Blog

• Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh64tQNgn3aqDhyphenhyphengoK8NxQG3DPvWWi0fP185meJUr14eUmcX18mKJdkUz6QsMU6bTxmwAtHrd8I0J5FQjvTENA1-N1F60zsR1x2iDzaJNhPbg

• Product Walkthrough: Bitdefender AI Visibility and Control

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkLz0nkNY4YMLYNTi1KElj3dkaig5LqA6Koy92X4ndKfwBO8ctC5bNVyII81TUHljc7MGrpMZBsUX5j4126sBd3Sk5fXDGjIo-yz5qGrRsHgi2qiLNUUbf

• LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgs2Z0M9u8vYqE8SBNBzfOGoc4Crog-PBWeZNY8IprfYaa08ZyZPTfMhosBFrQNSf1JecVblHEq7sutExV92yaZWVIA51YD59JOFafKZQyEvpZNUxai8pgD

• [Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls

  [](https://thehacker.news/runtime-identity-security) The dangerous part of a stolen identity isn't always the initial login. It's what an attacker can do with that access next. Wit

• Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhGjfJJaKUMdLoNBTH2AYUmelLXonLcf93p8hSgMXRbLGJwReAYV-BUZ2jpBPuvUQktW0PTKi1-21oFnBJF8PfECgT7t5r-S-iMUxjrdoWPf3EDxa2IVrQY

• GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3aDWaWT6PmRDL9d6tHPDisxclbAk7YZIxuS02EUFvNaWrc4UKwUqW0RI1KT3r8zsneOguD6b85yg8mf3gAzZZOGuLi-mXckGyzwmXXb3IchTBSVeRvPlU

• SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKBZR5elkBVKRcFO6lyde7XYDVO73IBxDvnx9-UkLst3GhVFuK8Yz3QBVIIEJABDjZuJMn8tyf7RLLPIRV8J8qe-OUULjnQRaQNyWricSsOjlKJoyYu8WO

• Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZSH26NsXmSsQGaAbhNyJLMaBQKFCmabIbFZyi2sUGXjHQOVztQEQfXLarEAx1Fl9lRwGAryBE4zZEooJ4cochODcB4x8wQnPl3MRWiyBcpyEV6i8VPxvw

• Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEile879Rmv8zAdU5PMclUp5RnNGDb3h1u3aVZ-VigGjnO0RFcyCQ03s7lIqMGDiow5ilPumq3B2bsvewqRlepch4lFwLvOUEDQZPYd9Vv8untJVZFmrv5Zh

• Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigX1U6rARsREVvdJOVd0vGWuybd8470G2xcVMyp0urHrimpzBkv2-Qyoqcx9BpQOlndrW-P1tpya8dQwnEscYsg1NYPq3kGXKayoosc20QHDXRyadNlRMT

• OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjE6tXAfDSv5HwaNsBdrtgbjvOoTMYJuMGQPGpLM5auUfz9dUSuExG-IY42zMx-VP8GbM-oXAVGbKjHIqNOHy08-lKsCPrJMbhPrDw-9UlJpapcAMZohyph

• Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwUoSEpf7bMmgL7Aa7NRI6qvluN83g3TcKAONrL5REtzYQIVR4TqrNs0awkDsRCXvaSEaOn83V0t1jpwkrh5FULBjyQJnxe-m4gkgjMHRC0SZHpkBDNjOS

• Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizNi7OCo6m5vsFkEP85LndyXnfiDgk2h5R0WwWyHZ7mdK6Uh9xuLaI5ddFQJ45fW7jG8eC4VtIHJT1IQaUJCoAEMClMEiv9dA9kASwDQJj4l61ZSIlqW2b

• AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhavZnpNnmOBy6Wnkh7wfYD4-I32k65R7uyhYW32Doh3YVqtfJaagZZuo9JN-cixODo6h846eR89Aa55TGuMKfXmpjZEVZQ0ssFoP4-qVX6qrvSoyfRsuq3

• An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part.

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbop9V2vtfHPW4Obd0zupOPpNFCd9N5HtVwWVs9u-njx8RuEgOkAh75uRjWLSh3zHQ847m7xc01PkVAdKhyphenhyphen5Pkg2PbqthWVQe-9lcpKclCOq

• Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj010OXrg2ZBrxwqSnpzd8SrIDYdYOMtdnzIpG7YnCjv1QB58HylDTkfFmXtZYci90doRcSrPdFfYLowMS5t2RpD6UkCoWveJrKajQS-7d3sDtyI22FYN0T

• Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLXn6RSZOSq2StbSf2fHVaHwVEetIYN0wGfuaIcyaEnwSnXLaY1FBfSKPFzzQuKvtpRygCR7AvNixA-SCkIA98QjnT7gE2UWYtoiZLs5VxQC8KTSJwwlcP

• How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEYzcrs6sSW45od6MYo5jFl29yPGuwipgy7nfS3STYqknrD9b5OcU00c0sqjG8Arvqq36ojwHSZMbjboA3bUQ1-ZcLRRjmuEQpzTDYYXnyvySzynW0UOvH

• curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4S5rQ2kApGYmSMOh6PFsgD3yRugV3nzSexwBhEe3BoSTQeBfSu2-3JSO4wDCnU2LmVMWtgA6AcBEcf2wOpsL2v22woZ5fel0XaSonlbgDWSXMuV3iu5ew

• CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBUpsAaH4Pe-HlsDhdSH5KK3VgWm9NEXXLNBOpxxp4d8WMZwSNNyPALzuapRiUlq3-dLDe2bnPJfh42cdfH5m3LQWGKXZvHF3sYacyDbtZacKIIoluyNgP

• U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRRY0Y0x4bBS7xZHNvUUjosK6tuvOhbBbE9XvaoyiONRttpSxhIwBaCgDpNKo9kMR37n18wKUXzpzL6KhmNC0OJsGZapzAaAteSFlbasNFzCM6XZXsSU99

• Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtmZA0sGFnGRVBoPOHXGNOr-Q1MpdbCUNVrfxBTV6zURgCka1DOH4xccWuismhU3W1BEiostTKZetIhtrFyXrInKdzjqK6Dtia5TDOqRiu4rkktKmF2Iz1

• Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkZLcjmZtzt6NpWa8x4Wz7EdcOQEW6xYv6DAmBnwy1ctZZeRAyeSYLES-Hmkr1QOBv72WNuGKwKQ-NN179Rw8BRTcYO38sYwxcbDkg1ISWqWrCRJ9JfUXh

• Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhfSqm3p4u0HNpmeikU6Mo4abprP417Zb3pPW3-6IGrTHwqkbz1CqiuqxL2D0O1PH8J4Ho3ZpNdJ5VFluIjKHX6qT0WqZYfHQzyu0cVzGee9EmAZ9pNzsZ

• AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhH5A4EPZ4VVdF4dve5fMe4BwreUmtWCJQrgMiBdiZyoFInoZKnO6ouOwLMCyyQPrXWE4n3NE39b4C2UQi-G4uE3ufyv7A9IEYEp9O3ggTu7AyDRzOqwVqh

• Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1tlALzc7Hg-gD5PRFa08hoOp2KRDu9kNSJk8nhZ91us8q-K7qGfnoasa6gONBjZoEtGJqPEZY3rKMy4Uqozk89X-L7IQBV8IrDqnJYdtAsCC4d08mmQUI

• GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiddFchlmnV3vywI0BM2-8IaZb-wHXwE8DplGqZYkRmcYkeXiSLfVmnVAU-jM4yikWW7SWokanhS4hq88cVHjAnaWDGkl3VVAtPdv9SHWp0MNb0CIOAA-I7

• India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyJOEj0MfpVvrP-qAXhuoM2BBSjZ6TwPYR-nMGg-tBvu7Er2cMlvMoVkJOUP1qE2sleu3a21YjvdCQ9u80FSBTx7NNP3cZNfradprnGu-EnIURCxZK4sA0

• Why AI Confidence Is Not Validation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhoMcD8RJr4YbArE7ir74w0wFobrcZI94oJ41wVwSIFPeQMqG4Ofa6xgtcUqD9op38axL3iAMYu-Y0zv0CEc7LrZAmj7lWLdzZ29ZbL5TD6Up2nGRqJkHGo

• Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4G5JAIF-hCnKf9QyWLzWIWxTrUIjqshujDHf0-9m84O9f4S0Z-IQ4Jg-T11PhrwZvzsFU8Z-pI3uRsnvPSE-FKVtrUx0pNZgHKf3PuMJCQmwopiE5hyMR

• Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvF5TcwT7nwh6xcCiXS3I0m6qmvF6EorwitA-7ETGlXzpc89JG-rPZye0FkJfFwunfKHXMTkGygpBRkBdJvqaGX32cUdiqoTAA-sjGmsSlKJsL5LUFpyZL

• Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWENfwA4xQHfwINduJpVTTiNeAmBkevujxbloFijpq7PQV8xOV-iApTxf5g9ImWoKJolO1RuhlNeDc2NwoWKOdPfjfdDzMhCuOsWtdyCZOOs2fTW4vmXYi

• Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9mXutJ2QPpC1NUCUZWdHjUDUGPSD3DaDY4b-T1EXbg07sNWADsV43EvUacKzn4Ohp2bRbD93t8kXBpv513XdMZEnMh8eNkY1bBaSuGICWbituqjgWNCjQ

• NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEionuV8CAd7SP0bgEbHyb-0hp7JWNkWpPjYtkNH9p86nRQrxDN1T97D1cragnVVzAwCEFCuqrwuysgwzxJLfvTXrYhMSGj5rbBzrpjW-VPvAmrc2-9EARhB

• Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgp2enQeK-5xZuEorLQje9WodynVLALJCEvTyaMSolIfwVonZGMceQWA8yq9xPMD-CRkIp-V03EqEBVTM5yMq9IHWRRfSHxWWDS6kCJVcVAsmlFXt5wD2pK

• Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjX-Vi04Qyk2-RKyXrnolcZ8TTBRKY43kIBB7l-1Na3Xtaed00DJtXclvIdp65s6Sdf3ksabzWKXmYTmKwx9xAlROi6eas704naXFtyx93xru04krAQ9kVi

• Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgE0PuxlZklu67SsXNfhvZefiytkMx159npHL6Ln3dNT0yxzyYE55zZU5SMOFGk39ZqhfWzXpYQfXdoZB0gGYdkoPu3cNactAPL9ZuCWdbv4Hp4ZkoBLtEn

• ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8jHVMYXIjddaTrqHbBuPm3mQ6Gg8qlALwitmiIRM9OplZpPxLPDFet7ySOV0OVxPj6cW1oz0K6rydDvGYQGalR1jSt10bz8kti4dWnM0d3NnUBjuymD77

• Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0Y0ZP5acV4vjjJV9at7yMnz0frJTAeLd3nGmqMIcifTwGoe2NsB7pDInUjGa6aocyqoM3o-NyXKpsfyy1LRdkH5UG67UVYClNZDYArvg-hkmtifcalWo6

• Context Is King in the Fight Against Modern Cyberattacks

  For most of its history, cybersecurity has been reactive by design. Spot the bad event, shut it down. But as cyberattacks evolve, this thinking must evolve too. In the past, attack

• PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMvdc6m999SfUEEWC89wHnBiUX9WAMCSdWtbFPlrH4DuREHfOJL7G29LkM4uAvittg3XsHxnq6dqVEX1zBjCGi5RJDbQZlrq37gHSCXpRrn11FEN-hezQn

• Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis

  Proofpoint has agreed to acquire data and AI security firm Varonis in an all-cash deal valued at roughly $6.3 billion, the two companies announced on Thursday. The deal is the larg

• CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyMnLMgZNuoh6c41MPT17IsrvbfocknmRb8sxaolFmTpU9h0b-jyJAe9Ods3iCWligbpcd1a1IThvmpUts5llDkKkScffnItGGrGcneDJ8oUJjuc76syHF

• Microsoft Patches Two Dozen RCE Flaws in Office

  Hot on the heels of its record Patch Tuesday rollout, Microsoft on Thursday announced patches for over 30 new vulnerabilities. Most of the new fixes address security defects in the

• China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEic5zD5GBvYxe93igsDOMdwS6eyfDORIWio42Z9UY0enK0XKWYcQlLB9RLx3iOV1xm8vqBxMVZR8Lt-xxOumO5RIFN3hgB-yZyGGlVMypRx5lm2GJq-1c9c

• F5, Juniper Networks Patch Critical Vulnerabilities

  F5 and Juniper Networks have rolled out patches for dozens of vulnerabilities across their products, including critical-severity remote code execution (RCE) flaws. Security and app

• AI Decision Models and Their Impact on AI SOC Platforms

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVccQyMWKH3TTGpMGwsFUkVETAsZFTWBlOZyCPr3ZlMJfVPTN09xHFKk94-6OWpwhpE68JRImlVGgma5xaM66ohDwD5XvlOu1FjQPllSMNRvuDUMPB0PNU

• Hackers Use AI-Generated Scripts to Hijack Linux Sudo Commands and Steal Passwords

  A campaign against government organizations and state-linked infrastructure used AI-assisted scripts to steal credentials, maintain access to Linux servers and seek sensitive data,

• OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhkqmj8WR1EBIXlf0-PIfEmv-3uEk-0FU-SrKAaQyn33syLPFRar-jwks7o70PVBvmNd05CwdNSVPXRq3bN6ED0jREroFnSFjS1emRZoEfvsfw8UlSspGc

• OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks

  OpenAI has disclosed two incidents in which internal AI models, asked only to look up public figures, instead broke into the live systems hosting that data. The reports, published

• 37-Year-Old Kernel Flaw Exploited to Gain Root Access on OpenBSD — PoC Released

  A proof-of-concept exploit that gains root access on OpenBSD by chaining two kernel flaws. The main bug dates back about 37 years to the original BSD source code. According to Secu

• UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPclyw7bJ19im5Qmzj9jgFlsM4XJqPK6hyphenhyphenRDCcQ0bnpWrteeTWgPNlip5T0PojAC6V3osZ2xIpYipKjXWQw3BfFEQ1n28dleNCLRi7difLnP

• Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day

  A Chinese APT has been exploiting a BeyondTrust vulnerability as a zero-day since August as part of its state-sponsored espionage operations. The exploited flaw, tracked as CVE-202

• New YuanKong Android RAT Hijacks Phones to Steal Banking PINs and Passwords

  A newly analyzed Android remote-access Trojan called YuanKong can watch and control a victim’s phone, capture passwords and payment PINs, and send stolen information to operators.

• Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhuPumyjeBRpQZo53mvqZ2kXuPiOK02cH-ARofYrny0mQ2-rv55w7yBxMTBe3ymCW7c77quZ4xlkdDG9FcEhBYFr7GWmbyPE1K1xqU0mvT-h51Z8hLg-Ln

• Hackers Use New ROMULUS ClickFix Platform to Deliver Malware and Evade Security Detection

  Hackers are using a newly identified platform called ROMULUS to deliver malware through ClickFix traps, combining hidden PowerShell scripts, altered software installers, and encryp

• BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts

  Federal bankruptcy courts across the US have been unable to send notices through the Bankruptcy Noticing Center (BNC) for a week. The outage followed a cybersecurity incident affec

• OpenAI Confirms Its AI Model Hacked Government Website While Counting Hospital Beds

  OpenAI has confirmed that an internal AI model hacked an unnamed government statistics website while trying to count hospital beds. The June 17, 2026 incident started as a data tas

• Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqmitTMm5t8BBKfynqzFAKqJSzhs7fQczmMm5u95RLUUzuWMubd5DeM8e8EH6YOpP-gvbYwn8Cd3flsL-nGIupBw5HOo49Orr7J2rqhI99J7U4LcXW6shl

• Hackers Exploit Critical Collabora Online Flaw to Backdoor Nextcloud Servers

  Hackers are exploiting a critical flaw in the Collabora Online Built-in CODE Server app for Nextcloud, with users reporting web shells on compromised servers. Tracked as CVE-2026-1

• In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit

  SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broade

• Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgel6whr7-1Lf62w6AJwYfEyic0x1lJ0c-qOfOprMUdm83xpM7rqXbJzplx7BPBUBDD4yUcLWoPvFBhF6HIDORPNNXYj7NfDOTf7YN5lT7p80jxtN6VrTxM

• Google Fixes 10 Chrome Vulnerabilities, Including Memory Corruption Flaw Found With Claude AI

  Google released a Chrome Stable security update fixing 10 vulnerabilities across Windows, Mac, and Linux, including a high-severity DOM memory corruption flaw reported by Xinyang G

• Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts

  Hackers used a stolen ConnectWise Cloud Backup credential to sign in to 173 Microsoft 365 partner and customer tenants, giving them access through a trusted backup application. The

• Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel

  Candiru spyware has infected devices at international news network Al Jazeera in zero-click attacks, via targeted advertisements, Canadian internet watchdog group Citizen Lab repor

• MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8fNbyEvP6CCENfQMUx3EDGofY1ejEHusnumTjCLnX3s8pevEblcgrtFHhzeEUhyphenhyphenyKeX41OzQOGL5zlXeLLBnjZrLqH1IUag1QWm4QS9V2hg

• Claude AI Solves 25-Year NSA Cryptography Mystery in Just 30 Minutes

  Anthropic says an internal Claude research model has traced the origins of five NSA-supplied elliptic curve seeds in under 30 minutes, answering a cryptography question that remain

• US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars

  CyberSN’s Cybersecurity Jobs Report provides visibility into the US cybersecurity job market. It’s a mixed bag. Data for CyberSN’s jobs report is aggregated from JobSpikr (with dup

• ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxTJ5xsWsmrBmF1q18Gi5uaokNeC6-M0VbSf0T5X3KMQH7QGMhC7mz4XB6TUJuE7P9tjknMAqaGQ-Iz7UuQ-NdKKXJTgqLhHMipRcd57VUOpwfJ2xxO8Hq

• OpenCode Security Breach Exposes Third-Party API Keys of its Console Users

  OpenCode has disclosed a security breach affecting 1.4% of its Console users, warning that third-party API keys saved in affected workspaces may have been exposed. In an October 17

• Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzExwAd4Vsd2Xz-9kex6ucfK6MDmftPVCfiOGQICWDKrgxMJ6fOj0EttLP2kpYBDv4xSYdrEXt8Wntz916Oa2tyrMnaSHDLH9vb5RF4ncjvwdkeFU8Gwaq

• Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH4sbUEhtXF9n18s2f6ChnKMmjUv4Ht-DvEtZyLDPuSNhKFoi41aNlu3-u5kJLXUva81rNFwlsprMXE11cnbXces968eO-ANvWm0j1Cyi9SaoVUfneQqNI

• Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjghsTskiIfdOHK2B0WWDfWnSK0G5Ih7BqsX98tKrY4TH7I77oLEmnldtVHuUMEQaIiZZBSPJGI2t8Me7h9kDtE4YGZ9-5NypnAu2-yFFrXsWYkR6OJPlbq

• Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpRcdfXd6kYnqLLWSFdzGKICUzSr90MsV2f3PXtw8VDVcT-xOP2w4HwnVzrRI4bdJqhboQMFIm9BZ393b89IOqgYx-VVmbB8-XJCsZ9SAIymdlBpEf5ARi

• Modified ScreenConnect Clients Used in Worm-Like Campaign

  Modified ScreenConnect clients are being used in an attack campaign to spread malicious payloads to other endpoints, cybersecurity firm Huntress warns. The worm-like attacks began

• Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjiSiBDO5j21gorWS-UjrLlDl0RzniibBPjfO4xfPBBLbH1yTQIB88G-hUBRtYNufYwkPpVjWWLu0GXk1TB7pvx8KbQCbfsL5Ft8JlZLa6iZfvuHU-vKSPN

• Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

  Threat actors are exploiting a zero-day vulnerability in Adobe Commerce and Magento e-commerce platforms to backdoor online stores, cybersecurity firm Sansec reports. Dubbed StyleS

• JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilF0vQTn1mpUhivH8aX0vt8SAY5wkJqpHriuAdDQKVuWON7ZSzOAbWlwm50oxWlOJ5wMdzBjzy1wRVGNL6IqY8eYFUlIyayK6aiwcXK1fTO9JWZ9hGQYrN

• OpenAI Agents Hijack Another Victim Website

  OpenAI agents overwhelmed a small German Wikipedia-style website with thousands of posts that fought the moderator to avoid being removed. On September 4, 2026, Reuters reported th

• N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOtyshbb-hej1pQzey0RUhPD2w29ONlPDQMzE9Nc4lM529hKaHhuLKfGXEnqVZyUkMKhJchEeoN1clSKo3-opm2BQkN6FJ72xBZOZwxX6sTwU4Zzkj6taO

• North Korean Hackers Deploy New Linux Espionage Toolkit

  North Korea-aligned threat actors have been using a new Linux toolkit in attacks targeting automotive and media organizations in South Korea, Rapid7 reports. Designed for long-term

• Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOwlnNFKd-mH5uyY-AjtXSVx57m9MDT4WRtoQStPY9HoNxOP3ps7znRzENJAK7ZzF4homlCzVGVPFuFZ1sXYGciKyA3rZNNYewwTXhwpRxCUFaPmUmdgPT

• DPRK-Linked Hackers Deploy Ted Backdoor and CurlRAT Against South Korean Firms

  South Korean automotive and media organizations have been hit by a quiet Linux intrusion toolkit built for long-term access. The malware hides inside software that manages web traf

• Kimsuky Hackers Use OpenCode AI Agent to Mass-Produce Phishing Decoys in LNK Attacks

  Kimsuky has been observed using an AI agent to produce convincing phishing decoys at scale, then hiding malware inside Windows shortcut files. The latest activity shows how ordinar

• Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWAnxvqJuKkqq0ab1I-XR1YtpsM6BadhHDNOIheZmBflLWaQ018JFJsAUBVuyWWTYI4pyT8OQNXhui8Annde3SnOIScH9B0ohMq-OzXLjvPeAXQnz4mAUd

• New BYOTC Attack Hijacks Trusted Windows Apps to Abuse Privileged Kernel Drivers

  A new Windows attack shows how a trusted program can become a path to sensitive system functions. The method, called Bring Your Own Trusted Caller, or BYOTC, turns a legitimate use

• LG Smart TVs Caught Scanning Networks and Logging Audio in Standby

  Your LG smart TV may be doing far more than displaying your favorite shows while it sits “off” in the corner of your living room. A new investigation from Gamers Nexus, conducted a

• OpenAI Commits $1 Billion to Give Critical Infrastructure Defenders Frontier AI Cyber Tools

  OpenAI has launched Daybreak for Frontline Defenders, a global cybersecurity initiative designed to help organizations protecting essential services use frontier AI capabilities ag

• New Linux Bot Hides as Kernel Process and Launches DDoS Attacks

  A new Linux bot called Tengu is built to stay hidden and turn compromised systems into tools for disruption. The 32-bit malware poses as a routine kernel worker, persists across se

• ConnectWise Warns of New ScreenConnect Remote Access Flaw – Released Mitigation Steps

  ConnectWise has warned customers about a newly identified security issue affecting file transfer behavior in ScreenConnect Remote Access Support and Access sessions. The issue impa

• Microsoft to Retire Manifest V2 Extensions and Switch to V3 for Improved Security and Performance

  Microsoft will retire support for Manifest V2 browser extensions in Microsoft Edge by early 2027, requiring users, enterprises, and developers to move to Manifest V3. The transitio

• Natural Resources Wales Exposes Sensitive Employee Data in Spreadsheet Breach

  Natural Resources Wales has disclosed a personal data breach involving a spreadsheet containing sensitive diversity information belonging to former and current employees. The incid

• Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits

  The security researcher known as Nightmare Eclipse has dropped three zero-day exploits targeting products from Avast, CrowdStrike, and Nvidia. Also known as Chaotic Eclipse, Infini

• Your Cloud Security Checklist Doesn't Work the Way You Think It Does

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAkHa8CDEfDzL0HknvyLE5eRK8r91iyhgzpCS1GmG3HRtriZYYFzCTP9H433YsqJ80SAppgs9g6rOhsTWIzHPhCFcZJS18DIj5ANgzFwSU0vfcyJofTEqE

