Google researchers have discovered a Kremlin-backed operation using malware to target potential recruits for the Ukrainian military. The malware, spread primarily via Telegram and a website known as Civil Defense, appears to offer free software for locating military recruiters but instead installs information-stealing software on Windows and Android devices. The operation uses a variant of CraxsRat for Android and a custom version of Pronsis Loader for Windows.
Critical SolarWinds Web Help Desk Flaw Lets Attackers Bypass SAML Authentication
SolarWinds has released Web Help Desk (WHD) version 2026.2.1 to address a critical authentication bypass vulnerability. This flaw could allow attackers to gain unauthorized access
