A massive brute force attack campaign is targeting VPNs, firewalls, and gateways from vendors like Palo Alto Networks, Ivanti, and SonicWa...

N-able has issued an emergency hotfix for CVE-2026-86218, a maximum-severity RCE flaw in its N-central RMM platform that could let unauthenticated attackers run malicious code on exposed systems. Shadowserver reports nearly 1,500 internet-facing N-central servers, while Huntress says on-premises customers should move to N-central 2026.3 HF4 immediately because HF3 remains vulnerable. #Ncentral #CVE202686218 #Nable #ShadowserverFoundation #Huntress

CrowdStrike, Google, and The Shadowserver Foundation disrupted the Glassworm botnet by cutting off four coordinated command-and-control channels tied to Solana blockchain transactions, BitTorrent DHT, Google Calendar, and direct VPS connections. The botnet had been used since October 2025 in supply-chain attacks against developers through malicious OpenVSX, VS Code, GitHub, and npm artifacts that stole wallets and credentials. #Glassworm #CrowdStrike #Google #ShadowserverFoundation #OpenVSX #VSCode #GitHub #npm #Solana #BitTorrent

Interpol led Operation Ramz with 13 Middle East and North Africa countries to disrupt phishing services, malware, and scam operations, resulting in 201 arrests and the seizure of 53 servers. The operation also identified hundreds of suspects and helped link the criminal activity to nearly 4,000 victims, with support from companies including Group-IB, Kaspersky, Shadowserver Foundation, Team Cymru, and Trend Micro. #OperationRamz #Interpol #GroupIB #Kaspersky #ShadowserverFoundation #TeamCymru #TrendMicro

The Shadowserver Foundation’s mission is to make the internet secure by exposing vulnerabilities, malicious activity, and emerging threats.