VulnHub

Hackers are increasingly targeting individuals by stealing private photos from social media and personal accounts, then selling these images on the dark web. This practice, known as sextortion, poses a significant risk to anyone with sensitive images online. The FBI has issued a warning about this trend, emphasizing the need for users to take proactive steps to protect their privacy. Individuals can safeguard themselves by enhancing their account security, being cautious about what they share online, and using privacy settings effectively. The rise in these incidents highlights the importance of digital hygiene in an age where personal information can be easily exploited.

A new type of malware known as WindRelay is being used in conjunction with the SpyNote Remote Access Trojan (RAT) to execute live-call scams. This combination allows fraudsters to clone credit cards during phone calls, posing a significant risk to unsuspecting victims. The attackers can manipulate information in real-time, making it easier for them to deceive individuals and potentially steal their financial information. This incident serves as a reminder for users to be cautious during phone conversations, especially when discussing sensitive information. Awareness and vigilance are key to preventing falling victim to such scams.

The FBI has issued a warning regarding a growing trend where hackers are targeting social media and online accounts of both adults and children to steal explicit images and videos. These cybercriminals use various tactics to gain access to accounts, raising concerns about the safety and privacy of users online. The stolen content can be used for blackmail or shared publicly, which can have severe emotional and psychological impacts on the victims. This incident is particularly alarming given the increasing prevalence of such cyber crimes, especially as more people share personal content online. Users are urged to enhance their account security by using strong passwords and enabling two-factor authentication to protect their private information from these malicious actors.

The Colombian Justice Ministry has fallen victim to a ransomware attack just days before a presidential transition. This incident is part of a broader trend of increasing cyberattacks targeting government and critical infrastructure in Latin America. The breach raises concerns about the security of sensitive governmental data and the potential disruption of services during a politically sensitive time. As attackers continue to exploit vulnerabilities within public institutions, the urgency for enhanced cybersecurity measures becomes more evident. The ramifications of such attacks can extend beyond immediate operational impacts, potentially affecting public trust in government stability and security.

For the past 17 months, an unknown individual has been accessing Salesforce and ServiceNow portals worldwide, according to researchers from Reco who are tracking this ongoing campaign dubbed 'City-Forum.' The campaign began using a domain that was registered back in 2002 but has since been linked to a generic server hosted in Germany. This unauthorized access has allowed the attacker to pull sensitive records from these widely used platforms, which could potentially compromise the data of numerous organizations. This situation raises serious concerns about the security measures in place for cloud-based services and highlights the need for companies to review their access controls and monitoring practices to protect against such long-term intrusions.

Bitdefender has reported a concerning trend where fake downloads of the movie 'The Odyssey' are being used to spread Lumma Stealer malware. These downloads are disguised as scene releases, featuring .exe files that are made to look like VLC media player icons. Users attempting to download the movie may unknowingly install this malicious software, which can steal sensitive information. This situation poses a significant risk, particularly for those looking for free downloads of popular media. It serves as a reminder for users to exercise caution and verify the legitimacy of files before downloading them.

Researchers have discovered a new campaign dubbed 'City-Forum' that targets Salesforce and ServiceNow platforms. This attack takes advantage of unauthenticated guest access to silently gather and extract sensitive data from these services. The attackers use a specialized toolset to carry out their operations, which raises concerns about the security of user information on these widely used platforms. Since Salesforce and ServiceNow host critical business data for many organizations, this incident could have serious implications for data privacy and security. Companies using these platforms are urged to review their access controls and security measures to prevent unauthorized data access.

On August 10, 2026, cybersecurity officials from the US and South Korea issued a joint alert regarding a notable rise in Gunra ransomware attacks. This ransomware is targeting various sectors, including healthcare and critical infrastructure, posing a significant risk to organizations that may not be adequately prepared. The advisory emphasizes the need for improved cybersecurity measures to defend against these evolving threats. Companies are encouraged to enhance their security protocols, perform regular backups, and educate employees about phishing tactics that often facilitate these attacks. The rise in Gunra ransomware underscores the ongoing challenges organizations face in safeguarding their data and systems from malicious actors.

Siemens has alerted users to vulnerabilities affecting its RUGGEDCOM APE1808 device due to issues in Fortinet's FortiOS software. Two specific vulnerabilities, identified as CVE-2026-23573 and CVE-2026-59839, can allow attackers to execute unauthorized commands or access restricted files if they have the necessary privileges. These vulnerabilities could potentially impact critical sectors such as manufacturing, energy, and transportation. Siemens advises affected users to contact their customer support for more details on mitigation measures and to follow Fortinet's advisory for workarounds. This situation underscores the need for robust network security measures to safeguard critical infrastructure.