• Hackers Abuse Trusted Google Services to Hide Credential-Stealing Phishing Attacks

  Criminals are using trusted Google services as cover for a wide phishing campaign that steals corporate credentials and, in some cases, installs remote-access software. The malicio

• Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiROOqCRPV4u9cWfJL8nvCYKi4Ake-ki3uh8Qn8RJ0P20h3MzqxVfF856pJ9DQZMHy922CeLwOHDc37Gpb4p1UCTMx6cMT5HeeAPw4RitCuQficYcGDDkqp

• TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpxriybAzLw0daA0mtL3sZd04fy8Sal4s0mrBAz2-ksjwfP2V08YKKbCJY57hKG28Kt6gn2mKq4HFSpkG2MNvA3Oz6MhNUe771Nvpahn2nnCFHPpxIlp5I

• DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHmPwSKHINCGncOKbSs9X05lJ2CJQivbfLYQ6LP3njVHAc-4fgSYJz-C1u6SUiFEtcF4ddjW3PBayFsVaF2a03OOkaLfWlg8pxJelp5bEhJT0LEv8-XPs9

• China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxYI5Ntk3CPoEGUHNQbd80hij-0QLnz3VHBU3aXV-mvQq98IE6xsRlbuwZ2PNbbSV7dA-HlNfqRWj0bd3XpQCOPt9R2gS3PJMm8lfMP9IoKyhDNbY9NOot

• Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEithkMoEFgk1IZjhhGp94DwzD4UyQGh2f-epiRD6fnXcMyB44HkXe-7XaHzviE8sImzIctDBjibyY0GdrtOPFFeja3KnOd9KsPFP3PeTxUzlshseSyukl0-

• Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHyB4qaQy8srcEIgc1oMi08PMKtoVFIsmW3ho7f7rISFML8Kmz8jYzDE1FCN9Nfo4LvvgVFVFEijgLbCrZcJ5zy7xlvAYTKuyGrcE0IU6yqEd-awlmOyRQ

• ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8OUY2TmBxA9RLM9yG0dnv8OShMmr0KXcJUWtPvcTbFKQ-jmG46PyVNCNxQH9VacMVqmi3ZdmcHepDqoLT4XOl5AHZ6mnxmgQrTUmK2D01fsjrBJKQ1Kml

• ⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEQHUlnyxCIYFLSRsvotvppFdq5zZ2BQQXJ4PI03uluqvzH3d4FhLogVr2pn0zbUGUQlQQXrk53CDaRZ3q4jC3wLxxG9NPQMtAsx0qkU4yatwjEogU-3RF

• North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg79i0RXS7ZzzPurGwbsquOv8l9-GsYQmsw9y1qCzEeDMKYNXjn84VZVfVZU9aiGqnyDyQ6ZdgKosZxn60KtJ6TgTREMyCZnhyCxv3kSLtAXBHA2suVHDYF

• Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9EygYWh8fZRphLL1V9dg-h1jgQ0f9xmlVuPwPAaaEUUCBkKbQ4nTaL27WIevCJg42GWtDGMKyRvzBUz9MWtD2FxPx7vCKwXLirO-N1YRcpPy0mXBfTG2g

• Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiS-2JWiSkzpLkhR3nGp917yyeS4NATTlFhnDXcvmQdrc42BPgObEnlmwXMDP7fN8ruoEJ13ZrulTVjPwTfU8aeSfK9uGt5H9dYK0s-STCiRMe4Wai1tgbe

• Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2b-1gQHvYc7ZLc86QFtZ2LoJ7zFalpJtSyelaxiMf4Ftnhuvp5eCJZRSk2NL0tZAZAl2z1UPYfOBSTbdGOPOZexgt3GkuUqsrZPgFB2F-qG2Irc7Ioj6z

• Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXRNAAGu1amxjm97oXzRGvVBD23d-thmuPvBbQm10hKlACH58ndu51swo4ggT2P2FJw1vbmWy6qdMZSyTRrgAXoi19O0Zf0vCcS47oMuhMuPSyKc1kL7bp

• Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhm2I0vj1ygDfFQ8UzazaxECq0aAP3UJVRMzeCN0MgTkWk4yLEUbKKU9dE0pIyXZIfJ0MgxjYEqAqWLAXAtuATDCdFZPI9WGkgwz04Mdd7LChIfMrWk-vhG

• 13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhB8expOvrNoEO7Mb5MSWWRnW2eVksJz4NGRldHmcBuWZ76ojuMDD6HJki043g-KHOi2zjcYQtsvYGXL2lyzPNy-vwRTD5jzMz5qdEXwfvYqt9K1Uu0Z5fp

• Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvGVdje0roDTqKcU541FTx34ODDmuBU-qtwYwoW0-qAYscD9yX5stIs8EhQtC7gnwM4WpqNTjYFRRwXm7w97C5tY7eEhCQJ89YuesRzrbbuR7knHdEkoDe

• Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0o8dDcHW4CJBLnXfYzfofbG1w0Fi4zCPqcjEgASsL0gXnESv5isMONZgXzek2rM3VwkhnEqz2K4whDwBlFylCYvfXASQmsQSPA-8U25998PBT2Xopdaaj

• Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDpXbKu79XC2ObZuqgBEMG9E1VR-SyLdDwhylzbIupomfXEbDegUT29NNntDVz9NtiGLhnHJdrq1GyC5RbPHozyzmCVov6JJIg2sCiCb5Jp8SHEInYNR5P

• Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb9lLZ-CHEFECU3vn2ObupuzweLn7l23dnUcs2Qd1H5hsxut3nQKqe6W3lbhcSyVF4PDgdfuSauhpeMKmW6wZGYW3kpVdhTfWhfpISTtfRzw25VOSvJNR8

• Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhlWf4d2lnMsRXbGXpDaQ8uxTM9SD8QBArFea3LdD93t2xnpO4Bw2KiBewRfrscbj2Kfe6DSkFozbxWnHwMeR5p1cx2XksAyZD5avLwxqx5L6tvTfZ807ni

• Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjT6gZEQ09i7WPG39V2zwJLuC6M3N7mvjMQC0aVmtON24RfDshYfzqKyGKWXrTMCbGPyNn43NPLWaufMe0MSlanyUCeZENy6XXmYCC8NzcHpCiK8rv-bpk

• GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWjRcj8Bn8kWovv1-oDjSP61hMxx5U8u28qVJSPdP7mRBCNbs5EJjjDrWWk7SFC2FraZej3T-oouRqSRtoTr-YMPGGuOphIGNRj4-Fx0eVgMahD3-L62vW

• Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHkRZMEpG9dgsbvSzYfaPZC5u0gmzUw-5NHDTcsQ-MQtxr6pqNrngG2LsyMJ0KKxA364L3Lq4xhGAxCTRQ3C8szlo9aLJeWXw37C6hsAD5YbYCJF8KuQyu

• How to Secure Enterprise AI: From Adoption to Incident Readiness

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3ZMbYZ20M3vMq61k1PH7V-0evy5iTQQAGHDcA5khnJ304G746XRgkusnpa7Z31yIJLA7SX5ShzsKdvk1JfTwpVTSm4VPlkYoYVdwW9TaBULJ5363G0e-Z

• Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNhCfat7BT6m53utL9Z1iMKYQv6B3QwsQdxZBzkmr1WsJpDDdFGZgHjaLuHSXMBBJSyfxtyR750K33X3GzZwYkHac3mpIITheSY4lh8LMK-ufnQ9htwhkm

• BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjc5HwRa7RftYjoKUzpULa7DXn6tt4sZ7RrL1PNBN0Um5di5vxvgRQvmF3rF9-Xb7URM6YD9t-kEu0e3VBeERcdHio4Bz92EOYUwR2s3dosskPZbfztVyjA

• Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixn-0jJvMDlL85UUyW0E5PUDeUnMbGMxZJEnJMOAXXAuiqD-e1D9IoZdYsNwwDY16NA7x7GFHzVrx6LqJU7u7ywR50UWP4DGybNAhTlLPeAiBcVwVUJPgV

• Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhlrspu4otI5zjtu2q78NDrwnqfbTv4jzqXhH-txAo8pCjXDPRJjLvfWpRyHvbimqVvAOZWI0pMVmu2jWVdETbh2csa2UkMHx0M2uu9cJkB0E4x1mjjs1F9

• Fake Software Installers Disable Windows Update and Weaken Microsoft Defender

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhKCtgI2bIF4kLY71qjkluS80XAm5YPA9y9GzTxC8XBTaxq1d42jyZ-bxAr7OlZ-wCc4-RDpNmUPKxd9TS1dvtjt3gysB86SkMuQ5q6vGb7HTh-DVMNC8V

• Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiu5sAuC-e7tUigtaAj0gicqzykWZTZRujpV3IxqGW1wrVCuXbKXG7M-nNIac5QO2GYKtEQ8HfnUENc6JZpS8haeGQIvOH4EddDvrQTJwXY2kkZcz41JbeT

• CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhaGEC2JQn3dU5muXzZhp9ouduHJ5hE4vWW4zHDomXp7hJ3hHafGPmMU33aKs7A8dwhvqsMiwh8PNi4GUNzH635enPZT3oPdcZejqkA9vpPYbQTLZaAhzAV

• Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmg6caSDWQVOPIIl9NAXS4ofXmOdWz1eIGPMKMLCbHXcuWiv11QNh2k-f43JAoVVQNMQj54d2yqJiO9vzwIO8nvQIyxr7N6GDCKsYDmSJEpyjiUBsY-zhM

• Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaEvtAyNP-TiY3M6wMUFNKymiKBeQHMEIzeFf79X0fNFV0gyV3MiegzULqTG6bC-20nprEpTHySkf3Hf0N72sLy-oVN6ndqU4OwSm37Cx0OYrr2MbzpiII

• Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfx0JCqLgANXGkgF5NMgRxJg5IJ8HgQcvr2zxEM6HSYzesKdLjKbrqmtAegyIpBmLxnryF5CeJlRh4J09q3e1kOo8dEzGXjhQpunnmGoL6wzEW6R7lsN4z

• Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixQdi-o7wSstsDvvGluX8EDCUhGUHwpKjSkMSaigZZkFOEImWS0kLYvjSaG9olG2Y8GYxqH2kKRUtT82RVMLfW-FuBdrWMbGSfJMVVK3YAL3FClWT6t0Dz

• US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOZ4yHwsQM1Z9se2g-uJPuSkiSNpmyWCCia9dKpH9jnTuFYyts16e2gdkB45YknrA-nuzp6-mbEi-1adV92N-7aBjfYL69ECPlWOV7a5xb5rG6kqsMzc3W

• Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiX1nx19KbhbT0rYFjMzqgJuG35q7QvJiMrikolTZV9sWztkSoSFUr95E-h-9vHv-GBGmRHAyh5Du0DDMYMr1m0VbD5YgYO6dVoY7p8d6Z5BbORiBOGgJfZ

• BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9vYkFCrVzaEl0WQj4XBILj6pIxDJ92eWgVrkOapdvJJoKF95JCX7VmQzY0HPZkhg5IMvjfCu15YCs5AMJ22NM6SBX7j7sCgpfiaUZZAL4Uc5vP0-q9VKN

• Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgj9su2Wd6Yb88IvMpg5v1P8IyPg4KWKTeBXjerFgxz0U5WLKO2U50jymR-fKujsKeMFZ3q1VEupMRFZUz5gD47JRzVceagYJJ3bCTT8t532rY63po54kan

• ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUcEnh-e0L2Oz7JQcSCFBd90F29Z7wHbJYiWOxWeZTeLLHbRZYK6vt1PrcUOgSFei7fxLMnP2lp0QyEOW2rzfcsnBFhayNHtKLPtHJFsu55wGxuA3XLkZf

• Nvidia Is Buying AI Platform Hugging Face for $13 Billion

  Chipmaker Nvidia (NASDAQ: NVDA) is buying artificial intelligence software platform Hugging Face for $13 billion. It’s the latest deal by the company, whose processors are integral

• GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhbaZmLqqSMfwaOmjs47PEd97T29HeDX1dAOZn0Qzo0HuloopzzhZ7pnQzlsHvXvIAwzMWq1tbza325niZMSgjTMn0z5MyT-CWb7NfoprOWz2Lcj6tosVDy

• Google Patches 6th Chrome Zero-Day of 2026

  Google on Thursday rolled out fresh Chrome 152 security updates that resolve 12 vulnerabilities, including an exploited zero-day. Tracked as CVE-2026-85046, the high-severity bug i

• Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjelmC2UuYemuI1nBeaecfPBZ1Bfb5nz6T51OhCUPHJivX8ioIjrYMVtVsjsrcA0xbEeO4iMthJ2xwXWJVhAb5CCJlhnJS4McM9IpmPww86RSznT3h7pg5D

• VMware Workstation and Fusion Updates Patch Critical Vulnerability

  Broadcom on Thursday announced patches for two critical and high-severity vulnerabilities in VMware Workstation and Fusion. The first issue, tracked as CVE-2026-59346 (CVSS score o

• Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg7RQQCR9QxY1NZ80GCfpUjvGGcw9QDirshH7KrSyc097EIaNqLLVGgnnlOE095qTOt2q9CTu91gJPf7Y9-AcZahb35e7XG2YrA8D4O0FPwVRSzBzMT5ecK

• Catch Raises $5 Million for AI Executive Assistant With Guardrails

  Catch, an agentic admin assistant for leaders, has raised $5 million to accelerate its purpose to solve executives’ daily pain points. The funding was co-led by Entrée Capital and

• Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9jQ8JSakEpnqxzsAZhwXnVvTMB0Lrbj7shOcXtSJzA30wcMTbkAIUGvSZPiBXOLeAW66Jpuysxn56W8YWD00hsCNB742oLqeyvgD8MXdIHHqwyeehyoyX

• 12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

  PostgreSQL releases since 2014 contain a severe vulnerability that allows attacker with low privileges to take over databases and servers, cybersecurity firm Cyera reports. An open

• New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzLyhHupZwRy1pOQzT93Qhs5waZ8gqtlgDJUKgt1f37dz3KqIDDZY8uNo8QguZNccBHivdAecnY8cQUyhZQAvLH4APu3imxP-rwo2dYLZtKnJ92IkRPFmw

• Sangoma Switchvox Vulnerabilities Exploited in the Wild

  Threat actors have been exploiting a critical-severity vulnerability in the enterprise VoIP telephony management solution Sangoma Switchvox, Horizon3 and CISA warn. Tracked as CVE-

• PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2Gb4Wd-HSxdrPbdtUFxmldzzEkPEZcW1NkT7tV9-EfTAjDENSExJBWmOeyIJ5UKjszQfCNGkVoBtuxya00rFMrhlJUAuS66Gr3kvU8GgFjMr7DF-7Ux1r

• Multiple TP-Link Archer Vulnerabilities Allow Attackers to Execute Remote Code

  TP-Link has disclosed two security vulnerabilities in its Archer AX55 v4 router that could let attackers on the local network crash a service, steal administrator credentials, and

• OpenAI Pledges $1 Billion to Bring Frontier AI to Critical Infrastructure Defenders

  Daybreak is OpenAI’s continuously running agentic loop that brings the power of frontier AI to simplify complex security investigations, validation, remediation and reporting. The

• Plex Urges Users to Update Media Server Immediately to Fix Multiple Security Flaws

  Plex has issued an urgent security update for Plex Media Server and Plex Desktop, asking users to install the latest releases as soon as possible. The update addresses multiple und

• Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoD4eMYuhLT8HvcHbYe8A4hkhmDH1f4pIWTIm5AXKueqdpY1NS8yNiTtlzS4mdIS8PLY8zM1uQDNpO1U49HCUoJT8nn2Bpb6krpcYpOSQ3H3Z6fUsm-Uko

• Microsoft Confirms New Exchange Online Outage Delaying Emails from External Domains

  Microsoft has confirmed a fresh Exchange Online incident, tracked as EX1467029, causing delays for users sending and receiving email messages from external domains. The company fir

• Hackers Turn Claude, Qwen and DeepSeek Into AI Agents for Real-World Cyberattacks

  Hackers have turned commercial AI models into working parts of a cyberattack operation. The campaign paired AI-directed tasking with familiar methods such as vulnerable public-faci

• HPE Patches Critical RCE Vulnerabilities in AOS-CX

  Hewlett Packard Enterprise (HPE) has released patches for 34 CVEs in the Aruba Networking ArubaOS-CX (AOS-CX) platform, including critical-severity remote code execution (RCE) flaw

• Hackers Use Invisible Unicode Characters to Evade Phishing Detection in Millions of Emails

  Attackers are using invisible Unicode characters to make phishing emails appear harmless while disrupting the security systems built to spot suspicious language. The campaign pushe

• Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguiDwimIl7rewJeRtSYeCkmhBUPSN0lsURwcKXrBtQ4vANRZqEkbjcPBIjODR0kFgIbLqwLiaBcB6lX8M6rilVclrxZcsKogB3NNhnwqJz3dZwgWGZ-6NH

• NodeStealer Can Now Record Everything Victims Type and Steal Their Screenshots

  NodeStealer has returned with a more invasive toolkit. The Python-based information stealer can now record keystrokes, watch copied text, and capture victims’ screens, turning an a

• Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBL2gQMKgajDATkCjnHyMtUkVhK5mcTQ2ebqcXngB6oZ71uiJ3skI9P4zikK1s5PCH4nhPG7ZyFHHWC13OVF2KRrpIQ2U7zFITnNc3QcAm3bv0E1AzL9UV

• In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation

  SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broade

• Hackers Use Popular Messaging Services to Control New Windows Backdoors

  A financially motivated threat group known as Toy Ghouls has begun using two custom Windows backdoors that communicate through popular messaging and broker services. The tools give

• Microsoft Unveils Project Zenith Windows PCs That Can Run 30B+ AI Models Locally

  Microsoft has introduced Project Zenith, a new developer-optimized Windows 11 experience built for a class of high-memory PCs capable of running large AI models directly on-device,

• AI Agents Breach Company Network in Under 10 Hours and Steal Root Credentials

  A human attacker armed with frontier artificial intelligence models breached an enterprise network and seized root credentials in under 10 hours, a timeline that would normally tak

• Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites

  Hackers have been exploiting a critical-severity vulnerability in the Elementor Pro WordPress plugin to hack websites, WordPress security firm Defiant warns. A highly popular drag-

• Microsoft Teams Desktop Client Fails to Load on Windows System – Microsoft Investigating

  Microsoft is investigating an ongoing issue causing some Windows users to face significant delays or outright failures when launching the Microsoft Teams desktop client. The compan

• Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIuPjOUFz-c7o9qipnKr4soYR6NxJJxAYgcDqwTPl3LB5XXiag7UpIq8-qFzCbiC1cnlpWfyaRvAt9MVxIlSXeuEN97devLmSI25Ee73cO47vDq4dqsM8N

• Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhu-MyaPNuRr2NJTMqLf7OYW5AzCqgHpQ6HMfxlc-qsMzwSkfWlZDbHfecZ3IRp639FVDelhMZgpbnN87Fdchoh-g08R-cAiXxr7RvfdGyihvMxg152HK-r

• Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5Jfag1E06odK7mkATjCOSPdDfHy2kcYYHfi9fDNTsk0CRkV2yJD0Uz4MV82XjbMR5QNyK3Akw5Ysf0N7fDQ3DwApNb5Tf9R4axktScKF3UZlMVtrY3ulT

• Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJW5BJKjwNfnH2t8RrvgW0wUO3ZJWnw30aS6GlU9qoaOWMQcyoZ9ZOZmTgLo7hWAqHlKDK2b4MrtF23Jv1-1Ffd6bo6VlR8exLvIISBANwjHnW3dv7wLgC

• Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLiZpsYdSdkh6GE1rDDV3XVwWiGdjWBlx3B1irY9V5RtHt1cv7sQYPaa16y78EJdluo3FTMr5Wq0O2ZCWZjRMdrewgLrGJS3IiNLOQKQKN18PEGHhDiSyJ

• CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWd5c3hAfK37Zdlctl3fWxMgNXEsGKNJ9Fwf0LvHSV75qdLLYHAnyy7Le8aziJ58ma6YA83clBQQwK0xqG-lmeat7Z9bcTEaV4hmNlSJL5iAh3r1Q4w8vk

• SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFTKWlpW6A2FjXpwDsCbJmaJ7-TnZPoCNsW0BG5pa4F8X8I1zzCRAMefU00NEQHKlqdqGchFbSTQaADgjlJeIHpUKswwnwNiP7WnbAftpciT4FAFzPKi5N

• 16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9BsXf9I7m4IoC0hb3fSwYiBJsaB1vSj9kGhfi0HsWGeR0xVlW1OZ0bd6IxvQ-vUQP5FDsj5mpiwUjv72JG3vNdViDwAKDG1uswOPDfb84xNn8AgafhIP2

• One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijGpzrXApP6QuAgCJDVSMHyi1nEVE7liFsNRwcNTWzkwbjmzqv8vGi8qalqaWVgtgrD2CCZT-qXCsjBkj8njgIFQExo0gg5PGdVIQfo9-wW6lIBh6OLp6z

• TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIrQ96TUVfZUEVto7SlNlTp8P2270tmrpifBbd-F8vo3gQz3Na40YH60oRh2dEazLOZInJzCGa66bxl9t85Usl30eGDbyjMWup2eOM3BmaPhILkIhs-yo6

• AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnswSsouQNTAo6sTmVePaIjeVawCruhIMYtwOXzzX0Qup-a8tWq6WsuiwxkhQxemYCsguvWzRqA5ILOcnEtQa2Xz2rpmU8aQc3zd5m82sqMjJa4ruVDS5J

• Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoeOapavOiIGXF7klCQPyN0-Qg2nWk9KlUYzPHuLwAyMKM75P3E2jciQR3v9gt2UBmez3XRSC57e5Fe9Oowm2brtgRXz5nJMPN8iQnBYddnTI4DyffnBAh

• Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOzcJe940Ayk9JrnE-tmotZ-mEHZiA5Jc0A8Sw9IZIfYEnH61X8whAW6jJZTnzLIQYA37foce9XfshoAVwjLyBKrjvHbkuhhtwZ2Mewxtf1Syn9FBOvZBq

• Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAc2Z6RvtNlJnjkfp-kCEhx8x8Q9XPLHY-oQb8NXu6cb-C5BTfa9HnmWq3G1GT3mPsHLV6Xf6tyBui-ljplsYEo9Qt8kBiNKXOwvTzACMisyS0NQ5U3bGg

• Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEit3cCqpn48WlqEDCb9ewKFToGQcvhUjO939N0Gja-aTvCvRTz8kdOPZG1bhyphenhyphenED2XNeB82rjCIeVO3Nw9akDlMnQZqc7keiel8H82zgtf1A7f

• Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLR2UjD4FhPqPT7MZpKuuqDl82K13qHQob2-SfK62g7UtwW6jn6YafX4RcZcqFgZWFbXiuCTkLbeD9zCws4mOUL0xVJgJ315fMiFlqxDFnhyphenhyphen

• Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJDdcdHtgq-nTzruVpw0hyZmBZtfG4iwLginfw6A70emXt7LUSnyTQ7ZdgclMUypEe7s8s-LDmykPATeFixDXHEPj1zhheNBnHA1TebBqoYtw1-3g-LqlS

• StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHtWFBMaxYpIkK39I2gvAJrksqJBAkRSnEZ-WjwpQtbV9mgfPRzWp3qtdhkv1yOG67pAZ5H3DAFRVv7rEzbns9IuAa4DV-MUBDIb6fuWzLyRvFXyC1fOaT

• Phishing 3.0: The Fight Moves to Agent Versus Agent

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQNc2xSAgLu-A9p7sNrEqSuNjH29MY18RsTwxzLEGW1a1qUJIMSu5RlZg1V8tPxQg55hqA94wYqBiD74lF3l6XXYB43oMxalMLq8uRR1xAuSX6dop3Cdmg

• Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMoFWi-QSodBQxqARN9B9-f3XXRsEk-QHunmW3JSc9DHyZNKRK91l5KTztDYxGnTUtGqRMo1WHR9zfREMAXDAeDOYFgXpSJdgyUXHgOGTnpiokI06ZsJ1s

• SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgukQx26zt-EE2Q-I5EPzGDeXiUneL1NzNma73qc5r03gJ5Xj6kiTigXadbXa1XWqg7Y-UHq5YzEu7bPxN4BXjVUbId9eaPwWddiPoB7Zz2fBV0bxr2S2wh

• OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6Ar7QFukiqBWatGeVdffG393l7GwFmzYBSWvv6Um7gPNIzeL8p3gfO2C1rvVGPSUh00KWZAB8wFs9Xdz6h7uWDd7MYyWuuzLciO6NX1Y4mln1LqxK-skW

• Virtual Event Today: CodeSecCon – Secure Your Code and Applications

  Join more than 1,500 registered attendees today for CodeSecCon, the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way appl

• Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi50HcHSWt796lc8zQ8AnpfHUqgV-BM0xiS1NxJW8zRDgBRJ9ovZOECiIhdQt0aVTUdhduJYP1o5wTa5RpDoCwhihq8rKqWmh73E9E8UzafyDcq1n1khCEI

• Hackers Using AI to Target Siemens PLCs in Critical US Sectors

  Several government agencies in the United States have issued a joint cybersecurity advisory warning critical infrastructure organizations about hacker attacks targeting Siemens pro

• Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitKWjeNJOLDEahUmMAYpH9qh94s2iFi8igtfSlAzOVWiUBU-EIM0MWMsFYPmA5NDL6Rs9E-w9vvCmw3Cc6Og0q-TDt87Q2hwYIePNAQ0xQ3OJYHzgCizDF

• Hackers Hide Malware Code Inside English Words to Infect Windows Users

  A new Windows malware campaign is hiding malicious code inside ordinary English words, making the payload look less suspicious during analysis. The technique is being used to deliv

• Critical GitLab Flaw Exploited Shortly After Disclosure

  Threat actors started exploiting a critical-severity GitLab vulnerability roughly two days after public disclosure, attack surface management company WatchTowr warns. Tracked as CV

• 40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhA5ySurVDL2oPvG7l78G22fbZEDplybrP5KX79GCEuhHybqkIgDGWDYiHNfSLhKMt4sxn51CF33lRNwyjQy-l4Zajbkl9qUFxsjHEIoVsFhWBcGoHavMzO

• Critical Red Hat Kubernetes SSRF Flaw Exposes Internal Services Across Managed Clusters

  Red Hat has disclosed CVE-2026-66794, a high-severity Server-Side Request Forgery vulnerability affecting the cluster-proxy-addon component in Multicluster Engine for Kubernetes. T

• Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler

  Citrix on Wednesday announced patches for two vulnerabilities in NetScaler ADC and NetScaler Gateway, including a critical-severity flaw. The critical bug, tracked as CVE-2026-1949

• ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhq19iWDNnvPUAAC2MJN09g-1SHoPWQv82zvmQGTvrniDXm9BUWK73QrKCNCgxk0uGp6MrKF8cDQrigQCI3CW1G8V8GNltJ0GRc-yBjt69zPem4YWb0XCZw

• OpenAI Pauses AI Training Amid Concerns of New Model Potentially Discovering 0-Day Flaws

  OpenAI has temporarily slowed frontier AI training after internal testing suggested that its upcoming Astra model may reach a critical cybersecurity capability threshold. The compa

• OpenAI Overhauls Model Security With Sandboxing, 30-Minute Alerts, and Training Pauses

  OpenAI has detailed new containment and continuous monitoring protocols for its AI research, introducing stricter isolation and a token-inspection system to manage models with adva

• NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0aHi13XpphD98KUUKTJJB0T5eJW8TLe8qecYWanC8lqujxWOn4dtJUXThwqpfnrd9daSkiLMxXb7r6EFFbYY2fy3qSZteMtPB5Sl5t4K01MKoHywiyohP

• Cisco External Entity Injection Vulnerability Allows Attackers to Read Sensitive Data

  Cisco has released security updates for a high-severity XML External Entity injection vulnerability in Cisco BroadWorks that could allow unauthenticated remote attackers to read se

• AI-Assisted Tool Helped Secure Satellite Communication System After 2022 Russian Hacking

  On the same day it invaded Ukraine in 2022, Russia disabled thousands of satellite modems across Ukraine and other European countries, aiming to disrupt communications. A new AI-as

• Hackers Weaponize OpenClaw AI Agents to Push Malware and Steal Crypto Wallets

  Cybercriminals are turning AI agents into a new route for malware delivery. A campaign targeting OpenClaw, an open-source platform that lets AI agents interact with files, messagin

• Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNJ75E0bEnkBf9REZEnmMNusCu2L2mrut4dSX8g-VVXH2THKdkXD1GwCZO5ZsnGzdamG2t0TVnelMj1TKMghauv4cIndc3OA7kuHQAdxf7FbngV7BaWV-q

• Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities

  Cisco on Wednesday announced patches for 15 vulnerabilities across its products, including critical- and high-severity flaws in Crosswork and Secure Workload. Crosswork version 7.2

• Zyxel Patches Command Injection Flaw in 18 Access Points Allowing Root OS Command Execution

  Zyxel has released firmware updates for a high-severity command injection vulnerability, tracked as CVE-2026-6837, affecting 18 wireless access point models. The flaw exists in the

• CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDFisNx669R67D6R9VnkWrDIhB1VjYqDPrXqKAoeCz0YxbSngLxB15XYLtuKb00YSEE0rxQEfop5v7JIr2SMVOErIM2rGZqA6q1FDNlwBeAaukVoAse6l0

• MLflow Vulnerability Exploited for Cloud Credential Theft

  Threat actors have been exploiting a recent MLflow vulnerability to steal sensitive information, including credentials and secrets. An open source AI engineering platform, MLflow a

• Hackers Bypass Microsoft 365 MFA and Hijack Finance Mailbox to Steal Payments

  A single phishing email was enough to give attackers access to a finance employee’s Microsoft 365 account and redirect vendor payments. The incident shows how criminals can bypass

• New Android Malware Steals Banking PINs and Relays Data Through Someone Else’s Infected Phones

  A newly discovered Android malware family named Manic combines banking fraud with full-scale spyware, and it comes with a trick researchers rarely see in the wild: when an infected

• Why "Shady AI" is Security's Next Big Governance Problem

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgw0UN7paSPEt1BbP-tObzJmXd5LHvNrZptahHK2pwYGVsYyZt2FQO20Ld8uePEO35Hg9MUqHRoA3tvbxXf9Wdh2D8IgHIt9M56YTvveuPUILhMZdrcaBL6

• Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities

  Atlassian and Splunk this week announced patches for over 250 vulnerabilities across their products, including dozens of critical- and high-severity flaws. On Tuesday, Atlassian pu

• Hackers Use Fake CAPTCHA to Install Malware That Kills 145 Security Processes

  Hackers are using fake CAPTCHA pages to push a malware loader that can shut down security software before a follow-on payload runs. The campaign combines compromised WordPress webs

• Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia

  A threat actor has conducted a mass-hacking campaign against Dahua IP cameras, compromising over 14,000 of them across Ukraine and Russia, Hunt.io reports. The activity, referred t

• Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjsJMUJluWegBU4C6RiZ4QHg6rTqhFHMt5JJt3RR2K7l06c3FOFlnq8gIVuBqVUX8qsJFiAh6KKAlDXpVAydAoC2rM0dUKUayta50sqRXoW36V2OgSXJBKa

• ToxicPanda Android Malware Can Steal Banking PINs and Gain Shell Access to Phones

  A new version of the ToxicPanda Android banking trojan is widening the danger for mobile users. The malware can steal banking PINs, imitate trusted screens, and take deeper control

• North Korean Remote Workers Are Infiltrating Government and Businesses: How to Expose Them Before Hiring

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWyQ1cDCkUiw4fXXqDmTenIFfuapxNP0AvwYPMk2RFX73IaWtCvzQMAeTkVS7OXG7N4t1LNOq6fn36aDuuDvHI2FlSDZeULqexo2bwk2cIpRDBCIOpf01y

• WindRelay Android Malware Turns Victims' Phones Into NFC Relays for Payment Fraud

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtvbWVauAzyuLHoSWQPE7jx3sgMZNZ7yBHAzPdimt9W0VEgwixqcmdyIAEP-tg3Hya5hZG2KvgrQbYBfbPg1KofrMJTaRppWhN7jg4S9TKhE1UYTO4oqNa

• AmnesiaStealer Hijacks Chromium Sessions to Give Attackers Live Browser Control on macOS

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKseTvCwFqcMpefo-t9iVJcgB3VNAmPhRHG1CadNUW-VA2Dn2NRE2HJQwnnwY9JqGD4AEElHZHGX9IlrT2Ts9ayfnIqksEJz4uSNzDi8wZhneDyiEovqm8

• New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgN1h6yVKjJz0W6b8QMy2lmsHgFoVD9MGmbvZs4XRnHXDPcMJw8SDNNgHSnAnDTRCvXD5VyMFl1XtMFqU3uZiKdmtW-1Voos4cqwJuUiE8mTWy44FFgKQMP

• ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnZSPrbeVOhfz52pccmPbosfzvUlARZ8YoAhLmLd28aHQJ0Nw4T-TeYS2gCgc4bQaNSc7sFfSFY-tQdGZDD4Uajt1hFhjPzl-XZVyoM72eC5vYStjyfuKw

• GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBHrFMdn5ekgZuyeE4m-ez0biAlSQ3abNCs7s0YNhWXi-MvjTNhJBgQtjTwj9zNfDNtp0DtDC6wH9lJcD7obhh9ujkfuk6E0FiX9qH3njE5mcNrtyaxWR3

• China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipbxt8OBph0rxAoZdbLb382s4lN39bPLE0AvbTOd3cIGyvzmQ6PDhyrausjW5xrX-pEbIxhCz1Kc17gbrTdx801nov73lNVJ20DpXeH84JadBPM0rhyWYZ

• Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groups

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWSdrf8axt7XPd3F2owXsMWjBqWxQPPUN9qqsmsi3wFBIO5FVPr0M3bC76Sgmx9tMxf9AQwLEffgX39-wYX9PO2fQUlI9Xu7m95fiVckPv80ubtndLLRH0

• Apple Warns Users in 110 Countries They May Be Targets of Mercenary Spyware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTrk440S7PXJ5sSmKnZIdesVK6PyZSDythFcN4mRxAPn-e4zfJ7ArPi4Uya11N94uKeXMg7prAAOV7e968w2bLcngT-4ultLDyikYTR3bano0-5Qhb1QsR

• CTM360 Uncovers Over 3,000 Recruitment Phishing URLs Using Browser-in-the-Browser (BitB) Credential Traps

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgfCSow6T3Wo-vpD0YGw6I-3-9B4BmxQvPW4XX5NjGqYkEd929vj1fiXMD5ebscmBPVViIEhlkfg0zmJ9ftMUtLbwIolt1uXcmnnWYlHiFxNQhRa14lvnE

• Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqxmoJtQxCwJRBCIc5vQ8KP7fDvEliYGDzRe4RRTwHvydH3bliXj-rfse5j3YD6EPrvVKtSlIIUIA5EoxajlFgyLPhLtjiYZjwotvmIHvLuvfbIhfUuGJ-

• Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHhYwJerhs2kJO7Sh0FJfEt7JpkOEbB1ccWjSpSyfvWWDf7waLVr1TMU9Cj-jdAQ7bDAX0gV2Bt4Sqv1Zx4K8PJgObOX3nt1bVT5YClAvKbvyBovpcIFwp

• IAM Compliance Requirements and Best Practices

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtCfpJQBf2uorUk8jQiKCpzh2QLElku5-T5DS6dLc9iV3XA5w1fsd7F9aiCv1gMYri3jEogBTuyYaiSzgdBhvDxWSN1X1Q-AZkr3u5QBBvzzvZF7mpQdqx

• Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirmsCR51S8-S9Y9cCidbhsmyNlysPzNGZkLuFNY8GHiq3mwnVKOcB1hUqQ7Oz2j6nH61si-eaqq4xouwv2JsEzEU6eYS2-bL3-dXBwweGAK-3QnhfKZi8M

• Evooo1Bot Linux Botnet Uses 16 DDoS Methods and SOCKS5 Proxies to Hijack Edge Devices

  A newly tracked Linux botnet is turning exposed edge devices into tools for disruption, remote access, and traffic relaying. Evooo1Bot is the threat that reaches internet-facing ed

• Fortune 500 Companies Hit in Azure Data Theft Campaign

  A threat actor is selling data allegedly stolen directly from the Azure tenants of several Fortune 500 organizations. Using the moniker ‘TheHatman’, the threat actor has been offer

• Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhudlXOxVGnImI0OoIDMwrIy0pc2zaf1aV0B4gaQSrt5UPX5GBJl76VvdEUxkxJ4pjopKLsohJrwVwBgS0a-xLJvW7ZvCPvG3ezz5vY1ABYZnysPR-ZFvV

• Fake Web3 Interview Uses Signed ClickOnce to Deploy NeedleStealer and hVNC RAT

  Fake job interviews are again being used to breach cryptocurrency teams. In a documented case, a convincing Web3 recruitment process led a Windows user to install malware that stol

• Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure

  Hackers started exploiting a critical vulnerability in SAP Commerce Cloud just three days after its public disclosure, according to threat intelligence organizations. The vulnerabi

• SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg82sx5UM3v1F5xNjCrlFAeBp6t7ioSfSER6yl7jFtH3NvBwwrwdT2Njk21qvm5mdh2UZ3u-3UnZOWSz9sawqkuPmg0FLwuOEeLYhMlqP8lWjeXhg7ETTrR

• New MessiahGPT AI Model Fueling Automated Ransomware and Phishing Attacks

  A criminal AI service called MessiahGPT is being marketed on BreachForums as an uncensored platform for creating ransomware, phishing kits, stealers, crypters, rootkits, and social

• Recent macOS Screen Sharing Vulnerability Exploited in Attacks

  Threat actors are exploiting a recently patched macOS vulnerability to gain root access and deploy cryptominers. The exploited bug, tracked as CVE-2026-65400, is a high-severity au

• Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhN5GzIjo1DOb9leWRsG7hi5zemNCi6kbNBf-391nF9pphXhTgf8DZLMlk-fUyp-j4rTcFv4coBpP821rfQkUc4ydAu5YQBcn9Y6nj-SeQGDNu10DmSN2JY

• Z.ai Unveils GLM-5.3 with Major Enhancements for Coding and Cybersecurity

  Z.ai has released GLM-5.3, a new AI model built to handle complex coding, long-running agent tasks, and cybersecurity analysis. The company says the model uses the same base model

• 40,000 Impacted by SafePal Data Breach

  Crypto hardware wallet SafePal is notifying roughly 40,000 individuals that their personal information was stolen in a data breach. Hackers, it says, exploited a vulnerability in t

• GeoServer’s Unauthenticated SQL injection Vulnerability Enables RCE Attacks

  GeoServer administrators should urgently update affected systems after researchers disclosed an unauthenticated SQL injection flaw in the jsonArrayContains filter function. The iss

• Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIDrkyaW1magTuvTfLfkhtk8stt1zYUxgonTZX1yaIOGxsGMV9wCRE8bglbRubclVma7bkghEbmah6ku4T2ZVnpSngl6k5Cw0iCXgNNpuy6I2ZNPQOYYIf

• Conflicting Test Goals Pushed Claude Agents to Deploy Self-Replicating Malware

  Anthropic has published new research showing that Claude-based AI agents, when placed in situations with competing objectives, deployed self-replicating malware against one another

• HoneyMyte CoolClient Backdoor Uses Signed Kernel Rootkit to Hide Processes, Files and C2 Traffic

  HoneyMyte has upgraded its CoolClient backdoor with a kernel-level rootkit for Windows. The change makes routine investigation much harder for defenders. It gives intruders tools d

• Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIqVuTpKFLy55ilEFObjJqUsVDu7qTrQCYAFsh7bbMcF4xv61h8I6tfue0tGw04yWGhDgcZ-r0v9Jw-kjNmm5ZYpbebrvlgixiqID5pSUwXb8dQSg12cI5

• Roundcube 1.6.18 and 1.7.3 Released With Fix for RCE and SSRF Vulnerabilities

  Roundcube has released versions 1.6.18 and 1.7.3 to address eleven security vulnerabilities affecting its webmail platform. The updates fix a remote code execution flaw, server-sid

• Irregular Details How a Naming Error Let AI Models Attack a Real Company 

  AI safety testing firm Irregular has published its account of an incident in which models being evaluated inside one of its testing environments took offensive security actions aga

• Microsoft SCCM Vulnerability Chained to Execute Malicious Code Remotely

  Security researchers have disclosed a serious attack chain affecting Microsoft System Center Configuration Manager, commonly known as SCCM or Configuration Manager. The flaws could

• How MCP Servers Can Expose Enterprise Secrets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmymE0W-wEeuppBUYhS19PuTo6RifgrGEV5eLimB6KkhIBO5wSL930qSNCD6aR7nL5mAizU4RAfinzkWhz-oq1wCnHszL6C25H0SjMahJIBsr7lwwzJ7xZ

• Threema Secure Messaging Service Hit by Massive DDoS Attack

  Threema, a privacy-focused secure messaging service, was hit by a series of large-scale distributed denial-of-service (DDoS attacks) that temporarily disrupted access for users. Th

• 680,000 Impacted by French Tax Authority Data Breach

  France’s Directorate General of Public Finances (DGFiP) has disclosed a data breach impacting approximately 680,000 individuals. The incident was disclosed after a threat actor boa

• ⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgObgx3dpR3qN3UrW69UfMgB-yM7RmfpKrQjvzqtAsNaQ3nVsIKNIiz5p0BsZCppmE4BWH9Wle92WombnIdCdT0BsHkv-lDcEdIkYvsGrnch6OQHbAr3FUj

• Top 10 Best Software-Defined Perimeter (SDP) Solutions in 2026

  A software-defined perimeter makes your infrastructure invisible: resources accept no unauthenticated connections, so attackers cannot scan, probe, or exploit what they cannot see.

• AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions

  A multi-stage Rust-based macOS information stealer has been distributed through a counterfeit GitHub download page in recent ClickFix attacks, Jamf reports. The fake download page

• Hackers Exploiting Unpatched GeoServer Zero-Day

  Threat actors started exploiting an unpatched zero-day vulnerability in GeoServer hours after it was publicly disclosed, attack surface management firm WatchTowr says. The security

• 14,000 Trezor Customers Impacted by Data Breach at ShipMonk

  Hardware crypto wallet provider Trezor says the personal information of nearly 14,000 people was compromised in a data breach. The incident, it says, did not involve Trezor’s syste

• Over 1,000 Charities Hit by Beacon CRM Data Breach

  UK-based customer relationship management (CRM) provider Beacon revealed this week the likely root cause of a recent data breach affecting many organizations. Beacon’s CRM platform

• 1.6 Million Likely Impacted by RingCentral Data Breach

  The personal information of 1.6 million individuals appears to have been stolen from the widely used business communications platform RingCentral by a notorious extortion group. Th

• Google Cloud Sets Out Post-Quantum Roadmap With 2029 Readiness Goal

  Google Cloud has published an updated roadmap for migrating its infrastructure to post-quantum cryptography (PQC), targeting full readiness by 2029, with some work expected to cont

• AI Token Jacking Lets Hackers Steal API Keys and Rack Up Nearly $1 Million in Charges

  AI credentials are drawing criminal attention. A growing form of abuse, called AI token jacking, lets intruders take API keys and consume expensive model services on someone else’s

• Trivy, Not LiteLLM Behind the 2,500 Org Compromise

  Most of the 2,500 organizations believed to have been affected by the LiteLLM supply chain attack were actually exposed before, SOCRadar reports. The compromise was blamed on and c

• HACKERAI Malware Turns GitHub Gists Into a Command-and-Control Channel

  A newly identified malware framework called HACKERAI C2 Agent is using GitHub Gists as a hidden channel for attacker commands and stolen data. The technique lets operators blend ma

• In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities

  SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broade

• Malware Crypter Services Sell Windows Defender, EDR and SmartScreen Bypasses to Cybercriminals

  Criminal services that hide malware are becoming easier to buy. These services, known as crypters, change a malicious file so that security tools struggle to recognize it. Their op

• DCRat Campaign Hides Malware Archive Inside SVG Using HTML Smuggling

  A new DCRat campaign is using a familiar image format to hide a dangerous malware archive. The operation begins with phishing emails that pose as legal notifications and urge recip

• Dysphoria Botnet Turns Compromised Routers and Cameras Into DDoS Bots and C2 Relay Nodes

  Dysphoria has turned a large number of everyday internet-connected devices into a potential attack network. The botnet is linked to roughly 296,000 compromised devices, placing rou

• AI Agents Don’t Stop When Malware Fails, They Write Another Tool and Keep Attacking

  AI agents are changing the shape of cyberattacks. Instead of relying on a fixed piece of malware, an agent can test an approach, see it fail, write a replacement tool, and continue

• Citrix NetScaler Heap Overflow Flaw Lets Remote Attackers Execute Code as Root – PoC Released

  A working proof-of-concept (PoC) exploit demonstrating how a pre-authentication heap overflow in Citrix NetScaler ADC and NetScaler Gateway can be turned into unauthenticated root-

• Bring Your Own EDR Attack Turns SentinelOne Into PPL-Protected Trojan Horse to Shield Malware

  A “Bring Your Own EDR” attack abuses trusted SentinelOne components to turn endpoint protection into a powerful malware shield. The research was presented at DEF CON 34 in Las Vega

• Multiple TP-Link Vulnerabilities Allow Attackers to Bypass Authentication and Escalate Privileges

  TP-Link has disclosed multiple high-severity vulnerabilities affecting ISP-managed Aginet networking products, including mesh systems, routers, PON devices, and xDSL modems. The fl

• VINclarity Publishes Investigation Into Alleged Scam and Fraud Reputation Attack Across Search and AI

  Selidan, USA, August 14th, 2026, CyberNewswire New report examines suspicious Reddit activity, coordinated YouTube content and BBB Scam Tracker entries influencing how the vehicle

• Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDgatgimOxtzWBp5R0l6yiMeoFVAeLE-hn-RGePbOlgUMgb3Vj9cEKav3AadjZBcppLfoDs4o-oREZ0OimLYX9WDnIRwebA4P7nVa-wh8KwHW-z7HUALWb

• ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtXmkUOPD6prrNPMK9N1Rhu2dm3QFGQ2DUTiu3xrj2WWbauZIK2HemME36-4WBIqGh01SFOkNJuutFeXLgSZMUBFn5ZDzIP5IeNrwJWDfKcOPQgZl3spOF

• China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNv5C82jT6YlarerdXnoARtT3E8xP65ZWuJfpvOKU9baBT5UACUTb88XvDQgQA6RrYuqPK3FstaqwacR9gDjD0qwk3HUYl0wK848phyphenhyphenFuqRr

• BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh96gU64zxM5LiLI39IXPndJ1felnUkfQmWxQ2sGfE9ryYK6AKPLV3x6uVWeZxZoEsJwy0h7OUHILX1sAbwc6MYHpIeeTvCVeH52TnCInqqjjRPW4-Sx7gP

• Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhS4KcVdL2QogjCtjg4yqVFuDNgQ9a8SYCzjsxUKME896DBso0Zwpvb8gH9T5gMPOqM2LU-A-7IyKOqKpKiXgLWAdiABf4RrVvAq9nNpDDC2TNppKWt9RKV

