CVE-2026-55200

Title/body text match only.

• New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic

  New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic The China-linked cybercrime group known as Silver Fox has been attributed to a new Rust-based remote access trojan (RAR) called MODBEACON. Chinese cybersecurity company QiAnXin said that while the threat cluster may

• RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service

  RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service A new Android malware operation called RedWing is being rented out on Telegram as a ready-made bank-fraud service. It lets even low-skill criminals take over a victim's phone, steal their banking logins, and c

• Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots

  Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots A critical flaw in Google's Dialogflow CX could have let an attacker with edit rights on one Code Block-enabled agent compromise other Code Block-enabled agents in the same Google Cloud project. From

• DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts

  DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June 2026 and into early July, per findings

• Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker

  Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker U.S. prosecutors linked an alleged Scattered Spider hacker to a break-in at a luxury jewelry retailer using a persistent Windows device ID, according to a newly unsealed federal complaint. Mi

• Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

  Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants Cybersecurity researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an enterprise generative artificial intelligence (AI) platform, that could result in c

All reports →