InfoSecBulletin Cybersecurity for mankind

Hikvision has released an important firmware update for its wireless access points (APs) to fix a serious vulnerability that could let attackers take control of the devices. Known as CVE-2026-0709, this flaw has a CVSS score of 7.2, indicating a high risk for businesses using these devices for connectivity. The …

CTM360’s new report, BaitTrap, reveals a global scam network using fake news sites called Baiting News Sites (BNS). These sites imitate reliable media brands to facilitate investment fraud, typically sending users to scams like Trap10 and Eclipse Earn. ‍ BNS campaigns target over 17,000 sites in 50 countries using paid …

The Russia-linked group UAC-0001, or APT28, is exploiting a zero-day vulnerability in Microsoft Office. The group exploits this flaw to install advanced malware targeting Ukrainian government and EU organizations. The vulnerability, identified as CVE-2026-21509, was disclosed by Microsoft on January 26, 2026, with warnings about active exploitation in the wild. …