• Gunra Ransomware Exploits Fortinet FortiOS, FortiProxy Flaws to Breach Networks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWQpuDbRsHV15EPHhEH-PxqwnIqhmhncYrLIhvelAhdTJaJL-b6Ro5jALTP-JmVpIsvqRL5VxXk4SYql9oOqliOv8FHZS8T1NN8mCqJWq5O4WMFbg2aQRB

• Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2hJoWr0m-Mx1rwaqZpbsdsQa5iSVY8JjAnt0zKgBUlynOrS-NgEcINm3asfWZR-Ypx9y1iw28BOVud8sfaOQbiq4lmrvSnaZHUBlrkmkH9KXSPy4AXQkk

• Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIoEoCsvghUxeKGXl-WAFq7pyoOLwgSk9a5Ne8vX1Cb7lDOib3wtO5NwoogbHqFvUVWJZd3ceL5ftpWOX5qNx5HNJCmD4RR7GaiExk0ph2F3sp5eKPthiu

• Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIGgelUshBcG56Nc5uWqBbhQwtUxWtNgSIRTCiJXZoJtkuTWeXEV0KiWRje-UhGGnrvf6wNOmmBGQ7yAxKNigAuJE00RicY4ris0k02Dd1ch7RcSM2aJtG

• Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgV1-B4O1tddtTQg7WCfQLhdWxNygkI3C3DHfugd0ogZbFCixAf-J9IffSq3KuSSPDofAEj5wNrVHlzRx3qbj7cPQhbBfnvOXOAJxjTSJ7rdtZe3neR4Yz7

• A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-ftAONA3vSUpho96pouqtn3CXa1PRfS2fhilG7JBshSuPpKNZzKVFvPRASkzNSVrDj-U4sISWf8TN9fuNqgAr4g07OYcRzZ7ecqVlAkdC1EBL2bJZBCKM

• OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEFEJ72sE5G8XpyLqNLnPaYpMcgnUe7K9XLKyJD3zxcwPABaJlkkFpiQd4p3GW4TSWg-eDlFRplyPtmKQjfHR7OwsvO0hOJQo8xmzqxpXy1v1k1VLpxFVs

• DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHe7Kt8X4eEC2ICocbCp-eg1Vs7xknMUYEnZzepw5j6mg7v7C7DmPvzf4S-Z4wGhofTJco3eW95xPm3x7nDEzdfF9dpJAEriyIAGsXqNcLT02br6Em30kP

• Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbDSDTAbeeAZ8pykGFRAGcCDs3LZBuD8tYUJfh0jG35ro84zMbNo7q3TWcoEMPmZqvhzucujEF72b2c2HnzfDjowsj4Iw4psQEwcgADRrVMCXVw18arcpS

• Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiP9vK0AfjfbpQDa7i5il113N22qO5N-mxuOw7qoNVnvUOnQIYRjhuKA8rxdRhaZ13t0r5jZtsj1bjQQatdbdxi3L1Fso99wsDJIAKkw6NVklb6S2PBfipU

• Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIX-dcsP7VVws3iI-g-myaz7Wyt8fgrlR9U3CtweEsSriOayyy8r9uyB1mVcMhSBPyulDXj47SOLsWhl7XQjgMpLYGSjF79fiMTw7zEVOAceKqtAlHCVAM

• Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieGDZmdQhY70KqvppH4w5wMVhbs804WeageCN1UXtRK4KpFkYWNk-wkTeTv9CUSNGYQMsaZ04XYWimXsIQmfl0uYSFgNJe7uBbXsg1xPw-cukXwJY3O3TA

• Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4HtkIdWjqoYaSkO4edq9d5ZotqTE-LNMM14UlVoPaVKw2hwBahFYrPkB3jttURH0gcBXxCDtyHhiGMAIrxCX74gYCbivX4INmfRzt7HRb-bPTNt1lV-nU

• Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRIn51DQNDe2IfVEJzqiWXY9k8QyRhulSTcOh67As0Pj7Da1DCB5Lu1RBhjI55Y7TF9PW9F9HOBn6moaPRNrpl0GOGeMbC9z5BMfdOqtF6sHpd5tJLvQqn

• Mindgard Raises $30 Million to Protect AI Systems

  AI security startup Mindgard today announced raising $30 million in a Series A funding round that brings the total raised by the company close to $42 million. The investment round

• ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9fX7D-qoT4QD3pjSuUtavTiarjtyitt3-JMji-nzNa8XTKefzPp2QGMAR6FkLA8r8Ll9VVFHCMEJSKWgi5Gk0GOdYU4RA1itDyf8ZQc12IXczcxoGHKXc

• SharePoint Vulnerability Exploited Shortly After PoC Release

  A SharePoint vulnerability patched last month is now being exploited in the wild, with the attacks starting shortly after the release of a proof-of-concept (PoC) exploit. The vulne

• SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbIbhajZdWb8FMAsUCcL8bufmUEbpuTCSFvKhvJgecxUZcO3rH1QV1bVNrOJ1W8oqge3sBIMwmHZxXR9l1PyrOGDEuAZZJkwFBmMlFGWwjU5-3CDmUQsz0

• Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’

  Security researcher Nightmare Eclipse has dropped a fresh zero-day exploit leading to privilege escalation on Windows. Also known as Chaotic Eclipse, the disgruntled researcher rel

• Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjTLayRrpqM-bUGPU8pmWZIGJTCnkLLvykLv9Z-R-QFmC1f6nIxSff2TTqZ77xC1n-l7Y44qKhUVdvRX9bUgNjVcGhF7A0vkRGnumHe6-bUoCFNH4PAb11

• Critical VMware vCenter Vulnerability in Attackers’ Crosshairs

  Threat actors have started exploiting a recently patched critical-severity vulnerability in VMware vCenter, rapid incident response company Quirso reports. The bug was disclosed on

• Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuo4KGT6YrQhFiPQrrf58NN4PQM0aYVTxWXeaJ1KsqjBJ69c746Hj6DyhGH-uzhZvEowVR8YMbITHBpOcT3OQevcTJg36qwJ1WfPtFZySMVgB2JVBE763J

• White House Mobilizes Security Firms for Operations Against Foreign Cybercrime Gangs

  A presidential memorandum issued on Wednesday expands federal capabilities against foreign cybercrime by establishing a program that allows vetted private US companies to conduct o

• 1 Tbps DDoS Attacks Become the New Normal as Cloudflare Reports Record H1 Activity

  Cloudflare has reported a sharp rise in large-scale distributed denial-of-service attacks during the first half of 2026, blocking 935 network-layer attacks exceeding 1 terabit per

• Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj36vXq6xqWIDA09DIFwTp0gAZyTEpTdUoOrczmHr0NAOmxBDBySv4K6oEmzSup0sZylULeZlzf2unPADh99H5kx8-oktejFUPTM2t5aM6WrdTy99m6Qs12

• Fortinet Patches Authentication Flaws in FortiWeb and FortiManager

  Fortinet on Wednesday announced patches for eight vulnerabilities across its products, including high-severity authentication bugs in FortiWeb and FortiManager. In FortiWeb, the co

• Thousand of Internet-Exposed Contollers Could Put Data center Cooling and Power at Risk

  Thousands of internet-exposed building controllers may be putting the physical backbone of U.S. data centers at risk. They manage cooling, electrical distribution, and environmenta

• Enterprise Defenses Recovered at the Edge and Collapsed Inside

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoBNKr6YWBC4uPzzXNZNXsduYkalrtPSfiT01s6R6tq9uRzAs8TRoyv0DSwM-WyRmiGv923yzsB1DK3mgg5vudYdTwIk7wubUJYB0f-6AADquodryt0Kof

• Hackers Leveraging GoogleWorkspace Accounts to Send Phishing and Scam Emails

  Hackers are turning compromised Google Workspace accounts into tools for phishing and scam emails. The messages can look ordinary because they come from real organizational domains

• Venture Firm Team8 Secures Additional $365 Million

  Israel-based venture fund Team8 announced this week that it has secured $365 million in additional capital. The company says $265 million is for Team8 Capital’s third fund, while $

• Armored Likho Still Toolkit Steals Telegram Sessions and Records Victims’ Conversations

  A cyber-espionage operation linked to Armored Likho is using a convincing donation app to reach people and organizations in Russia. Once opened, the fake application quietly instal

• OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZP21lJn1EY0JXWBul8gpBgRDryI4ACYqFiu6icbKCgIMyta9UqjQrtnzjTkO1Yi9tdzTaQw6X949lzMwtQPKUPPIxA5EwFjJqjMDwBtFSc56vaCyybwJN

• Jewelbug APT Hijacks Browsers to Steal Cookies and Spy on Government Networks

  Jewelbug has turned ordinary web browsing into an entry point for espionage. The China-based group compromised government webmail systems, stole browser cookies, and used that acce

• WordPress 7.0.4 Patches Remote Code Execution Vulnerability

  WordPress on Wednesday announced patches for a high-severity vulnerability that allows authenticated attackers to execute arbitrary code remotely. Tracked as CVE-2026-65640 (CVSS s

• 737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjI8aMtoRcWh4THmHEumFrk1Xt6xuq3Z6RsJwVKoyozs0nuRDIc7ffcIFNr5dFuUgTeeKZ0KLdeFoeHRRSFgqcTvK4VaO54Js2FADwBztN4Qlf0L8viPKGC

• GitLab 19.2.2 Patches 13 Security Flaws, Including High-Severity XSS and CI/CD Authorization Flaws

  GitLab has released security updates for Community Edition and Enterprise Edition, addressing 13 vulnerabilities affecting analytics dashboards, CI/CD workflows, APIs, AI services,

• CISA Warns of Windows Ancillary Function 0-Day Vulnerability Exploited in Attacks

  The U.S. Cybersecurity and Infrastructure Security Agency has added a Microsoft Windows vulnerability to its Known Exploited Vulnerabilities Catalog, warning that the flaw is being

• Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1jrzxrBozKDsDhAGM8SBKcqbTE4M0zWSJqfp709iguQU21GwUzshBdYSvKkicSkfQD1bNsYhROcsx5p5vAT3jyM90H6w6p8imCjtLbHySKnpGKlsQqfSS

• Adobe Commerce Bug Targeted Immediately After Disclosure

  Hackers started targeting a fresh critical-severity Adobe Commerce vulnerability immediately after public disclosure, webstore security firm Sansec reports. Tracked as CVE-2026-713

• North Korean IT Workers Use AI-Forged IDs and Remote Desktops to Become Trusted Employees

  A joint undercover investigation has pulled back the curtain on how North Korean IT worker operatives don’t just slip past hiring checks; they settle in, gain trusted access, and q

• Trezor ShipMonk Data Breach Exposes Personal Data of Over 13,000 Hardware Wallet Customers

  A third-party logistics breach has put thousands of Trezor hardware wallet buyers at higher phishing risk, even though Trezor’s own systems and devices were not compromised. On Mon

• Attackers Exploit SharePoint Authentication Bypass After Public PoC Release

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEge1WsuZlqCAfMpdI4wXB0wzIA6nGpPb5ktYmwO5jRhFqH2t56eGghhYAV7he6u0qTqiPacKD-Wf3c1vXxUmBV159KAObOJUTEDGdDafl9B0makdRgyKTUw

• Cybersecurity M&A Roundup: 21 Deals Announced in July 2026

  Twenty-one cybersecurity-related merger and acquisition (M&A) deals were announced in July 2026. For a detailed view of the more than 420 acquisitions announced in 2025, check out

• Microsoft Exchange Server Vulnerabilities Enable DoS, Privilege Escalation, and RCE Attacks

  Microsoft has released security updates for multiple Exchange Server vulnerabilities that could allow denial-of-service, privilege escalation, remote code execution, spoofing, and

• Critical Flaws Discovered in Belgian eID Software Used by 2 Million People

  DEF CON — A security researcher has revealed severe, now-resolved security vulnerabilities in the Connective digital identity system, a browser extension used by over two million u

• Corporate Data Stolen in Levi Strauss Cyberattack

  Denim company Levi Strauss & Co on Friday disclosed a cyberattack that affected certain corporate data stored on employee computers. The incident, it said in a Form 8-K filing with

• CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability

  The US cybersecurity agency CISA has urged federal agencies to immediately patch a critical-severity vulnerability in Progress Kemp LoadMaster that has been exploited in the wild.

• Novel Private APN Pivot Let Hackers Sabotage Second Polish Energy Facility

  Poland’s computer emergency response team (CERT) has published a report detailing a second attack on the country’s power grid. The attackers targeted industrial control systems (IC

• OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgat4Wvo6Fpe6pNG66UengjFIWRohQUVp-khyphenhyphenxa57n9Ued3-mWlDeeTQkblpAP-OEjgSCbY0n1bCMhI3a5BF1bWq7rBohkS2DG1AXUtcDI8Mu

• Metabase Patches Vulnerability Exploited as Zero-Day

  Data analytics solutions provider Metabase has released urgent patches for a critical-severity SQL injection vulnerability that has been exploited in the wild as a zero-day. The se

• Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjR5Dx4heVYIxaujo8ybl0OFdVuLzMFe0qdEdr6-qQTdhSVlgHdrP6MeooXamFpRNfHjoAqTquvk3CkkCKUw1TQDkQJCrZY1RTC9iYKbsTLNvpj0BZfFKFc

• New Jersey, Alabama Join States Targeted in Water Cyberattacks

  New Jersey and Alabama have joined the list of US states that confirmed their water and wastewater facilities have been targeted in a hacking campaign that started in late July. At

• TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwaZH1uRwKD4SlLCwgb-7zVkEGjYYXdFxb21glBm3grBdwOZM-ECnOmNVFPPY6mg6wXUCf4R4xm9mI8mBiEm21Ixh6y9GXYvL9DKQgKEBkTN65AVQqFz9D

• Kimsuky Uses Local LLMs, AI-Generated Lures and GitHub C2 to Deploy AsyncRAT

  Kimsuky has been observed blending polished AI-made documents with familiar phishing tactics to push AsyncRAT, a remote-access trojan. The campaign shows how old delivery methods c

• Ransomware Attackers Target Managers to Steal Data and Move Deeper Into Corporate Networks

  Ransomware campaigns are increasingly starting with people who hold the keys to everyday business decisions. Attackers are compromising managers whose accounts can open doors to co

• ‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad

  DEF CON – Tenet security researchers have demonstrated a novel AI hijacking attack that relies on tools trusted by the agent to deliver malicious instructions. The Israeli cybersec

• Interlock Turns the Tools Incident Responders Use Into Weapons for Stealing Windows Passwords

  Interlock ransomware is taking a familiar Windows security tool and using it for credential theft. The group has turned memory analysis software into a way to pull password hashes

• Malicious Solidity Pro VS Code Extension Steals Crypto Wallets, API Keys and SSH Keys via Telegram

  Malicious extensions are turning a routine developer task into a route for theft. A package named Solidity Pro, promoted as a useful tool for Solidity work in Visual Studio Code, h

• Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development

  [](https://thehacker.news/secure-ai-development) AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage

• Apple Private Cloud Compute Flaw Enables Root File Writes and AI Inference Telemetry Leakage

  CVE-2026-20685 is a path traversal vulnerability affecting Apple’s Private Cloud Compute (PCC), potentially allowing attackers to write files as root during node boot and redirect

• Top 10 Malware Threats of the Week – AsyncRAT, Remcos, and Xworm Lead the Surge

  Global malware activity climbed sharply over the past week, with remote access trojans (RATs), information stealers, and loaders all posting significant week-over-week gains, accor

• Valve Steam Hardware Buyers Hit by CEVA Logistics Data Breach

  Valve has confirmed that a cyberattack on CEVA Logistics, its European shipping partner for Steam hardware such as the Steam Deck, Steam Machine, and Steam Controller, exposed cust

• Ransomware Operators Disable EDR, Backup Software and Windows Telemetry Before Encryption

  Ransomware crews are increasingly trying to blind a victim before they encrypt anything. Analysis shows that attackers can disable endpoint detection and response tools, interrupt

• Google Play Apps Use Stealth Loaders to Deliver Anatsa Banking Malware

  Android users are facing a fresh reminder that a familiar app-store listing can hide a financial threat. Researchers have observed malicious loaders on Google Play that can prepare

• Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC

  Cisco on Friday warned that its Secure Endpoint Connector products on Windows, macOS, and Linux are affected by seven ClamAV vulnerabilities that could lead to denial-of-service (D

• New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWKCkGCqH-c6YaqkdNnzFQijViu34tjAEsdl9tl2CmZLHL4m1rLhezO76zF6XFRTGS9Sr4R3jhMD7z15QV0BMqG948bjg8SoZbj6HtQajd0PUDR8Tmw06G

• Fake GoogleTranslate Chrome Extension Lets Attackers Remotely Control Your Browsers

  A malicious Chrome extension masquerading as GoogleTranslate that can steal sensitive browser data, live-stream web sessions, and allow threat actors to remotely interact with Chro

• Levi Strauss Data Breach – Hackers Gained Access to the Company’s Systems

  Levi Strauss & Co., the denim giant, reported a cybersecurity incident where an unauthorized third party accessed the company’s internal systems via a targeted social engineering a

• From Reactive Forensics to Predictive Defence: Strengthening Cyber Resilience in Banking 

  By Tarun Wig, Co-founder & CEO, Innefu Labs A bank in India can be doing everything right on paper. ISO certifications in place. RBI-mandated controls implemented. A SOC running ar

• CSS Bomb Attacks Turn Malicious Emails Into Password-Stealing Keyloggers

  A new class of email-based attacks that exploit ordinary CSS styling code to hijack webmail interfaces, spy on user activity, and even steal passwords in real time, all without rel

• UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL6-qu-cN6glV6XSy1IS7siHKdKPFmzqT3X8TQjGCa0RD33kfIQ8NfEBR5r8dbQvj1OS8L6T083igxfS1VO98xlg7MHIMysbfRcVpdmPMcYibuMwDZ6Sss

• ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKQGTQ6AquoAvAeMWXXITPacYsdChgFUpg7MLwKkfb2AylEuwQTk9av5GqMSdgtsBtr6QC70DrJkEo02t-Wo67z1gumix6FKKlOPSWo4fLEUHCibBoTrf1

• Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIEXaa59LRblZ0rcBVbKDdH4w9Rszk27anNt20Onx7Li8D7FXbf3Ipod53uo3N2aa6Hj1QLJaNFDIBlrcgM3YZg0UJCsjI3maDKkFEdOeyhzis15St3QDg

• Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDF22WirQj4KZe5A4NxYmG3UhC2o4BRQ4AybyFlmr80n5Wkf15sbtMn11P0msoMyAe65WBqMpL2XBsqTiHdDNNH1i6qz11ydD9X4AIOoiaSfCYb1MCe7df

• N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsaNpVaG83aDE1lJwcNllVSeS-ebafbbt4FgaKHH14dt1i4qvCtw-dYVrEMiWf2GZ5vyGPhyphenhyphenCieChBz2IChMJew0I1Ze2HEYJpB-j3rB2Vnf

• Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjv2q8ukeawl9ALLfPnkrRkD2a9umOrSxPHUJdclgLcKj5zM8k19y-NWuTGLrV1yIU4u0F2-QbAsD4zO-NkeEuWPwDqdUYbVFDG69EgOl0v55K0Brjp7lfI

• New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCUnWbFb6UGu3ML1MqcuVXYwk0yoD6WzgXIQmi8ijkZQjS6M3g1F3kgV-RanNgyP1bdpNxDOOqMJzJnutZGh4MUVyYCbbu98sNXtAp-GWxueyKH9fDo3z9

• 18-Year-Old Linux Kernel SCTP Vulnerability Lets Attackers Gain Full Root on Host

  A newly disclosed Linux kernel vulnerability, dubbed SCTPhantom and tracked as CVE-2026-64564, allows attackers to escalate from unprivileged local access to full root and even esc

• WordPress XSS2Shell Flaw Chains Pre-Auth Login XSS to PHP Remote Code Execution

  A critical vulnerability chain in WordPress Core, tracked as CVE-2026-64638 and nicknamed XSS2Shell, that turns a single failed login attempt into full remote code execution on the

• OpenAI Slows Down New Astra Model Development to Measure Cybersecurity Capabilities

  OpenAI has announced that it is deliberately slowing the development of Astra, its upcoming frontier AI model, after internal evaluations revealed advancements in agentic coding an

• Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data

  DEF CON — Varonis Threat Labs has disclosed a one-click vulnerability in Rovo, Atlassian’s enterprise AI assistant, that let a specially crafted link seed attacker-controlled instr

• Bugtraq Is Back: The Original Full Disclosure Mailing List Is Live Again

  Sophia Antipolis, France, August 7th, 2026, CyberNewswire At DEF CON 34 in Las Vegas, security researcher Jonathan Brossard, known in the community as endrazine, announced the rebi

• Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFYjJTxVoOMkR9DDRPZ5PkeREWAqmBScR3TPw3mlweipGlnQKq0OdfVqR2f26QIV3kBJWQIM65f8XwMSFq3zT6Bl4fsTvkPHxJiU2LilhK9s0tcreXt2go

• New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOSraDOAu8v1CYXAo4z3cStSiHsuM6iF5vjHKmq0Q4kXMtGQ3n5EBjJoLNRzEFgW6xs6-GuSP0tUAX-EPYRHaDQQNHuz-8xSFbpBShjMumlZdcwuZkl3Gk

• Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzkSwdiUeH8rB-KgSkEXrT-oNL19IyghM7Ks8UDOedxPYB5czgwO8pXNf0YUt7OHqAbRRDJkRvJffzJ0lfpEdqfLn-w-Bc9pwOa1FNJjJkrVbD-diaZu9H

• New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5BBX-j7uA7NqPF9tVWhx3y09F3whJ3zweRoWGyI2kJDxhW6ymOG1oumq5Oz0sZWtCAKSCALcd9TTl7Kf5Mo3aqE3aWKH8jfKWt2uUD-CUa6tmid-3MvMT

• TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicYXbdZUBG2jW8962nmphGWa0sWoq3jKe6HAT9wa6qlZdPPYBZRdw-uWjUbUv15BxaRgugcEAPXPZ2rMYx3RzMvLVH18F6oTwwAklstzIRehnPJXwBs9b-

• Critical Vulnerabilities Patched With Chrome 151 Update

  Google on Thursday rolled out a fresh Chrome 151 update that patches 41 critical- and high-severity vulnerabilities. Over two dozen security defects are memory safety bugs that cou

• Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguukj-eRhx9RtAq9X96hAxHi0IU3ZWgMW5XkdWhF8ezevuBQygkpv-ku5PSri9Gt5hRkNVxe6HmJJr5Mg33XPhOGziqaho9bwm-mkRZSBl2jo94XF3jRwT

• Multiple Flaws in Enterprise Java Platforms Allow Attackers to Execute Remote Code

  Enterprise Java platforms remain attractive targets because middleware often exposes paths developers assumed were internal. New research presented for Black Hat 2026 describes 12

• 3.8 Million Impacted by Unlimited Technology Systems Data Breach

  Unlimited Technology Systems is notifying over 3.8 million individuals that their personal information was stolen in a data breach. Based in Montgomery, Ohio, Unlimited provides ad

• Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj81b6YckjrqqfRrJQNRdIf3nu4xfqLNScukFYEao4VeF5QNlt16sbEwrdutizdB9Q1nOWRQpqeSZg4gYZsL8cIhRSJ43XJqMKWKgdKF28oeTl19HQQ75dn

• Papyrus Mobile Ad Fraud Uses Hidden WebViews to Fake Clicks, Scrolls and Attention

  Papyrus is a mobile ad fraud operation hiding behind apps built for reading serialized fiction. While people turn pages and follow stories, the apps can quietly open websites in th

• Microsoft, Apple Release Fresh Security Updates

  Microsoft and Apple on Thursday announced fixes for multiple vulnerabilities across their products. The charge was led by Microsoft, which patched over a dozen vulnerabilities acro

• AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgynSSg0CZ1sssmMR8F0u09LmQ82liuj5nt2aor3klmi-xPcKTmalo4JLFQ7jd2mU9Ycnltsrnw2MiVVjmlT-wcYR74Ob7NMN31KNnny14lqVRdrmj30r3y

