CyberScroll

Volexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day Vulnerabilities

Zero-day chain in Ivanti Connect Secure VPN appliances allowed unauthenticated root access via CVE-2026-104935, enabling credential theft, reconnaissance, and data exfiltration by actor UTA0576.

Security Affairs34 minutes agoZero Day

Google Awarded a $250,000 Bounty for a Full-chain Chrome Exploit Found Using GPT-5.6

XBOW built a full-chain Chrome exploit using AI agents with GPT-5.6, chaining three bugs across V8, WebP, and Crashpad to escape the renderer sandbox; Google fixed all flaws and awarded $250,000.

Cybersecurity News1 hour agoTechnical

Coruna and DarkSword Exploit Kits Can Fully Compromise iPhones From a Single Web Visit

Coruna and DarkSword exploit kits chain multiple iOS WebKit/JavaScriptCore flaws to break out of the browser, escalating to kernel-level access and exfiltrating sensitive data from iPhones with no user interaction.

Cybersecurity News1 hour agoTechnical

Hirudo: From Fake Updates to Patched Banking Apps

Hirudo Android banking trojan steals credentials on-device while providing live remote control of the infected device, delivered through shopping and entertainment apps as a separate installation package.

Malware News2 hours agoMobile Security

Ivanti Connect Secure 0-Days Exploited to Steal Active Directory Credentials

Exploit chain leverages three zero-days in Ivanti Connect Secure VPN appliances to achieve root access via an authenticated bypass and file-write weakness, then execute commands as root to harvest AD credentials and sensitive data.

Cybersecurity News3 hours agoTechnical

CyberScroll

Your feed

CyberScroll

Your feed