated that it identified […]

ThaiCERT

August 17, 2026

Threat Actors Found Buying Expired Domains to Use as Infrastructure for Cyberattacks and Malware Distribution

442/69 monday, August 17, 2026 Reports indicate a growing trend in cyberattacks in which threat actors purchase expired website domains that have been abandoned and repurpose them as infrastructure to deceive users and distribute malware. Statistics show that in the first half of the year, previously used domains accounted for 20% of all new domain […]

ThaiCERT

August 17, 2026
1 … 11 12 13 … 120