• UNC6671 Automates Microsoft 365 Data Theft After Hijacking Employee Sessions

  UNC6671 is carrying out data theft campaigns that begin with a phone call. The group poses as an IT helpdesk, claiming an urgent security migration is necessary. A convincing call

• Black Hat USA 2026 – Summary of Vendor Announcements (Part 4)

  Many companies are showcasing their cybersecurity products and services this week at the 2026 edition of the Black Hat conference in Las Vegas. To help cut through the clutter, the

• Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgH78NjDW1QsIk9dwQ1scYlCkNCMutfjGx9flqrKbE42fEXqvHT8s5EeHTnWjbBGvzCuHPEWStR5r6wjwtIuuHF1hyphenhyphenot22EQ98xedC1zXVhIh

• ChainDrop Worm Infects 400+ npm Packages to Steal GitHub and Cloud Credentials

  ChainDrop has turned routine software installs into a route for credential theft. The self-propagating worm infected more than 400 npm packages, putting developer laptops, build sy

• Truck Brake Controller’s Safety Recall Doubled as Hidden Security Fix

  Black Hat — The National Motor Freight Traffic Association (NMFTA) says a 2024 safety recall for Bendix’s EC80 heavy-truck brake controller quietly fixed a set of serious vulnerabi

• New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjx8dmEkj0rsX2NREBfPOczKn7zadWRaVVOyVPVeaCPzCDdBAPhocCwP1CVbXp1pj4Q7DVYsdusvWc9u9G7lO4BGYihT6BXnXY099zIs1B1PBefH71cXCHZ

• Fake PDFs and Chat Apps Let Patchwork Spy on PCs and Android Phones

  Patchwork, also known as Dropping Elephant, is using fake documents and chat applications to spy on computer and phone users. The long-running espionage group has built separate at

• Claude in Chrome Prompt Injection Steals Gmail Codes to Hijack Slack, X, and Claude.ai Accounts

  An indirect prompt injection vulnerability in Claude on Chrome can be exploited to steal email verification codes and hijack accounts on platforms like Slack, X, and Claude.ai. The

• Vishing Extortion Group UNC6671 Rebrands After Making Millions

  UNC6671, an extortion group engaging in tailored IT helpdesk voice phishing (vishing), has rebranded and diversified its operations over the past several months, Google Threat Inte

• 18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmTGemKyDLZPrsBbt2AdOQMEBEcRFzic8Ddtkx92vtPOfFdoiwxJ60b00usecTjHuIGUJuUIR2aB8MU2P7-GLc0NOuWsa3ctofrA2-wD38wgI4Fke3moSs

• Hackers Breach Swiss Government SharePoint Servers, Compromise 200 Accounts

  Swiss federal authorities have confirmed a cyberattack targeting SharePoint servers operated by the Federal Office for Information Technology and Telecommunication (BIT). The incid

• Google Chrome 151 Fixes 41 Security Flaws, Including 6 Critical Memory Bugs

  Google has released Chrome 151 to the Stable channel, fixing 41 security vulnerabilities, including six critical memory-safety flaws that could enable browser crashes, memory corru

• Growing Up The Hard Way

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjz974dYXx9klEaqhJoTHKqb5QNoQwTpxsMKoZeqsvQtvWZPgPKobw1QySvcNGgnFocbYaFaaBGsB4COPaw-fqqgOHERJEVc8sgRSjto5VCrQeIWr5Nz21r

• CVE-2026-64561 Zapscape Lets KVM Guests Escape to Linux Host With Root Privileges

  A Linux kernel vulnerability, tracked as CVE-2026-64561 and named Zapscape, could allow attackers to escape a KVM virtual machine and take control of its underlying Linux host with

• In Other News: AI Slop Limits Apple Bounties, North Carolina Port Attacks, Hackers Target Wall Street

  SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broade

• Malware Abuses Windows Hello for Business Key to Authenticate Microsoft Entra ID

  A newly demonstrated technique shows how malware in a compromised Windows user session can abuse Windows Hello for Business (WHFB) cryptographic keys to authenticate to Microsoft E

• New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEge2pF0kPrHXARehOfrgRZzC4bsZvLQSss2mm4xJwNfV53riYQHKateFgF6HvgO5WoDDzjKhc8JFT6pD2ggOORpEuUIBbySYIy79RUTRAB4NpEUEi3dhenf

• Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8YRyOCSodUbPpWMicgOiuGbEQWDBmuW-47PAUFkS7yKEQe4Do6svH4cQb-U0tC53C9mqq8ijjlG9gwuzyqYfNwtS61WxvNxIgk1dVC7wX598rncbMgQ5t

• QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFQzlCdxoVUtdNgowwmPFaISlBF7Y2HsG1BQf3b-UJDQzRbPB249W6rwU-TSW1NES4OI-12R1z3tXQ-QlZv8cEaagpyLJVYz48Etb9W0MtuNp9BTL13-5W

• CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjU9CZ3zh4mWF0SVRdcylBR7IyGB6j797LrHqyND8vcsBbiE6mcDlqaufSOBg2Av4EjHZgMxbzR-KS6GvXX0hLPgSFlh5gwxKwhjx3FvcdsQ7XP65x70cxe

• Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyvip0I7Uu7TeEHOGkVi4gl93ktZtzWF1krMsS1XPlRcql2xIf9UU4rXjDvdrF0HPPQaFCgNhhrrp9IM0HBJgHEzweJM41lccFe19e2DYqzkk5Au2STfTB

• Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh28AJU8kuimN9uKY5xj-0XMAMxfVP4rejHEWMJ5FD99mAvt8dEsRuGhlCGb63VjWykzePg-tuaTqNycmvhZy3oFRFAuVHbwpsAg6ae599Pl7bYQVb7Qo7f

• Leaked n8n API Tokens Exposed Live Instances to Credential Theft

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhx1pOdsqya8FoeUfRoysn2429wQSGELUYOuuaDRT5-pJMERQc7DY042ndusTV0UriGHrR98oyPeHnR845R1hxSxKBTvYGTilYobQhIIXOCEc08FiKbhDlu

• Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwgShwk2piIWpgBCF7ikGum0q7QycFbG91NuOiXNj4iRwUya1R53Mx53EcLELS4lEusFjCYxTZuD0vf1VbGdXJ6rM9zq2OuNMsP20bbATKOaMUYbu9vWRb

• Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgW4SMtq8o2R4j-NiqM2jQTNNSKABhkghGsH1AkUpqHf7sms7KTAr63IKabEzV2vAfAFO3XxYjh6YH8rDNtNVuu41JePoUdBWQB-WWtJt4A-FWfmT6rwyzK

• New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhWC9UfjMK9e0KvUrcCjymLYZzuDDgZpArW3oZPtcds7CJ1pr1GleT46Wlm2aWWpoe6TpgYcdnzjhVOgjK6mnWgekJkMotmfRiQ0xcp5v7mdx6CvVvUID0

• Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjFD4wUBf7wKq8NwAgGKeKgJ3XIR82d26D7t5fNRBoDTOHcK5i66j4VqtLNAvK7Lkocc3lbW4SK33Ialb3F4EuBk59ahZItRVdPsZ3RceScz5lEyR7gQHq

• Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGDedn3TJGLHvhq2MkwkQTsKgIvrOw24MRfYCoHnHiOK7r-VbitMrwXXF9HGwbegba20Dla1FLyK70-OQRVxiHfikBFrz6jei3QK5u4ApbR4aYuLikQj1Y

• Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnNyDWyCEMrA99LxVQMqKNr188rBBjKa6Kg3nHdjVLxWCCVgfqa0cChHoJWbHgbSLHgZVpcgWn0kw0FUySWhScczQi6LNme-wY9rkUAxE-IvoFLvfum-zW

• Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhp3V9f5UsiH1E6dHfRvy0DEOYvcK14BatMbbLVfdPjLbu3PMInRmVXDi4xoGw-pSIuxUjZS1rdv4X7N1V9xRoV9RRVfaYdAWI6OTxKZzOhAlHYh6dKZNeA

• OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmYzVApv7lLgQt67mGI-sC0vUGKZwkNmFsVgTykAPCHqVMsfGSSQRRaxVXuxx0RDd6wk18yEiVXXy3uPRpmLTXLNMCI0iuKbPtJ3z9CtuPtjBsIGDAsVTd

• Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzEMAtBAmz-q78zPppsCxMiU-EtelOA3FQyT6Qzb9KpWEsc9wNMT1fdDjf65q2WnrioQ033KClusfHFXexSM8V30mReU5V3nbRY4W0F3cg2ehG51P1nnWa

• Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimtSQSbHZnqrcubRlfzViiiKRKyucYCIYf0nqt0aWqcYJgY122xGjIRDGnvpYukopZM9DuEPjN6Lax97qyYIghxfFbfaULxhabuOJHBOVbyycVBNUVHAbb

• Black Hat USA 2026 – Summary of Vendor Announcements (Part 3)

  Many companies are showcasing their cybersecurity products and services this week at the 2026 edition of the Black Hat conference in Las Vegas. To help cut through the clutter, the

• CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaatZ2xKx3CMoWOXqKbIp1Sd-rMbET1QE2Lh10XAVcgZ18UUlWRyR8BR0Nj-gqy9SZhnEq0ZBvz63FfCBu-XGfH5yEzUsKBLicrlfXK2-iMsgZYkDDTW-H

• How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones 

  BLACK HAT – Two security researchers found a way to exploit vulnerabilities in Samsung software, including the virtual assistant Bixby, to hack mobile devices. The research was con

• Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsIRDdzzjtJRcq3kiouQy7I8wwCFvWIKA5VHAKEVdGC2OJL3WCGnKPZUvAHUi-Jrz9yLN5pfTtS0QI8MRUuSbGOlbg3jNktHGZSb4wsOKvjcwehZYqL671

• Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability

  Threat actors have started exploiting a recently patched vulnerability in JetBrains TeamCity, the US cybersecurity agency CISA warns. A continuous integration and continuous delive

• Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3VqhMa79pNymspvzHhSpHG4HCDAGn4nAD-7ZwQgDuSOELhM0xxHASqfnd2ThEv8XJ0tM58bPsGPHcobfoaEEWW4Am9H-Wd9bpb-QqYRQfFcFKrvbLjwEG

• Cisco Patches Critical SD-WAN, IOS XE, FMC Vulnerabilities

  Cisco on Wednesday rolled out patches for two dozen vulnerabilities across its products, including critical-severity bugs in Catalyst SD-WAN, IOS XE, and Secure Firewall Management

• AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNMtOKfZBxSDQ1928IVtFay3f86go4rnTY6yFaQYCzAdGt3e6uBkZfZkoFtHbScEbTCri3ZNVVO7BbuvoVpjGCLSpdphneotNbiXRT3vciQT6dzPa0K81e

• Belarusian Ransom Cartel Mastermind Gets 16 Years in Prison

  The Belarusian creator and administrator of the Ransom Cartel ransomware was sentenced to 16 years in prison in the US. Maksim Silnikau, 40, built the ransomware operation and recr

• Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWGMHYrRkDGf3XVlOoUbE1UCSjvcN9x-XNpNGpXf45JqZzd2FrxJ-metvu-U5VyDqH2PGNaY9MiSeShhH-YVN3O4ryN5lh4ICsuXtz0-DuCSAgnywXUifD

• AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgERF89TJZsy7Kq1JhEcPKC5ynyCNMv1JAObXj4W415ZbGwE-ZZplLbq5HEiBWi3ULKifDI7Tl440UrQvLFEmngeAHL4o2XfWKxTgb7CEsHmBqBt-w5qePo

• Meta AI Hacked External Systems During Cybersecurity Testing

  Meta is the latest major AI developer to admit that its models broke loose during cybersecurity testing and hacked external systems. The tech giant said in a statement to the media

• Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi53VbynsVNPTCihg9qrqybX7Yu90yM3Tm7KlJnJCHz2MOUQPyJys1uK6H5QkVqxGekck8qe-pA55tcy19IDYQ4ndOKasvoaFiPJCINJClfHv6G14Ga5PFP

• Critical Paperclip Flaw Allowed Admin Access, Code Execution

  An authorization bypass in Paperclip could have allowed remote attackers to obtain arbitrary code execution with the server’s permissions, Oasis Security reports. Paperclip is an A

• Canadian Man Pleads Guilty for Hacking U.S. Cloud Storage Provider

  Connor Riley Moucka, a 26-year-old resident of Kitchener, Ontario, has pleaded guilty in the United States for his role in a major computer hacking and extortion conspiracy. Prosec

• Remus Hides Its Command Server on Ethereum While Emptying Browser Vaults

  Remus is a newly active information‑stealing malware that quietly slips into Windows systems, locks onto popular web browsers, and drains their saved passwords, cookies, and crypto

• Critical Jenkins Vulnerability Allows Attackers to Execute Malicious Code on Controller

  Jenkins has disclosed a critical security vulnerability that could allow attackers to execute malicious code on a Jenkins controller by bypassing a security filter used in agent-to

• Podcast: Compliance Won’t Save You: The Future of Cyber Risk with Edna Conway

  In today’s digital age, cybersecurity is more critical than ever, and organizations must prioritize resilience to protect themselves against evolving threats. In this podcast, we s

• CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOLyOOoRbj7XXsr5asbHmKbRetYhjWcAZap4b6VUBQ3ENWpeB46A78vztXFJGUDMDHNskXyUMH6yu9Quv-WLut657FS4Dk4-SICypcAVTLuI7fYUxC7Y4q

• Public PoC Released for Linux Kernel Bridge Use-After-Free Vulnerability

  A public proof-of-concept has been released for a use-after-free flaw affecting the Linux kernel’s bridge subsystem, specifically its Spanning Tree Protocol implementation in net/b

• Hackers Hid a Remote-Control Toolkit Inside Oracle to Take Over a Windows Server

  A routine web application weakness has been tied to a serious Windows Server compromise after attackers used SQL injection to plant a remote-control toolkit inside an Oracle databa

• Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts

  AI security company Zenity has disclosed the details of two AI browser hacking techniques targeting Claude in Chrome and ChatGPT Atlas, demonstrating how they can be used for accou

• One Fake Movie Download Can Expose Passwords, Payments and Crypto Assets

  Cybercriminals are weaponizing pirated downloads of the blockbuster theatrical release “The Odyssey (2026)” to deliver Lumma Stealer. This prolific information-stealing malware qui

• Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUzp-V2FqPXO6jQl0K2Qnn-2Ys6UG168FNhA0TcFv7CGHtBIgWuD66JsjhDiQhfDkSTBoYpVGTY3wcLe3SITSszBT0XAD01P6nFLkXOHNNoKmp6VTsQ-zB

• Critical Paperclip Vulnerabilities Allow Attackers to Gain Admin Access

  Critical vulnerabilities have been disclosed in Paperclip, an AI agent orchestration platform, that could allow attackers to gain administrative access and execute commands on affe

• Top 10 Best Firewall Management Tools in 2026

  Most firewall breaches aren’t firewall failures they’re rule failures: shadowed policies, forgotten any-any entries, changes nobody risk-checked. Firewall management tools centrali

• Top 10 Best Intrusion Detection & Prevention (IDS/IPS) Tools in 2026

  An IDS detects malicious activity and alerts; an IPS sits inline and blocks it. Cisco Secure IPS is our top pick for 2026 on the strength of Snort 3 and Talos threat intelligence,

• ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhl0f74Tyvl6NQ4TAbPMIpgYWuHQN8THsYSQ77D9qmHuZdKsK2ZDrTLyWshLPV-UfSYW6Rbtfj866jP0XD1QHmOFYIoEDZG90G3cy7JGFJrKsq0m7VeGqa0

• Snowflake Hacker Pleads Guilty in US Court

  Connor Riley Moucka has pleaded guilty over his role in a cybercrime campaign that involved hacking into the Snowflake accounts of 165 organizations. The 26-year-old has pleaded gu

• Hackers Can Leverage WSUS Servers to Deliver Malware and Compromise Enterprise Endpoints

  A novel attack chain that allows adversaries to hijack Windows Server Update Services (WSUS), the trusted patch-management architecture widely deployed across enterprise environmen

• Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWQmUt2QHxTfiXiolir9akmVh8dT5di3UBDtD7H2IJlkWQ4x4VmeTUEZo8CUvz2q2FXCvxTJDHenWPzqPeSbnlCYSRTNGULKdWRJnsmVg7SVJTBBPABxqR

• N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjs1H8Wx5ZrUFksG2Tgb6qho5XHULdP13qVeYXx1xWPPt8B2rH68XC6IhzBk-dczgsdWvpZdVTI7AIMsgK1EeU3B89WVUJu2N5B71FQ4GnlZDRlvNiD4pGO

• Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMO8eh7kmo0QAAphjdYIXsjfGspFVU9gV5XInqqhs4WnFNCmhP-EBdmVln7vSrwWkmo9pdvoxAQbaC17M8sYg7VzBX8RJnRIb6E6pBr5euW9WweOeeZk9X

• PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguFnLbEr199EuLksobp-I8Z6liAUmM4EKRi94ttPtanQN2aiwvNh1qHKkkGhOBfWTzLzANlQ3jd6FmJOHWbdn8rFfg1sHvYqmBaVM5kfak1JxRhqPEfNR9

• Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvbg0AbgcDL8IouGo4deahk3vOuegzB-hxhUxAok05EuI5uuYJUDP-mUVS1w-gr9Oedf6JzF9qEB3l8MWVnsFGkmZ4ZorInHavwKWrQ7toTmv64uc4EnJd

• FOMO in the SOC: Where AI Platforms like Claude Actually Fit

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvsPqZrMBUJ3CH2LqsxL1HWV6F-qs8FbnvytYbz9ZlSUptj-3SPJ-BAlDBrF9V39V2FD35LPU8BgSdDNfyPi2tqESWHg2qzP2ospA36aF2CexX2bRw7ee6

• ⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoiIM6TX9TShDQoVLnmGNELZPas3bK4cwsNviskgSjdFASOmzcJPOixde9rkt0uawGd5D5IRHc09j5etqie865lUafh95s-TggQm3PluElF3XhILbJUCkl

• Microsoft Bug Bounty Program: $20 Million Paid to 500 Researchers

  Microsoft announced on Monday that over the past year it has paid out more than $20 million through its bug bounty programs. Between July 1, 2025, and June 30, 2026, the company re

• INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghC22v1WIfuZutm-lxuOPzdipffNmYvZ5KA9lAUg-8EgQr9Gy0ouYijUVab5m5aIpGChViq6kpC4h1fZfjBw415YHCINhU9GXTkil94vJvCt241xptfhjy

• 150,000 Impacted by Madera Community Hospital Data Breach

  Madera Community Hospital in California is notifying just over 150,000 individuals that their personal, financial, and medical information was compromised in a data breach. A not-f

• Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNiuQky0C3uTOSaOEyGLg0O7h1B0VAP9nU8bwdZe-8DKDpOBihrvWw-2ecGt03mmT0V1F0bg7xOQuv88cZlLcLqavDM9gWnZHku-skIzJMEWw3lBNvrVcD

• Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks

  Thousands of data centers are at risk of compromise due to a 22-year-old vulnerability in Baseboard Management Controller (BMC) management processors, data center security firm Lav

• 18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhb0HLXOvc5Gir8EIXoYIRMQG7CsNL7gJEkPytfRRQ67OWrIoyrGAX78K0Ca0VJ7hhpyru2Vck7ntHKLyBLhGezuyODznWoB88KhAdEWu8MyhVbiEia2Gfb

• Critical Gitea Arbitrary File Read Vulnerability Enables Remote Code Execution Attacks

  A critical security flaw in Gitea, tracked as CVE-2026-59774, allows unauthenticated remote attackers to read arbitrary files from vulnerable servers and potentially escalate the a

• Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering

  Pillar Security discovered an agent-to-agent attack method in Google’s Agent Development Kit for Python that could lead to secret exposure and pull request (PR) poisoning. The goog

• CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhbA9omGpwDxkaXsQD13QewwbHkZMx1FrBHBvsnFkbjkFTY6F679EEextesc1R6ToZIZlHq4osq4AmGAI-74IHaagkIP7KhQp3XQtlwaMx2ALTqssZTdtpm

• OpenAI Reveals How Cybercriminals are Using ChatGPT to Run Scam Operation

  Online scams are becoming more organized, more personal, and harder to spot. Criminal networks are now using artificial intelligence to create believable messages, fake identities,

• Obsidian Security Raises $85 Million at $1.1 Billion Valuation

  Obsidian Security announced on Tuesday that it has raised $85 million in a Series D funding round at a $1.1 billion valuation. The latest investment, which brings the total raised

• DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0MM7WIz9TI9RxDFZ-toTttLMlGIJGGyqnPZ5m68ft2h16hOepWgOlGkRdx7KdUaRjz7GxanOYCp3167ZvcaWo1MV9ihUjZb6dHyX4Ss8SV6X4GGpobunH

• Keyv npm Package with 127M Weekly Downloads Compromised in Shai-Hulud Attack

  Attackers have compromised the GitHub account of the maintainer behind keyv, a popular key-value storage library that pulls in roughly 127 million weekly downloads on npm, and used

• TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover

  Security researchers at Forescout have disclosed 15 new vulnerabilities in the zero-touch provisioning (ZTP) systems used by TP-Link’s Omada networking ecosystem, warning that some

• New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2LFB09rf16kl1PinOnHkAY4GiI38azQ2t-EWYRicFndp5DX-5KSfwVVEJxwEKp07oouBfkFg71MxwilLYM2i3clk82hs5-Xr-PgDj69JeYzTsPjp8sdNZ

• Russian Hacker Breaches Companies, Sells Their Access and Spies on Ukrainian Military Sites

  A Russian-speaking hacker has been linked to a broad operation that breached organizations worldwide, collected credentials, and prepared access for sale to ransomware groups. The

• Zenity Raises $125 Million in Series C Funding

  AI security and governance company Zenity has raised $125 million in a Series C funding round that brings its total raised to $180 million. The investment round was led by Norwest,

• Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLUUlqxE9AYL9PyFAlWMsG9czDcrU9p2kMUsumVIYx5SnlMAO0z-nweUWeX-CiMHQBbkGK1lV-78vp003-bAeRP4gQRyGXlq5blzx5dJdd9zFttd2tjhGl

• Roblox Malware Streams Victims’ Desktops and Captures Webcam Footage

  A malicious Roblox cheat campaign is turning a familiar gaming shortcut into a serious privacy threat. Players seeking an “undetected” Xeno script executor are being lured through

• Public PoC Released for CUPS Vulnerability Allows Attackers to Gain Root Privileges

  A public proof-of-concept (PoC) has been released for CVE-2026-39875, a macOS vulnerability in the Common UNIX Printing System (CUPS) that allows an unprivileged local user to perf

• Weaponized Email AI Assistants Could Help Attackers Hijack Accounts

  Most email systems provide an AI Assistant for the account holder. Attackers can use the chatbot of a compromised account as an alternative and versatile form of Living off the Lan

• When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRUUATlzjkTMUxaFn2DIqPw1WxQaqSvIY58hYRWrDQwnqyeDWgazdM0HarQoeNs9oXocZCMPYqOZxnxyWz30-kEKzLZOFGyJ46GAuWyEj0ZfL69dqBd7OX

• CISA Warns of N-able N-central Authentication Bypass Vulnerability Exploited in Attacks

  CISA has warned that attackers are actively exploiting a critical authentication bypass vulnerability in N-able N-central. Tracked as CVE-2026-18577, the flaw affects N-central ser

• OWASP Subtractive Security Top 10 Project Released to Identify and Reduce Cyber Risks

  The Open Worldwide Application Security Project, or OWASP, has introduced the Subtractive Security Top 10 Project, a security engineering initiative focused on eliminating attack p

• CISO Conversations: Russ Kirby – Passion Is the Antidote to Burnout

  Passion for the job is the secret of a successful career. Russ Kirby has been CISO at Ping Identity since the summer of 2023. Before then he was CISO at Creditsafe, and then CISO a

