Hackers abuse ViPNet software to target Russian govt agencies

Published on July 19, 2026

An advanced threat actor is abusing the update mechanism for the ViPNet private networking product suite to target Russian organizations, including government agencies. [...]

Continue reading on website
Other news

UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware

July 19, 2026
Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy to trick Ukrainian targets into infecting their own machines with data-stealing malware.According to the Computer Emergency Response Team of Ukraine (CERT-UA), the activity has been attributed to UAC-0145, a sub-cluster within Sandworm, an advanced hacking unit affiliated with GRU, Russia's

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

July 19, 2026
F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 (stable) and 1.31.3 (mainline), and in NGINX Plus 37.0.3.1; anyone on an earlier build should upgrade.Triggering it can crash or restart the worker, causing a denial of