• DarkSword iOS Exploit Kit Spreads Across 180 Web Properties and 27 Hosts

  DarkSword has expanded from a leaked iOS exploit chain into a broad and fast-changing network of malicious web infrastructure. The campaign targets iPhones running iOS 18.4 through

• Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi35nnI5-oHtA0Eunk4tOFM1lg12NrqY7HrDNBbee-kPWR-BHHxXQtd-Tj3b7FrMlTOcWNC63XgVV9n0FEoD-G4ydCpmBv2g1PjvS-lzopLbMnODHbNL2bG

• Six Flowise RCE Flaws Let Attackers Execute Code on AI Workflow Servers

  Flowise servers used to build AI agents and automated workflows are facing six newly disclosed remote code execution flaws. The weaknesses could allow authenticated attackers to ru

• Oligo Raises $60 Million for Runtime Security

  Runtime security company Oligo Security today announced raising $60 million in a new funding round that brings the total to $140 million. Ballistic Ventures, Canon Capital, Greenfi

• Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAb0f5sNdFs0uLbgh9rBZ-SaCrUjv3c4mL7OLF7pFPxH5pusnFJyInc7S-QqgMa0DsEm2fId6v2sWX7hJcaA0eHTHngKBXGOA3ysg7NYz1CyMAgwsrWnJ3

• Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLKz0u1mJIVvPAxiFFqsvkMVXxyXqSpaYhbtTRFLoIWyl5QFwIrJjruxEYH0LAdzJm38P48mT24ycKfjPs2bg6FUoy2IWVUxH7SpNtiSJuExOy3dDEAWpr

• Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhCgiIKxPiETcU1yIlU2RFsHgjXg2uLgbzaJ-98y7sPuujYarFbc0FdMqSRLIKJ1hYrsGLCZTCf5k40RtQ2PgwmA2L6tLAidOymHNIduXN3vtU0u0BsI37P

• Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjswJ2Clfk448ySFwyQiVVviqzKzT4B9iwnvVio4dzvA1TXPnNuDJUI8MozBddPvdWmL2JH3jVvzTxg8A2Z6X9qNPYtxjuVx7RKQkMW8vNVBIEs0sgcrLfy

• Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFSDmsE6q7010reBwpOwS1ESkJSxlBlgRBbtjEVAdeClQFAkRfpriRQWUpL0Br8xnFdF1mctv4Ttj1Nv77MMIKm9qlNehPtTLYzOQwcZAWR4Vw1HzjAvIt

• Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgWsCKCTbRf4kZF1zcu1cmfHaf-pPPKTo2q21iPUibGu2jsDaxT92LByZdMAi0dluVH-yt263qlWE5uDFAh4Ue21dIUkeu08YXHqwgHIR9bziAK9nBUiht

• FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipannhqI3vkI628-oBoMbtwDDVE4F2PpVmxVM9d10AE06EVVwZzrBde5sTZTddm89YUCUkfopYwqVzuk2Y8I4g84Ete1SQLvrQ2gA8FVxyCt952gNJpTmX

• Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAHLuK9rcrkKZxWdmWf50USFH75iYP3nViQrL7sP6gBJUipIQfUTU0XmA2xnOTR57ZCQWd83Y2joLatEV3XVV10ph4uQV7LrrYLzDCfW4dBiDyvVtpyhD3

• SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzKpx1jDG3j0UsS5Ova8qJWV4gmJcez4M7iowp3M10Tvnvl1toUDwWI1igPQXK4-7IIuFXf7cTiKZ9QIRFco8PWFC4mRzBwGz81-8Ix95ujv3bVhshhFEA

• Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGU7u7ESWcaN4Xy7bCwiH5yVHsr1vMjqCu05UKJ7c4tsJ4gSRsQXwg-WOe69VD1dLiRuf9FC3HTcjp1ia1NZPPg85MUmHz2TCOplJKSC002w7OMu0X9KWt

• The Network Has Become the Control Plane for AI Security

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhCMiEYFcCrvL7s-oZApEbF6gP4J5FpWseBSQN2iP5bBIXP51mVR8QDnUmxDHBrMr0ta6ucsouVsVnWg8mGPeRvwkx09PCddi0pWLYzOpeA7NnrKUaeVhyp

• Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-BgxoTGLqXYzQh4HW0TUm-hbX0ApFizzFtFkKe5mb3fKSyn6ZzpjUvivxi7VCwEUOuJx3Bg1XHpHWq9tbZh5xBrAHT4gBG2DYyqvFkVKmWIRiFzCpXIG5

• Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdFT-y76kGOf4rFOAu6NYNsE2s57G-7dl0a03tULY-f2ZGTbpPeEvu-NUCLVh-bgEdBvecIt28BJLQXUHclBcIfGP9tBSZyMIm971Myrp2zhSPyXhCJkhY

• ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNfPEjoHY1NDIrmCVPaZdmWbOk0MZwMlh6Odxpqfchn-5rOvsj4PhaBZs4LJvoj5iXhgbBTZzKCNYOPbblXU6kSnVNxEfQER6bNIuhROsSBTrhS6PmPyST

• DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhCHbm6QCC9jjGwa-7P1N2PwhDjRvpC2hlS2hl09-DUZa5xdDeHt9qH1zISepl2ERqDzmDbdQzfE2vkHDsvE7G8QsetJHjzC45DpPr5-83lc1BGaLHfEwMf

• Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJ3hIjH82iCzMILnA0uACotjW9waDLj4siTRhyphenhyphenBSiVyis0Ul0j7-7FcWyDzmCAzZPLJ72iYRezpbd9dUABUMw5G4eMBRwph0SbaQr9yCRXeL

• Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2dGysHIR6yJWx6hMxq6lAct7fi4YTuryWDkrcenDv-psd-fU7I8K3RbM6Blox5OE3MQojew5bnPamtIDPzdBX6fOk295hhQh6rBkA2f9a1sN7t7ZbSyU-

• Critical Code Execution Vulnerability Patched in TeamCity 

  JetBrains this week rolled out patches for a critical-severity vulnerability in TeamCity On-Premises that can be exploited without authentication. Tracked as CVE-2026-63077 (CVSS s

• 6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiamJN4Z-p-XmpB1nwgfCMj2JvWAmGP4avhjI3pBYb11kgANQy4wQf2DQ4VGJEXom4eZCFoqVozP4aJPPtpGufYrEe5E9xkebmctud6KO7NZEfNCiT14ln7

• CareCloud Data Breach Impacts Over 350,000

  Healthcare information technology company CareCloud is notifying at least 350,000 people that their information was stolen in a data breach. The incident involved an electronic hea

• Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhx5Qzkfu4WC4nW5nnmFDP3CoZsw91wzaKcfKRZBx7DXHggnqqxqun757BOQey3jOUCGe4928DBU6fy4dPX04Cmp94xqWdNkZgkp1DuenVewYZFxSs9YSQd

• Critical Flaw Allowed to Azure Cosmos DB Pwnage

  A critical vulnerability in the Azure Cosmos DB database service could have allowed attackers to compromise all databases on the service, cybersecurity outfit Wiz reports. Referred

• Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqUoKsOzzL1DJubfk79p5F7EfcWUNP-tPwTMNDt329zqRohKeX2tE3qxMCciII-FZEHofHM72OihyAfF7Eqs48MRmxxVOcGZyKML5LHynh5Akf1fWeNSsD

• Prompted by OpenAI Disclosure, Anthropic Finds Its Own Models Hacked 3 Organizations

  Anthropic revealed on Thursday that some of its Claude models escaped test environments and hacked into the systems of three organizations while trying to solve a challenge. The ad

• Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhxfc7NuArKSujgjgzPzENagYVTlBxcvnFBXSbptnFsTI1o-Zt5SINHtPEO5MNkJ3vwkKUTX68vwmCzVxRQVFcgnb9eXwAsLKayCtzMLVRuqwV3RDaWTgQ

• EU to Crack Down on AI Deepfakes, Illicit Imagery and Hacking With New Team in Brussels

  The European Union rolled out a new team on Friday to rein in AI companies across the world, in one of the most aggressive regulations the high-tech sector has so far faced as fear

• HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjOaqDYzKWLfOEp56DfMjSmDMudw7Y3DBFUYxOhGNTnzRYlKw9YCNNbjLvepf-vDHBKVSSA-KZjx2dNXjJR3ZpTpSIgGSfhLRjyR2P8ocruWQ1w5UcYpuX

• Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace

  Google this week confirmed that this year’s surge in Chrome vulnerabilities has been driven by the use of AI. The increase in Chrome bugs started in April and has continued through

• Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmBagWdesuJqVgNAHPh7t75IGrajYoJeL9HHI7r23AK7CuLUN22-GBwDCWJWTlIutBApsdhSGproqxtR6kVDg04FT2zc6vZXZCQed8Kx3bD-jw-VXkYfAH

• Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers

  Authorities were working Thursday to find the source of cyberattacks that targeted over 30 water systems in Minnesota and came amid warnings that Iranian hackers have been focused

• Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglJ30Q03tS3R4yrNdyR3sDdvBam1plVfmenBAFVPGmaVMErJoqzXoIpeAjrFrkkFkudKUSHI-h82FGoiIJlkT2JghjQKrO2p7VmzpduPGv26gGgJ8I04b-

• In Other News: OpenAI Open Source Tool, AWS Links Hacks to North Korea, Mythos Crypto Research

  SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broade

• HackerOne Mandates ID Verification for Bug Bounty Submissions

  HackerOne has confirmed that all hackers must now complete identity verification before submitting reports to any bug bounty program (BBP) on its platform, a move the company says

• Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgL4TR-PlW4MehiF4iAbWafpNUQrSuhhTuEZwgwba7Gi0mF-PfixGSlFmpsBm51WbJYfkA69ZYNjO2aWl8eE8tqdSPdJL7mvLOaYL9O6VWkfxw96YFF0Qxt

• Ruby on Rails Patches Critical Vulnerability

  Ruby on Rails this week rolled out patches for a critical vulnerability that could allow unauthenticated attackers to achieve remote code execution (RCE). A server-side web applica

• Arch Linux Disables AUR Package Takeovers as Attackers Push Malicious Commits

  Arch Linux has temporarily disabled package adoption on its Arch User Repository (AUR) after security teams detected a wave of malicious takeovers and follow-up commits designed to

• Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments

  Cybersecurity investment management startup Balance Theory has raised $19 million in Series A funding to expand its platform for helping CISOs evaluate and manage security spending

• Hackers Turned a Trusted Advertising Platform Into a Crypto-Stealer Delivery Network

  Adform, a major advertising technology company serving roughly 14,000 businesses and holding nearly 30% of the demand-side platform market, has suffered a supply chain compromise t

• Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiX-el4ovGAmKfllRfhupL0SzdEoZKlouDb1YmhCOl3owxN1ks0Do-WphuD77rka3ukbqvPxSmFYMdBKBirYyw0DJpvSxVP5riGBRvd7wKwnpgZfNm0RFED

• Windows 11 Gets More Taskbar Control and AI Integration as Microsoft Details Quality Progress

  Microsoft has released a detailed update on its Windows quality initiative, four months after committing in March to improve performance, reliability, and everyday user experiences

• Top 10 Best Cloud Firewall Solutions in 2026

  Cloud workloads don’t sit behind your data-center firewall, and attackers know it. A cloud firewall inspects and controls traffic to, from, and between cloud workloads VPC-to-VPC,

• Top 10 Best Web Application Firewall (WAF) in 2026

  A web application firewall (WAF) filters malicious HTTP/S traffic SQL injection, cross-site scripting, credential stuffing, and API abuse — before it reaches your applications. Clo

• Top 10 Best DNS Security Solutions in 2026

  Nearly every attack touches DNS the phishing click, the malware callback, the exfiltration tunnel which makes the DNS layer the cheapest place to break kill chains. Cisco Umbrella

• Brinks Home Confirms Data Breach Following ShinyHunters Claim

  Brinks Home, one of North America’s largest residential security providers, has confirmed that hackers breached its IT systems after the notorious ShinyHunters extortion group clai

• Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiea5Kw2TLtPI4Ts3s3anmPIQr3S8VxO0G9yL-UV1dSlRrW1ZL41XoHcSFuk2ThCBDKLFy-xZly7DnA0FM2nWHk4G1TpV2iMx6-X6EDT3gK7s0pJu6e1wMU

• SplitVPN Data Breach Exposes 865k Users’ Personal Records

  A significant data breach has hit SplitVPN, a Russian VPN provider formerly known as NotVPN, exposing the personal records of roughly 865,000 unique users. The incident, which occu

• Weekly Cyber Security Newsletter– Claude Hacked 3 Companies, Cisco 0-Day, Word Copilot and VMware Flaw +20 Stories

  AI systems moved from experimental risk to confirmed attacker, a Cisco firewall zero-day was actively exploited in the wild, and a critical VMware authentication bypass put enterpr

• Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpS2QJv9o35m4hpF1MjxwE07jbvy9d4kK2fiSsQKFYaYtlUFReQ0j1YQ7fdaOPUN9s3J5oBpHG9vPIbTuHwdjSDoz8UdhlJOp6ys6uBJlQxTL5BQlxtcOU

• Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhj5Vr8pje9uM-Ce6rzE-hhU3HvR2NkKtYfaSrIXz3m0BbrC1ZNC9p4GW4GRQaAvFKPjE5kopXmdmcKcMb71dbOWvMO6oe87HCj4TUXV1dWK99czOBcNHd8

• ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsmJNuemIhGxFuSqY6pq1opCEJECkmIjXm5VnOqOAEjfpoLxQ89Q-qXBqKQmM8YnwyVP2feUo4c-VLZ3cC6sJ0VCXdwhLKFezoK1-i4lWQs68yXaZS8XtH

• Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXkCZuPeRyg1ChSuRUngYAxHTfN5dCHgGrSaCg3hA40XvmX2vRmKxgGJ7Pzli72i9XK9XgCQhhRNK5dE3XJEklUHNzoqx4YLy7NeKSHB4RCd4KkdhrCB1v

• Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCA0-yh9EAnhFa2V3NzQVw2m-sLgbCNVQ8GVMBX4Y6vUNwPXE-vHzdJLFKXVi3rdGXhx5RawHTwox7cd9ph20u5qnH8TJUOKG8nITccTkzqfiyBKStdCgc

• Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0TE9DH98zjhcQPB99o9CcCvYH1otVTUwpXl9Af1Nbl89gqHBAqP2jtb-BFrmXdR-4OYmPOGJJoilFiac2ooKHM5LbekD5kLpW1eRcdpOWsG53701lGhFi

• NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixTLaT7NCY3UuotqW1AHLiB1xN5K-nlqtpnOavn7PWHNWWZmrSmmPTzmL6oA7N7dOgwSGxEbbBq90Q3OVK6wF2PSXdXLs7mKmBYc1dEBIc64Qsq6XEl7rY

• Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJ6m42WBQBHda1ntTqYkaxPyEiKYjc2xnTFIawfUcAxMuYQHtOz3ebO0HTtt3qyhUIIg8NB8W92WIfldPiOjZKCY1aTGfgWq2NnZOhrgoUZ8y8rtfVxCdJ

• Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8qmYxOjHl19UJl8lK9TMJt86it1bULCh3SK1wSiD4JjiKU98fsHnkoQWzUWuG2ZmoHG7yxLrIgSTFRCKep1Ebj0JAH8xuTLFPaIzGpTobs7C8u5OKGGTq

• Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrpwRtXhzpbt7F1FuALLW8MYrTuwWibwuWjsRDROepxJKdbvSNlbcZLHbL54SmyGQoYFTjI5fqkudKNtfJkg68jAz4STq0xXHEOXnMeOq7fxPz2UslZesQ

• Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirbs2h3QyfDG1ChFBHv8CQNwf9JrDdDWLaZ0AZ2WTiJrsjmmeQUXSFc8FM4OvPgxDig-z2H1Di7OMqCC0mHbicAvDw6TGF-1jWihJ458GYQBKznb3VOehl

• ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWjz4Sgp8xNXyO8juw5bycoRamRay35GLzSBPG3I3UWyuUovp8-qM8hMgxWiqIwW45q1cb17EkWhEYmP8ODPyhUTk1j7P2T92fjAWR1WKleVJsywM7kzon

• Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdJCaF3dwhncVhtSdn9W8CUCwJSHRmtCVTK5fXnS6RpDI4GaVTcSVoXvmoJgxUyd-H5G3yQaRAg3AhpDMlq-M5r9ejhJTdk5QlVuv16HVXDWV7e3HJAijA

• BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjs7TSABeFdGk4U17Tg0v-H9ZK2WmPIZ9AtmxJGCtw24Naxa7eEdlvW-eR8yl9NNCAzrMkOCKqSjsdJmAMhuXOq9rHSCE3tNWvTGBe209fpCqn7wVRpUgQ4

• DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCfK-jqRTN8rgDTTIOMahlXeGbBvgMLQqdUc4pcB1eXYGmbMfvzVLohoakIuE6nlS9k2G8ncIMwgaYcfLN1r90Obxd8IDHGo5UVz-iDNkBaEbzcDMJl5yz

• Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIGAlXgFCqm8atTeHpWBiCWISmrPOazxOVBMF-YNrP2goBbW4PSwGzw1Ndyue4qrnQnqrQyAR4DTaAdaiJPlVUZi7Miceb4fqofWK0sGRLO9CHnj0lngtx

• Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPhJ6dzEL23Ak57nAXsbXtGaxl5wNrcGBPMQBVz1jddDuXoTndpQjl3omqMxhRnQ1P4cSF7Ut18tccLFT2BxngpYTqTP8Kg6f4clFWRQ2GvxetR-uAGjMS

• Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbnnosl5g9tfmBH7efqHHPJs-C6Ti9zjG9iifZXs0QLLoUn7L1BwkunpqbD55rRvqSiJx0RDTAl12TBnL9MN0DkDtzhwnm8Xgbsbu8LZuKyRDnVtq3cbeM

• ShinyHunters Claims Ernst & Young Hack

  The infamous ShinyHunters extortion group has claimed responsibility for the recently disclosed Ernst & Young (EY) data breach. Earlier this month, the professional services giant

• Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOpdosdOAoAjpR73DY5i8YN9dHOY7KsBws53ivjlY3iVg0-EZAO6CliWbdg61hT6eI9Im9aiHc312ttIHamIl4IIxe2omPSWjC4OaCfbNKZC7Gr85jXs12

• Dozens of Minnesota Water Utilities Targeted in Coordinated OT Attacks

  State and federal agencies are conducting an investigation after a coordinated cyberattack hit operational technology (OT) systems at dozens of water utilities in Minnesota. Accord

• New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjm9I3aoAsUS5yCtKTvSX6LYxjKfJu-RShA1QmcUiBLu760VFfeqd6D4NfH3ttKHoQkfWT57oL04KJBovY7nshgiGQ4R5wimWh-2k48f9qjdlJtjKqK0oM5

• JFrog Zero-Days Exploited in OpenAI-Hugging Face Hack

  A JFrog zero-day vulnerability was at the core of the recently disclosed OpenAI-Hugging Face hack, OpenAI has confirmed. The incident was disclosed on July 16, when Hugging Face sa

• OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqsDw-FCPzIqHGCkBZgDD96kt0ZtwQzjSe3SOunA8WWGUTXqCB2FG28DY0JgdD6zh07gHisKrTi2Wh5VVNAcoUMyJ9tZVGzPM73iid2PPg15oqKMbnRhk9

• Spur Raises $200 Million for IP Intelligence Platform

  IP intelligence and bot detection company Spur Intelligence announced it has received a $200 million investment from Insight Partners. Founded in 2017 and operating fully bootstrap

• Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIxqzUC231fexQTfY9VPvqP7FWVRurT9fbUUS3YMpMX2SRmJu9eXIlH7v6fnvqJGtirQwXJVjs1h-hbUM7j-R6DlfpW7M4kt28q9EoxMt7jJFjUjaAoVsu

• OpenAI’s Rogue AI Ventured Beyond Hugging Face

  New information has come to light following the investigations conducted by OpenAI and Hugging Face into the recent incident involving rogue AI models. The ML collaboration platfor

• Russia Charges Telegram Founder Pavel Durov With Aiding Terrorist Activity

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMUnFYtFjTBTc4gylDAEu-XkRP-crArKjOPCGhPhdX7S3Of7UKlVyAbHVb9CyAStiVaXJkXjUgXssYTKSJNnQvJvxdndiL69NGa-2lhE6GJCBFp0qMshbq

• US, Australia Release OT Isolation Guidance for Critical Infrastructure 

  The US cybersecurity agency CISA and Australia’s Cyber Security Centre (ACSC) have published joint guidance detailing how critical infrastructure (CI) organizations can isolate vit

• 73% of Organizations Say They Are Not Fully Ready for a Major Cyberattack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixbolkSzPCaqy94Mm27YfEsvVeyY94SOG5BrCQCGtAe-QenE0qDM5Tkbb7eOy0PwSCECFGMrZ7IG7lVePoMWjqMn8s7-5r8JUSQ7WVHsHAo-zZIhyphenh

• Critical VM Escape Vulnerability Patched in VMware ESXi

  Broadcom published a new security advisory on Wednesday, informing VMware product users that patches are available for several vulnerabilities affecting ESXi, vCenter, Workstation,

• Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOwFIxqT8kRBNj9LdZBZhO1g2RPJwUttxQosrSmPoNXkIR-JB-yM87HPzuPZ1tazourGhRg9Sco6YQEGZkC77DSqXBYjp0DkNDAUHOaAOnIisRYNPAQfNW

• Critical VMware Flaws Allow Attackers to Bypass Authentication and Gain Access to the System

  Broadcom has released a critical security advisory, VMSA-2026-0006, addressing multiple high-impact vulnerabilities across core VMware virtualization platforms, including vCenter,

• ThreatLocker Raises $190 Million in Series F Funding

  Florida-based zero trust security company ThreatLocker announced on Wednesday that it has raised $190 million in a Series F funding round. The company previously raised $20 million

• Mythos Asks the Right Question. It Doesn't Answer It.

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0mieQQ57yqCRvM0amMKsszEvpX9AK9C4fSA6fyD6rx9VpNdjgYpiFk2DAfSYT386yNTNuL1-ki2llALR-LXYw9r0p0nb2FZCnnP-u33sN2McktovTGN13

• AsyncAPI Malware Contains Modules to Steal GitHub, npm, Cloud and AI API Credentials

  A dangerous supply chain attack struck the AsyncAPI project on the npm registry, putting developers and automated build systems at risk. Attackers republished five package versions

• Mate Security Raises $35 Million for Agentic SOC

  AI-powered Security Operations Center (SOC) startup Mate Security has announced raising $35 million in a Series A funding round that brings the total raised by the company to over

• Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhD9hThKkBhl022O0TklhaF1JKxLj1RKJjnUgfHzzyuxctFOR0UIyUS0FH1No7KlXJHHmQwUKafQf0UYDm0g6v5RU0m1VS-7v-NtgBCW0OXsPhVeX-IAnlu

• Fake Recruiters Target Web3 Developers Through Trusted Bitbucket and npm Workflows

  A new wave of job scams is hitting Web3 developers who are simply looking for their next role. Attackers pose as recruiters, start friendly chats about interviews, and then steer c

• Houston City College Data Breach Exposes 832k Unique Student Email Addresses

  Houston City College has experienced a serious data breach that exposed sensitive personal information of approximately 832,000 unique students and alums. This incident is linked t

• Russia Charges Telegram CEO Pavel Durov With Aiding Terrorism, Issues Arrest Warrant

  Russia’s Federal Security Service (FSB) has formally charged Telegram founder and CEO Pavel Durov with aiding terrorism and issued a warrant for his arrest, escalating a long-runni

• Revolut Alleged Data Breach – Hackers Claiming to Access Over 75 Million Users’ Records

  Revolut is currently under scrutiny after hackers claimed to be selling a database containing records of more than 75 million users. However, the company asserts that it has found

• Hackers Can Hijack Tor Browser Users Through a Single Malicious Web Page

  A single malicious webpage is enough to compromise Tor Browser users running an unpatched build, following newly disclosed research into CVE-2026-10702. The flaw, a high-severity F

• US Bans Foreign-Made Humanoid Robots, Targeting China Over National Security

  The U.S. Federal Communications Commission is banning imports of new foreign-made humanoid robots and power inverters, citing national security risks, in a move that targets China.

• Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2Bq6dazLT-P0v4T1DEwFJ86iFFR6sRJnNqjoFBKPVc0FuCvvys-WCkQjT86mHuwxsDuEpBBb1y8sOyqqFu7Smth-4YGfw7tTawHxUD9RxGs2DzauQCJXc

• Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities

  Las Vegas, USA, July 29th, 2026, CyberNewswire Catches rogue AI agents – and stops them in live production before they cause damage Sweet Security, the proactive runtime enforcemen

• Hijacked Joyfill npm Packages Deploy Worm-Like RAT and Steal Developer Credentials

  A fresh supply chain scare hit software teams after attackers slipped malware into trusted open source libraries. On July 28, 2026, malicious beta builds of two Joyfill packages ap

• Russian Intelligence Hackers Phish Signal Backup Keys to Hijack Accounts and Messages

  Russian intelligence-linked hackers are trying to seize Signal accounts by posing as support staff and asking targets for backup recovery keys. The campaign targets people with acc

• CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiH4zKTZLk6DVXZEKWwF1k02-iDwrNY9MH7zrXsotEBf9m7-qvQkAbfTvW5YQyBVlVdSS3D40ky60KOzTABlPuPKEpDXwpnWO3eTtud33d8oxf54HilW5Eg

• Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRIN1sheAdScq7AX9pLc07esRzQ18-0vBJ7hz9DlVhggVAImXrhYMzxN0N6hJ2inDkBCnzRCXHR3Kv3I0QwyiVWkAMu7p949JSjgK611r48deMbrSN8iDD

• Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVdPXrvOB3xbf282jC7eawBsl-YwExczqZ471NiKOResjulD8TvOSelU5VGbgoHqVhNLaigBkE2N50AFtSqbOoXUQTtxgIHO05jYpTn5VyG4BPhlr1Cbsc

• Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7ke659Oiks4UyEwQJsTV2c-8DaJnDPNG3RKPsk3sCLYO5yvD-SdtGebpYlDbDkXFt2iW4qgZHhM4Tfp2FV5RJSc3f85Ap4KQP-RI1BM8MCPbYhgSD5uus

• GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFpE4BZgV3wILI8fonm9742zR85yLmBdM2ExXv-uTUS1StV04ZlNVVIwV6FjjhYLZUAFk-DAIInwp3mlXa2W2xekDAEqSl1UiHrKCgocsjhVAKlvCD48Qn

• TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikuWOQRYm6WQ1zHmOlYkI7jlVOUUKGBIlo68iWyUVuaZ5n3i7ODu8DYpntAk2aGZQ7LsYpXpp5v0PcQMLxP8LQOajtKl-WaDBb7wDpo8P3-iCcAwr74JY4

• Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBorVFXLroQ9D9Ao8QPsDAQpmoMeD2ciyHIBw3YYRHLBLAeDIjFZ6V9lzrrtmNq3KrIRqHhJUfKAx2sXIsMYCjyFzRV9awIVSLOuujkMY8hOeUkaNlFgM4

• Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQ69OB4WwYj5rfCn7WOwEue0i4sxEuvzaqGj1v71E-W52Q6DDfFRKpesydsd2bD9QQVghes677fGD0S-PJpJQOz10JYsNV6wv5peadJtT-dbxFzl7eMqaa

• n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeKRvflcncQ0UoJ9jitnqLM9fezomqM-liKMmU5fccI5lOaWwgmRYtpHiYQinkYD1fRUCH-wksW6bq8rWMMbKj3cdvaQ-GhACcUvcxCnZuzdkadQkIjZUU

• ⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZShQJv7u2hWKu7xOJWw1-8rjxg7jwXoaFDJqqKPTzPa2-u608uDuuxZ4fn2DmullQ7Kkx6YUIbjK0cKuZNxaQuirr5icArrmvx70FFuvnWkrxulAHi-ch

• Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhy6sn1o691sSAfGgdjo965YlKkz8ky30drnmHXJz3Y5wO6grXeyoDFvZGYeU-TS4IbxJUtrpqOyZ2ropf7JAd-KpV6yYgQFo8YUREleUm2A39nchCOv8yd

• Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIg3DnKkxpBnQZhAB8v4Wb9FDnDuh3ifKpBMF3kFhNr7lYOk3S4CgvBoOxFD65FlCjRpoaoBNyH8zo8NtOhjTtTWriXHawlL9mndT3fd7zlhUBU4mhjU4A

• NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEij-O7sLARD9c2QGCheTeoamew1jlKiNe2KRKqw48f6VTxZo0MHNIQdizHhyphenhyphen-Bchq9tTzlYBJrJcJDhhhzNB17wPMHDT00pAikN61fAgOh7Ad

• Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day

  Arista Networks on Monday released patches for a critical-severity OS injection vulnerability in the VeloCloud Orchestrator (VCO) centralized management platform, warning that it h

• Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRqy6Y9a8XU8InktsbP7Op6N-6ZSvEQl0MJ2PL6gds2ij5aL2vZHlW3sgsqtQQCY47wAO4RxIqqSUkQ7kXeXbhzEJe0g9VCbkC9pwEcGqKybszrRurMZQP

• Unpatched Fastjson Vulnerability Exploited in Attacks

  Threat actors have been exploiting a critical-severity remote code execution (RCE) vulnerability in Fastjson, security researchers warn. A popular JSON processing library for Java,

• Microsoft Says New Cybersecurity AI Model Helps MDASH Score 95.95% at Half the Cost

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwmG858LYHQA-u4cQupdhqsi5oUcvLaQdoorupsW3tzPZvDg7kwgRIewOBPVNvp3Szfqb4VFJj6caul2NTIlm69-vskp4gYQwVkQA59LbsMhOEO3yr4C48

• Google Adopts New Threat Actor Naming System

  Google has announced that Google Threat Intelligence Group (GTIG) is adopting a new cryptonym-based naming convention for tracking threat actors. According to the internet giant, t

• Hush Security Raises $30 Million for AI Agent Governance

  Cybersecurity startup Hush Security today announced raising $30 million in a Series A funding round that brings the total raised by the company to $41 million. The fresh investment

• Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgBRFXQr7hvRBIkSC-vqaka7UlRsU8Y380TbDC3jFpFlSlCK1RuVthJDLKt5KaNzAn82kMBNUWPp5s1Voug8ptjn0DiHoxbzw9QdoKXhFfR9SR9zCm1uYe

• Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiX3xcF2Bm9BY5obe-T5JItuKynq8bPijOxp14p5damNEjPGtAbYyuLSqp6vKNKkhPx1qYeTXHxpgnZllCrtLvDaDuJNyHpY1qV0i8KWCe79bnFtBtTRPC

• Act Security Emerges from Stealth to Fight the Patch Problem

  Keeping pace with new CVEs resulting from AI vulnerability discovery is a constant and losing battle. Founded in 2025, Tel-Aviv Israel based Act Security has emerged from stealth w

• Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-Whbx97t7xBrrpM26fYSbwg29hdKR8zskNLIwlrWC0Jd3Rrf4INhiCTI3WMw8NzmJ1iETQlt-CKdUxBzL2hef4pgQBOoI1rrrtRbU96hJRUXtTGy5dT40

• Hacker Conversations: Tal Kollander’s Journey From Black Hat to Hack Blocker

  Tal Kollander’s history divides neatly into two halves: first as an active hacker and then as the block that stops hacks. Based in Tel Aviv, Israel, Tal Kollander has the mindset o

• Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDmz4Rv-IWcHYP4Y-WINLECGsPviBOTJXEPhvz2mO671s8c1Rao7iErkNghWYtomczRf82scnXyzrBTAIc4urvwSlv3j4AK1XaEw75WVsIfXLfNDQd1JGU

• Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model 

  Microsoft has unveiled its first cybersecurity AI model, MAI-Cyber-1-Flash, which the company claims got significantly better results in finding vulnerabilities than its main compe

• JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiVRTEATuhKwW2BlflaNjqHVV9mJlq6m3rFzsUHv3RXATsLWdyJvG-XoWDftscxMF9r-551JELumQMj7JhpiY-GTj79r3RxYKEEJkPo8B7Zd5SuiBnPRWjM

• 24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIZDJmL5vHIaEgakZEwVC-O1KGBidMz7xrUS6MQmj0Nfqx4WzGlwmz4amGxIwYa2PEJTKr5UsFwkh8lEOoFkjAVwTm38bgmbcgDW2-9MBpP5Z6cWQrIjFT

• OT Security Startup Frenos Raises $1.52 Million

  AI-native OT security startup Frenos today announced raising $1.52 million in a seed funding round extension that brings the total raised by the company to $6.4 million. The new in

• Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0zv7PihU6xAba7-fb5OY-Xv5YIEPM1HhmCu2ET65l5TSKYrPh6q4pYVQRNJtHb9RkvO1oNsBBrsxs50HmGRnPKCu4XoG1hhtPOoeGILfRHN99ICGSO72N

• Apple Patches 87 Vulnerabilities in iOS, 155 in macOS Tahoe

  Apple announced on Monday that it has released patches for dozens of vulnerabilities discovered recently in its operating systems. The company patched 87 vulnerabilities with the r

• Cyera Acquiring Oasis Security in $1 Billion Deal

  Data security company Cyera announced on Tuesday that it has entered into an agreement to acquire agentic access management provider Oasis Security. Cyera confirmed to SecurityWeek

• Researchers Say a ‘Ghost’ Chinese Company Built the Network Hiding PLA Cyberattacks

  A little-known Chinese company may have helped build the hidden network used to support military-linked cyber operations around the world. Researchers say Guangdong Chanming, a fir

• AI-Assisted Research Uncovers Linux Kernel Zero-Day Enabling Root Privilege Escalation

  A serious Linux kernel zero-day vulnerability capable of local privilege escalation (LPE) has been uncovered by security researchers, underscoring both the growing role of artifici

• Hackers Are Using Fake Crypto Wallet Screens to Steal Recovery Phrases and Browser Sessions

  Criminals are using convincing cryptocurrency wallet screens and browser extensions to steal recovery phrases, login data, and active browser sessions. The activity is linked to a

• Dismantled Kratos Phishing Kits Acting as Blueprint for Others to Attack Microsoft 365 Users

  Kratos is a phishing service built to steal Microsoft 365 credentials at scale. It evolved from the Sneaky2FA kit and gave affiliates ready-made login pages, hosting options, and e

• An SOC Story of Why Fast Answers Beat Perfect Answers in Cyber Incident Response 

  A Formula 1 pit crew doesn’t wait until every sensor, camera, and engineer agrees that a tire needs changing. They have a few seconds to make a decision using the best evidence ava

• Origin Confirms Data Breach – Hackers Accessed 900,000 Customers’ Data

  Origin Energy, an Australian energy provider, has confirmed that unauthorized access to customer information has affected approximately 900,000 current and former customers. The co

• Hackers Exploiting FastJson RCE 0-Day in the Wild to Attack US-based Organizations

  A critical vulnerability in FastJson, identified as CVE-2026-16723, is being exploited against organizations in the United States, putting Java applications that process untrusted

• Fake Claude Code Install Guide Uses Google Ads to Deliver MacSync Infostealer

  Fake Google Ads are being used to push a convincing Claude Code installation guide that delivers the MacSync infostealer to macOS users. The campaign turns an ordinary developer se

• Apple iOS 26.6 Fixes Flaws Enabling Kernel Code Execution, Root Access and Sandbox Escape

  Apple has released iOS 26.6 and iPadOS 26.6 to address a significant number of security vulnerabilities, including flaws that could allow malicious applications to execute code wit

• Aembit Joins Snowflake to Tackle AI’s Next Security Frontier: Trusted Agent Interoperability

  Silver Spring, MD, USA, July 28th, 2026, CyberNewswire To reduce identity risk when third-party AI agents access business systems, Aembit is launching a new integration with Snowfl

• Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgs80SEcGa8Q18LOUd4Y3fWiWZRh6MOX6U3LhAyAVVewqJVSd1cq2bgepE2vS0eg9qvr0iM1JOYnYd9GPDQ-LZiTP4-J8oEpZjAMc2ivQ9QiNTMbf1BYONS

• Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0BbJcQ3TUJxFvOCpAChyC5saD3RGgDCtLtVG-Wupee7poBksO2TzSWFtzQmjjoXuZ-9hnCNR3HuWdSsBv7YZl477fdOcjoOBh72RY4vJ9R0hxUWktV2R7

• Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihuE5rUYRadx5Q2auJjv9dVeFNIP8XSwSTaH0PDwGLUA54MXlPy3AyI532a8OnhXadtWnCCH30qvUKW9C3rCOu1LPld1or5lXwNhRVqbohHNInDzNd1f9E

• Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTNxzPo9jxkW3GuuZLBgtPOrG3vZ3va6E710jDJuJF0jCpyQ1JTpymdVwdSH2VHL6-Ib6YLInvKsuNwgFJxna1nvDhwKMZhycTik5OgQniZei2FQ59-F3s

• URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgULXOG2Ph1198nw2lOea2pYE9u1GkPHaaMlzhpO48pOmejpWKFuHbchUac5JIRQHGiIMMTefXq-LktA8AjsqqMIsBS54bLaludxIJbq7chYfoVsoqf9Xi7

• Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirVz95zYTg61VRro9unfJCWWwwUrv3pQdtyNT7rPL8iCg6n0S6bky4dqPiluQHfSvQMIO9cyYgrz-07ZCx8yGqNDJ9XJ0BoUON9p3zj0etafNvjg45txAe

• Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimRVwRIhs54UhNHyRll9YzVxICmTpgqwjAK1Sy7vYt6FAzb9oImcFpuM0J8dOWdtdjCdlROkternhP9r5jZD9HNvwVwcyRzhesdYgbVjUpJk7p4rxDDJSd

• Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhodiWPXDsex6YL7v4e2nD5MJFMht76GRRmHTdiG61tfEmsoZyow4tkiS3ORACILDl2fNP27YQkw1XLSBKGcom-DhCVzzPDdkdSgeMGdxcVLrgO70x5LqZc

• iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8FM8eXCuapKSUef3nzFlgzqlX4a5mJChM9YqCdHOi6QybQ8AM1xbM9NNTyAjS3iyz7iAX6vC8QVHl5zFlAgNyBIgm5FHgFkEGzOg5l3ZXNXI8ILA2GIGK

• Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVh0XoiKxyvhXWSN-Ynau8iPG3vd2ltt4cDr4LcGUhc5oBmsogZt5Al2qbTdPG8Ciu73I0mHhRBDRJ2uWasrAvqnkdvpbQcdh0ipe-dcz2HTFJWOCBNxpl

• Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh43TJKqVkJoN7Q3donw2FnXp1IrJEr6vvDteFOBCSR-PptAc8fMXXCq07kvKWoDacCHo6gi5-eUoX9mIBHggv-KXsoH31yBi0-MZBjxYbiYNlhvAu8Vxhj

• Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgV-KJeaayQ7Le5oAYYddL3LmP0k3zaJOoLo9puHLF8yfVAoBUcJba3ZyyCfJWdvvMBQTtx0v8iggR1HfDgXOO1b5CD1xZUVr03ZnoO1moKSeA9iNhOsPoL

• Meta Files Patent for AI That Can Listen All Day and Track How You're Feeling

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiElxdOUOnt8DZ-78o4IBYmmieJL3gm-RPGxQYpkPhzk8o-kMGbWAGAHjVzPbVEGnkPmhF80RlbaRmvtgVLfABQSKApl6fsQ2RkhkWuZsxF9WR-HnsthElb

• Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlR-dy6ENZN5NKa1sViQqXH6fEfEROkwjKV9vTowPmCunOALJ89JzGg-ueVJMCAqDHHozMZGd8oWbIlAQDTI8anEd6A2ZK0MdBNFiShR3UoHGL6Cf0Gbhv

• New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgpk3JKY3zis-iTRVKpcttwfy-GP-gEzPENQQpqDEaMvVs65uqa3vdG7pDDmZWLHcwBQzjFtTYqob5wWSgO2F-0-KkwZaahqTUpGP1xbvyifaf2UnMDzI8j

• ⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuCIplQpj7CGra4jEeX4qO6DfR9OazwLc55clD60cy9pWK42qAsCmqrwe0YBUmPq0cg6Gt52VlqoOGuigf4qwI8lazIdogbl8pjBDfprTbktGn96fxMbtC

• Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSvBtzUXyAbjgtvPJVS9zZ29ULkaIs0fMMa53ZKSip2pJbZ7HMTGn3SV27X28JLwaq9atS1BjvH7qgfsjW0wyVDVjGyqFSyO-zvHuoigCy14xfb7DKuuWG

• CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhbZ5yNN1gA3Yzt-6i1sekVk3AFnHGEpas31-UowjFTXB9Rj4DhkS8H4cqjr655w9HCDKZIzcRAqn1NvLSmPLs-oDDYpCteWgGlkUIpuyMkPIeXnfgxKCYR

• Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgu2gmOSckwOqmlhqAYdrlHfRuTsOJIi7dr9cFZosLQAJeoJxcUVQ9PvibcfnCsBdPWvfJRRrxoS8nx9yTt9NtDNCwVCFavEt7tQT0viD7AwGvUjhu-k0B2

• 148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

  DDoS Botnet A campaign of 148 npm packages disguised as student web proxies turned visitors' browsers into a distributed denial-of-service botnet for roughly two weeks in May, acco

• U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhseKXQcobfKfQC4K6ja7LMDD4ntr9cnmn88cEPY7jw6wbmiy0p0xup5NyNrvKHvN4gm2Y1gT4P9knFV0ogJEsN6hQ0Dal0xqZgWMNW0mHfrUtnxDkm0FjI

• Grok Build Uploaded Entire Git Repositories to xAI Storage, Not Just Files It Read

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCYpkCY1h-DxV5yfxpkGspVFATaUS27qvpRgQ2ebzGvc6YgSsYk81jDt3SkJQgxVCL8dWJqzDE3t6iUt4ceeTvA9LG8Z9cA65uBXC05Lkdv1xKLNBMH88d

• OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmB1bLC9cna7xlnvFdK0hUnsi8jeo6E7jMh20nj4XTvsF9ogpjbnlPCxx9QYQ1O2aS7JiSDQi4swIRNG6-Xjg2TGR4bn4Zn-KBkjsLTYcKUrXOD-rlGu4X

• How Pentera Turns AI Security Workflows into Validation Engines

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBkjrecx65rZWCn-e7KyG-ScNo2HupwMwFl9-XIOcdW1Pls-d0g80WyhkIHPCHTszjYDoUBtmpVystgF4Lc6znoxysLX2xs11QU1jNALxkVa8gW6QkevNL

• Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLw92quWqf4LGudVaNPBRwhiCIP4ZEBpolIRqMKbQuG6hzrXUSx89QCQT1IjMWF6v7GEkYGOi0kYoc-ESfELZm6pg1P8lVpRxv5mYmpzAHQMm6AXCfXWSW

• 11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzgVI5ZeWhnWkl-lXmJYMLjAOXmxw21Y3sgxeF9rrOSJqjQ7kyyV2KUELhmsm3nA3qNV0farc31WCAhPPZRq7iIrYm90R24lvc1f68Gv-yZPsM3bwDiUuC

• RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhhRQ9rN45eYqXiJ7svWKwWY0dcPiiALZ6EkDG05ruFzTANJtwyww2Ht29dON1oFiLAkQkE0M75FYExbXmvFSr4jU0K0sNlwRxG3Q1rU51ouVIt3Utnraz

• LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpSmSwv3hz6LMJIQCrVejpophE9XNTZyveEV1GctCyQMSNoacMx3CfmAHLgYkpDkymvscLLY71u2Kq-7z-7bDemSeKHryPVH3h7FNxw9e64D3jTeoLOzmW

• Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6dKqmptCkoLw0bB5PV9wa9zqqfMmsIU0yrc4vQ2FdIFYClQBeZyUifVSr4wny1umoGovVKP57bzeh3-8RjmK8VktgNy8TGTnkkw6Ua49L3xfWTn8Ks6ob

• SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9rN4ge3zuUmonccBl2yCAcOKiCQPKQFAV31BzB3DZk3JO7SxAjx1HdJlg1vBOMEj3cq2Mrg06ZU64I1fdkWCDRBsPhqpuyJwTxjbJHJXmzUoXF8KRDkup

• Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi34s9ywUXjSc5OtF7-fDiAqSa3H-UHpJfACXyULY5ziUlM67mCJHWee9tluTiGm7ZRhMy36SLal2CUjqwJHZ8vdHuFstRwJhPGLAXe49as-o3nRE-QAyRs

• Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0n94FUIdljCnLvlh0SNz5l8xDWbdDqmk7OesE7HAKxrRAMUMIfXpppuMBoI-7F0Q1PB7eXPRjrfg9fgZTTVj3JY5jKsr1Ebheb2mU65p4MUVYbs59lCPP

• Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXEluWW9TuNGlzu9wVHSDBzAeUuoRS9Om8kX9yzH-HwCjggh-N5ycLyuJ82oY3MP4Uvf9yFPqwKhcZepDBEHpOb3td4dPRuuGSWi5XndfpeuqiMipzKIq0

• Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyFnrtjbcXdDBTEYOhVnUpFO4CSqhCGj5xdvaYlhih4oUCd3phzBQTjjMogZeFDlYqTiO8Xt2jaHevba5peaV76dT417Vq9W-DZFSpu2cEbAMtGwz-mqKZ

• New Webinar: Closing the Approval Gap in AI-Era Ad Tech

  [](https://www.reflectiz.com/learning-hub/reflectiz-taboola-marketing-security-webinar/) A single approved marketing tag can quietly load fourth-party code your security team has n

• Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvtiVnhkF-YVsPEXyedqj9REY5pN1-KiSsf-rCeXK5yClGbAcsL1Tg7-9UDDA8VQg5RbM0uWkV23rDxqiFFIJ2RkpkY6cn90-5LPbZOC2oktF73FjD5LaF

• SASE Has An AI Blind Spot. Inspecting Packets Is No Longer Enough.

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgy5qXcxZFGTQiQ1Sb-SHAyKnjOmjdz1fA1FEFMLTVXd7Xcyr9aSptzafuOwTnzCkzHCqZCOV-ztPKKeoeS6Rd2kYWtALIWTRXFaZkr8V371LH2Rbq0JHlL

• Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMjCjGBZhkRcB4m5BQu0Fcn-Qjs1VPnfOlt3oFxu7CKMZ5Wc1JpvZEvhVSorBJW-AWV1pACLDkg4rFmCCcdH6vDk-pmD5ai0ZewlmPyeWPnfsmTcg-D3UJ

• OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwz558IbCLKi1RAJRcXtLnJrGR3xjXSXfBJHnREqKc0aTs9Ie67rKN6xRHDV4g6JNByEH5Vr-x-14HOK8dSKjB6HFn303OMiFrpr2wHf9PNUONqlUPn8Id

• TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmKa1OIdUu8LgLPgZkc9qbOTzhARf1dEJafzyVt7vvSzidHy3Lrb-2R4hs2ryt9b4Aq3zOnJRtWVuQ8KHKUZ5x9Iv6Q0vGTVMPxNMLTdGaNsquyrL18QXk

• Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day 

  Nightmare Eclipse, the disgruntled security researcher who has been dropping zero-day exploits targeting Microsoft products, released another unpatched Windows vulnerability this w

• Zoom Patches Critical Windows Flaw That Could Enable Account Takeover

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPR-qLKvfH8KZydz4DnqiB9bJDjgFi6KdfrbbCHNkywiDcR1SILe12UqjuyM1yQXEDBok-ZeYRX0hEjIZpx-Dz2hnIW2xXnwAqrmA3voWWfGvnGMavgE4-

• Old UEFI Shims Expose Systems to Secure Boot Bypass

  Nearly a dozen Unified Extensible Firmware Interface (UEFI) shim bootloaders signed by Microsoft allow attackers to bypass Secure Boot protections, ESET warns. Small, trusted piece

• OpenAI’s GPT-Red Automates Prompt Injection Testing to Harden GPT-5.6 Sol

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSi9EGhWziKlNlaSAnaOE4OjgZ5pyqoajOxDz4zEQl77NDSFPf8ME6wfKfrmrTWhLy9jDR1wvmVb7gd5JLhyszunIomhOnyyHKuTfvBCjb8vGypAPXbQzT

• China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans

  China’s military procurement system has suspended or permanently barred more than a dozen of the country’s leading cybersecurity vendors since 2024, according to new research from

• Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5tbAe6HgEiYpwgRNJ04jo1HJPV3INByd4ggz2t4hdCa4u2zkCBimnzDZt7V-p208q7-BfaHSmR5aXg6VvnnThfnc9UX8oP0hnRa6rP1JVgKka-D76BpYU

• F5 Patches Multiple NGINX, BIG-IP Vulnerabilities

  F5 on Wednesday announced an out-of-band security rollout that patches eight vulnerabilities in NGINX and BIG-IP. The most severe flaw is CVE-2026-42533 (CVSS score of 9.2), a crit

• AI Can Find Bugs, But Human Knowledge Still Proves Them

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfFHlEVhBtz6htSsevgYmwuQZHGlEXKK9eqiOqgiXJ587449tNZfWR9y74kC9MfZ6CDSPx6IBloYogs0PBSeynORkAZsD6825INUqoJaIMwtAbBVkve-A8

• Splunk, Zoom Patch Critical Vulnerabilities

  Splunk and Zoom this week announced patches for multiple vulnerabilities across their products, including several critical and high-severity security defects. Only three of the fiv

• Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoN2-EflBc7bABKWw8GsIFE9I7A9Ond88d-yFCAc6t850C9RGNxpGFAP3G9NichaP7JHaBA-4bsMDNze5837hGCFGuAbyEHPVsxmQgMNS9A8e1jFL19Z1M

• Oak Emerges From Stealth Mode With $60 Million in Funding

  Israeli cybersecurity startup Oak has emerged from stealth mode with $60 million in seed funding to build an AI-powered Identity Operating System. The investment round was co-led b

• New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiapJDNa0fN3WsyrkYjRiRo3L8tqmERJm9AmQV5KO9p5To-PBWdVz7EW294xtn-VZtJ2xSscIq3LyqyxYkPG3R5TdJoPFaxjEaLpaXSqGHKuO274wM315GE

• ‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing

  A new macOS malware named ClickLock Stealer leverages social engineering and process killing to bypass the operating system’s protections and obtain valuable information from victi

• 20+ Hijacked Government Websites Became
an Attack Channel

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsIx6AmdT0f-NuPj2BLNRcSaOhWHf5pPdDuwR0eykvHCnOmoHUhq5Z2axM2GJX9gX5A3FlesfKuynGTsj012HNIJZURuZ8S7uCfa7cSXIZDWC1donHjiQb

• AI Data Centers Are Being Built Faster Than They Can Be Secured

  The use and reliance on AI is the biggest single growth area in technology. But AI is enormously energy-intensive and requires a new quality of data center. The demand is fueling r

• New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4iNrh8DJbIsaAsGTCFlS4kGWAwdRNMghQm9-o8MV8X2txyJ4iTH1P4g7v5sdjuhw9dOeozn9Q6GenUi4wxBTw9uyoJ1D2j5WIcwCWuTk5XEVyGqjAg4jm

• Two Scattered Spider Hackers Sentenced to Jail in UK

  Two members of the Scattered Spider cybercrime group have been sentenced to jail in the United Kingdom, the country’s National Crime Agency (NCA) announced on Thursday. Thalha Juba

• New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv5Rn7Ccyaz1UqogtcMmy8m09NuHcnSuylWjVMecOfxDKbvUAt4FnqKIJp4uZUcOPUmnYGIywea1nJG-yiSqcQbPC-ULonG5US-gEbUnkEHbGN3cVnQdkq

• Legacy Systems, Real-World Impacts: The Reality of OT Security

  I’m here today to write about one particularly thorny area of operational technology (OT) and security that I run into somewhat routinely. Given my own particular interests as an i

• n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1Pvezsft8WXzYy1Lw3zKDZrkf0TNZfj95rzTnuQgzbJuztRDNDFK35ahO9UfhNJOicjjuzyZGFCtCidBl8vgNdw4kzfeYFo6LwUur66S5qUTO2Bl3WVLw

• ⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8B3KNTIZROmtfiYkIEINzg34cq-I4prGGMjQ8F8oHbOcrNNB0FyCuQq-bb9ChCEtkO5TxGqm5YRrG7r3IJAkcsXeC3vmpR1Va-b3NOfEQynjPDmOm2AuJ

• KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZKxsveHlyTguEODsRiYVuCPiOkIgyd3imCYdnpwwV2NQ0pw9oPEQoVw-2T98HW0KgZvRqQzeZIT-4E3b6WH6hE-fxJeZ9YN2S9T5769SS11QP-Pf8E1kf

• Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoning

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhL7Xqq7FlHxai3-wKrWcUujSg4cXnMJ0LiXDaZHaZosFt3sPF1PwcaqufOoM7q66vakQyKX5-odysTHOhtIG7ESj52Kna0i3OxaOA0sTONuH3NhkmautF8

• FBI: Hackers Sending Operatives in Person to Insert USB Drives and Steal Data

  The infamous extortion gang Silent Ransom Group (SRG) has been impersonating IT support in a fresh campaign targeting law firms, the FBI warns. Active since at least 2022, SRG has

• CERT-In Recommends 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9yN2AliOVdy0oCCMNYXnnrLjE6yWRzeXVGFhiIw9vxnia2BMUxqhMrI8Q23Y2hHcF-hjqbw4aIqJTvO4zDD1kWlKzEqxFZ7P45mn8RiQ1UEqNUgqXv4Dq

• GitLab Suspends Windows Exploit Researcher Nightmare-Eclipse After GitHub Ban

  The anonymous researcher known as Nightmare-Eclipse has been blocked from two major code-hosting platforms in less than a week, as their disruptive public zero-day campaign against

• LA Metro Cyberattack Linked to Iranian State-Sponsored Hackers

  The recent disruptive cyberattack that targeted the Los Angeles public transportation system has been linked to the Iranian government. The Los Angeles County Metropolitan Transpor

• MFA Prompt Bombing: Why Your Second Factor Isn't Saving You

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtums9LZoPXx5AzbNIYmdrNPI6vAAWAnYGfW6NzZ4DkICva0wX2GjMPvmYoq4EVuhvWUc6FyLrgJJ0Hvh8w0TBJ4MLkQplbffUwg89oiQxoJhV-93mboD0

• New 0-Click WhatsApp Account Takeover Attack Targeting iOS 16 Users

  A new 0-Click WhatsApp Account Takeover Attack Targeting iOS 16 Users is raising serious concerns after multiple iPhone users reported their accounts being hijacked without any int

• GlassWorm Botnet Disrupted

  The GlassWorm botnet that has been targeting the open source software ecosystem for over six months has been disrupted, cybersecurity firm CrowdStrike reports. Together with Google

• Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi34meakbjhvY3-jNVG7Q8tPJ5Xk1a-vtGSeKgfVDApX6pn88G7gYhK2oz34my6QeWHsldmSJuV4o8tlBOmw-9Ul32EJYhC-aFmExZvn6ibinw104DhBf6p

• Attackers Abuse Open RDP Ports to Gain Initial Access Into Business Networks

  There is a decades-old misconfiguration sitting quietly inside countless business networks, and attackers are still making full use of it. Remote Desktop Protocol, or RDP, allows u

• ‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery Systems

  Trust and automation are key to many attacks; and trust with automation is inherent in the use of AI coding agents. Malicious repositories are a frequent factor in many supply chai

• [THN Webinar] New AI DDoS Attacks Are Smarter. Learn How to Fight Back

  [](https://thehacker.news/ai-ddos-attacks?source=article) Every single day, hackers are finding new ways to crash websites and steal data. But right now, something has changed. Hac

• Developer-Targeting Glassworm Malware Abuses npm, PyPI, OpenVSX, and GitHub

  A dangerous malware campaign known as Glassworm has been spreading through the tools that software developers trust most every day. By abusing popular platforms like npm, PyPI, Ope

• The Credential Crisis: How Stolen Credentials Defeat Modern Security

  Preventing credential compromise and surviving compromised credentials is not theoretically impossible but is difficult in practice and shows no sign of getting easier. Credentials

• MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkb692n4xA8jDUKZCkwPSIXqiyTaEkbQhrNaZj33tRhusSP40-iwlk5x7iblb9M63WKWVbj8Gm6oPJZY3bm602-qFyLLnRXuCKsl40iAZG5-ehqlQ4CYaO

• Apple’s New Anti-Snatching Feature Will Auto-Lock iPhones When Stolen From Your Hand

  Apple is reportedly developing a new iPhone security feature designed to automatically lock the device the moment it detects a theft-in-progress, a significant upgrade to the compa

• Lastwall Raises $11.5 Million for Quantum-Resilient Identity Platform

  Identity security and quantum resilience company Lastwall announced on Wednesday that it has raised $11.5 million (C$16 million) in a Series A extension round to accelerate its exp

• AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqt5LC8yrEqRzxRxEUTh3yZSnXovvZU0R11suWWfP1FEKvC5ZOpPnLHpdDjAzUADZarX1C3XucsG5OOXN3Zj4-esPhUnz4DBnAdDxkZw3aEqdHHHPn4N5E

• Hackers Abuse Trusted Google Domains to Hide Phishing Links From Email Gateways

  Phishing attacks are nothing new, but attackers keep finding smarter ways to stay one step ahead of security tools. The latest campaign doing the rounds is a stark reminder that tr

• Romanian Hacker Sentenced to Prison in US for Selling Access to State Network

  A Romanian national has been sentenced to prison in the United States after he admitted to selling access to an Oregon state network. The hacker is 45-year-old Catalin Dragomir. He

• Gitea Vulnerability Exposes Private Container Images without Authentication

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtYSLWixSGb7jW2drND6NlHzXB4eHO0QyZNOovK9iVyaHGS6fSN4eqhWkijIhevhInH56hv03c29ziWCZiH58kY5EBbfuZloLfMP9yGJuFVtIaoJqj31KV

• ROADtools Misused in Cloud Attacks to Steal Tokens and Bypass MFA Controls

  A well-known open-source security framework called ROADtools has been turned against the organizations it was originally built to protect. Once a legitimate red-teaming tool, attac

• 3 SOC Steps that Shut Down Incident Risks Early

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5SbPsI2Ip2s2JkLJSNNO05Qfn3zFQTpOSmRmqTreVUxDWTgZXSUgEtIwEvu5bQ8wGM24s68ikCnVLdKujVhF8j-TxTM5lr38lAdKkEummRkZxVnB5P1CQ

• RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software Binaries

  Cybersecurity startup RevEng.AI today announced raising $15 million in a Series A funding round that brings the total raised by the company to $19.5 million. The investment round w

• Seedworm APT Abuses Signed Fortemedia and SentinelOne Binaries for DLL Sideloading

  A well-known Iran-linked hacking group has been caught running a far-reaching espionage campaign that touched at least nine organizations across nine countries and four continents

• GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZssmtsAQM7Hi8SpkOQnmc9tKVqlTyjMclOptRmn45cDzz3KANdtBi4xzzuf7neoeylx39D4BZNWys34O8lCM9KP8qytxEqQT4tQFTHBeRV75qVTNfzQg7

• SecurityWeek to Host AI Risk Summit August 11-12 at the Ritz-Carlton, Half Moon Bay

  SecurityWeek will host the 2026 Artificial Intelligence (AI) Risk Summit August 11-12, 2026, at the Ritz-Carlton in Half Moon Bay, CA. Now in its third year, the AI Risk Summit is

• Link11 is fully committed to Europe and is opening a Customer Excellence Hub in Lisbon

  Frankfurt am Main, Germany, May 27th, 2026, CyberNewswire Link11, a European provider of cloud-based IT security solutions specializing in network and web application security, is

• 5 Steps to Managing Shadow AI Tools Without Slowing Down Employees

  [](https://www.adaptivesecurity.com/blog/managing-shadow-it-tools-without-slowing-down-employees?utmsource=thidparty&utmmedium=newsletter&utmcampaign=202605NAthehackernewsorganicar

• Windows Kernel Vulnerability Allows Attackers to Modify Kernel Memory Counters

  A critical Windows kernel vulnerability, tracked as CVE-2026-40369, has been disclosed, enabling attackers to achieve full SYSTEM-level privilege escalation even from the most rest

• Vulnerability in Popular Conference Software Granted Attackers a 100% Talk Acceptance Rate

  Researchers at Novee Security have disclosed a high-severity vulnerability in Pretalx, an open source platform that powers the call-for-papers (CFP) and scheduling processes for ma

• Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNcCJY0s2GwOwFeSuqVz941pWrGK3theum-FBFyYO97JnK22OamMheCtr9yEEFfHMvurI7UBgl72blFK6Hm9u358g1V9HbZOk5vocuYMvgjfYLmf2XPNsS

• NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdFtAiSRukEdQXVvEzXdQKy0O9SY7RCuqFLuAEIBe4rECuQuUS76qEXnxPuEcKIIFUysRNOGdBW2Mf2n1sh1W35aU0nCksWiW7v-20p1K7RhdPPDnxKh7k

• Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulations

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEis3jEEpg3n4z5YYUwDaXETZ4KJGxCqjzrZMHUmpgvOCC7pxoSs6Rn9klL5REej9UUJJxIrOstlQDWjbTeAOUhJ7wFSoTvpLkOVx3hb5fKerxA6NkeNMDQ7

• Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhbN7WbW1cUkMzMJl0HPvRrQQUc5MQEE3Pvrc735aG7RGwpguum4POxa4yeQjyYIyiAYBDjZl6Ud8esex0AnQSG2J6TVWat57BLALA4WTi3gr5mfrLC2AHl

• MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvmx8dRRiQKx4cT0aT1-zTuzdjfThwxmlbzb2ikeeqIXUXGdcJhRrq4BykcdBB572URpoAHQhSTSyahR3M7TyvOsLSCekQGCUFM8sTcdsxkrpRFrT41wF8

• Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2iqd3uRuOdLaM83LyZC9GOeOLeP9BnBVQQQzF7LZUeBTXfGo6e6b9c7PSC0TktvhNFUFUiDwnLXXNmzpIubE5bI0rA7dRaDhuiV35uiNTcMab7o8E1ehn

• Developer Workstations Are Now Part of the Software Supply Chain

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjylLL25uQ3uU6RshKkTv9isR22Y6b4uJJ4koE1MqtmGs4IWdz88aH8up7WDxghA7-GeMbm6gpoKUXRw99Cm1ljO03H8bdcv91vvOch313eJAwtYH-CewZJ

• How to Reduce Phishing Exposure Before It Turns into Business Disruption

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiu4cbMji6f7O37Q6sBOEkOEXWMs7Eg4ixA0RdW8AiO6cIPai9yYqLTvVVkUH9ApXP8XycVeezSCvDMXhldVsCiaA-kr5SwWJ4EjTfkyX0RdUacOUF3plBO

• ⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

  [](https://www.linkedin.com/pulse/recap-exchange-0-day-npm-worm-fake-ai-repo-cisco-exploit-wu6kc/) Monday opens with a trust problem. A mail server flaw is under active use. A netw

• INTERPOL Operation Ramz Disrupts MENA Cybercrime Networks with 201 Arrests

  INTERPOL Operation Ramz Disrupts MENA INTERPOL has coordinated a first-of-its-kind cybercrime crackdown across the Middle East and North Africa (MENA) that led to 201 arrests and t

• Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

  Mini Shai-Hulud Cybersecurity researchers have discovered a fresh software supply chain attack campaign that has compromised various npm packages associated with the @antv ecosyste

• Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgc7jpVO6HhBuEBTjkwmNjYhKlFmhhmytOqNZHYuGP-dNWrf3AoyE68yoKj77elddOX4Ps2x9jSuwhi5sE-QjKoEjLXgQW9e6EHx6W0G7qTqYTM3fZh1AQT

• Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi61imbY3-QbMmT6WAxBXaFeZ3eXwprN147oxbMvVqh9NrS69IwqwwL4qu2z1eRA8NfrWwyJi9bIDuREGEVZ-LdBMCGTSxdul92ZApPGrzwqOcr3b6YBKC1

• SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access

  SEPPMail Secure E-Mail Gateway Vulnerabilities Critical security vulnerabilities have been disclosed in SEPPMail Secure E-Mail Gateway, an enterprise-grade email security solution,

• Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdm6ntsTvJJXoF1Bvx2Qm11faosxt-w7g0VzPCnsORnDN-q79t1wnbzqTFxbkRw5DF1DjhdDUgZ1H0O4h35tZcEvlsM7dEUkbPyvaQdkEhhyGhpF90Bug4

• The New Phishing Click: How OAuth Consent Bypasses MFA

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLnnvBvl0Gs5pfpUcrlJNi62CyGs5UpoGCmpUAjReyBpExj5FzhuxSwuUcfQiyxDqeeoy6jSAHq4tA2KUnO5CRfbpfdjN1ndeXgC0MiG0TrAfAyW67eybZ

• DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgecVdZvIxfMWdiQkn7dCSCueSRLBHaU01aHrtW1lUsx35gwbM6fG5NyV-VUhnDxvolktzMNWgINg06cwjKL1xIeDIFMiFH56IUOzwZwJqiLnMp-VJcIWFj

• Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4-ldAXS8Yw3BhdSS9xeJFNzwDm-mrNDxHr28zcknAKH8knTUWleHEhmJ-vgNokgVbm9y8vRH18v9Oxz6F7twmnBoJfIQ2fVeuhEErRAF31F9MES02sZMh

• Grafana GitHub Breach Exposes Source Code via TanStack npm Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1N3gjAFZQ-1hptUuKwQmHMjlZwIMDn6H6mKc9UuDELAKWl3Kow6EcD72IkWpBf8ZB2Db8wrZW86zVxKaEgQZ7sVrWoDokD1LoLPUqhhCw2lLDl9ODqq2Z

• Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8DmW5nAG63-9iR2RmnP7i3GVJ9EBtLznscnnjROZ-DWRALYo0zsPNjUm2J6khkqSDJiX5Gmwb8sxPh4jHRcsJWFhKSdxZzz4D2f5bOahbfcnmQrUdvhyp

• Typosquatting Is No Longer a User Problem. It's a Supply Chain Problem

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLWPxYgRwc5keQNREyoTXSadlwpCLyUdAq4v1fQA5lA2tJ0Ia6xOk-FaLuNHwJjVxaF7M0xzPvqHk4e7aym6R7J2aaGCGm7Bnv8OXh7GScZ-G7ic5pdEgK

• GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoDiyeJZY33dxAsa8qElLYXNILLDT4NhloINZiuzcx3La2JvDKd54kM8qsxobt8vQ3FpTJr2ZVoMYiEcqHN0sbt-1AMHlS7mSavlbDiEDg42HN1d4wCffs

• Agent AI is Coming. Are You Ready?

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjYQaF0euKIc86WLed9RLojSVHUNrnpx7OeZHvmaPtnFPmL3WrhC-DU-7asOtrYx8fBGP-UCdxI1QljVgaTwYA6uIye4yHpzpk-uSQb934K7NDSPn-jFJR

• Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjt4cD52DtnzH5FM8ZMrW9KyPrD1ysrJURSmqalrw9f6siP8XxYqClsqV6ofHpM8ir7gBnmmvehj5HB1k0aSHdPmLtKKwtLLvjSi4ELa9eMq12maW7p56a2

• Microsoft Takes Down Malware-Signing Service Behind Ransomware Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiypJnCUStqk0SRgnT6bFPLXM9F10uUBgEZgGScKH8lNthkNnD4zP2-CBNIvo2eukKJzGKOs7RFjIq1KmR-pIGFT3pFS1wgz8ySDW7O9OaMkAHXSaZvHSP

• Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development

  Secure AI Agents Microsoft has unveiled two new open-source tools called RAMPART and Clarity to assist developers in better testing the security of artificial intelligence (AI) age

• Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyhKX1WKEWbBPd4sElCP9BB26eorxZX1Lo25Mcu-A5bfBUuWT63SQ-Hyycv1YPSlvVeZPfLSEbb8mQnuPvf0KEDm8mYTtCLoYZuMG6A8maidLefE123Plu

• GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJ64wgVqZTQx208NgY0sBvUUQcR5mb-G4ENkfw4PEX9KlJJxEIuUKQvPG0rReXB4chZ3wXrvNSR1QsrK525DDHkzY9X3nQYduh36qKTyC-k4EfixFeOU7Y

• 9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCjgJwva2lZrAwxHWPZFiphHAhxBdWRyU4gUiAZIStkUP4JU6yej3Z1xVhUtrhaIYVu4IL5KpvOomBDHUaLtvgHV-R941nUSrngG0BGBlCv2pByfkVZNKx

• When Identity is the Attack Path

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgv9W2lSuCdHjvqeLUN5WtqUOgCwe2FAyP1Yz4oUr1LgM1MdOE5A83gkzSOfGjIosfdlfB4SuLbeVbydeuParENW4MH2aWYuWqnB-DeOd7gC3RJnp7wFucm

• Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNxp-fCwFOYcXoyRTmhjpwfvFCjfE36YoU8z-7es2XrOajnfSfpttiB9KMfwqCNbwzHQ85kILhlUwo4DeQFWXFq29J8poVAIe-gKCCegmTid4YW22sK6CQ

• ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifIiAs3r9mSWAyNYngQby6QllKy0gx1dGJB4MNtgMjRQLUIkp7-fr851xuTEe6-izLAtNHux1PgdVBiWmEQctN2QM1bzVCP0bcR7ReqHg-lXrDa-EqUsZA

• Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhYTZEcd3s0q7NssZnOYvAFrMtE1fTJQtdNoUDwBZKG1DkQWYL4uY6gExiUwuNcMnZG-J8dM8iTJIm6nD2Bv80qI2xMubYmnGScqUNQfeI6kF49vFkU0wKp

• Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLweJvl8B70zomibdr4U6WvYgbmZn4gKKOG9F7xDPXzgeENKK0kg2kgK1yvZDS7AJFkY9De2rG2EQzCLvN1FmjrXXDIm-CkmU88QcexbMkr60gKVKexF-d

• CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi04arowIzNPvHHvDTUE34d3bZlOhBeQXtC0UdXyjlf988G4zVE89QKWqSWASKd2LD0T8O2XhkDVgG7UGFIxlpvQWHPx-oX7vfMK5fH4uSDg3eSUDAaWKtg

• Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5VYMnsK-UMv3L8TZp1KhZ4PQti0VtUXkbDREtK-R9Hbtj6bdYrPRwwn8VItL49asZcHEMSOFJyfV25Da96CerBXrPRnHZHncrTuo7Mj7dxEkNGNR4jZZs

• Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspective

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUdjbDFZeTbwpdUFibGsmuDSgXNHbFfTYroqcGYEGB6yvuKR3eUBSHo9XaphMTYmXC3cqmICDOGUjlsBrwwyJOxzkj1Cdh2xZcYxLz1WpHrV9QmloScYiv

• Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCsjVeLejyyBZJ0DWW2y9-Z2Jvmrzz9h-5XEIKPFTcJvDj49Jlt-z1FNbSp51K9XcQ8FqC9MBDFPPPdZuzRfjqtYvKNaqT0Qzd61oCHVhNq59IcAVcWV3L

• Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNDmjcnVzVIqFFB-CQU7L6G8XVTifkZGmIMcPrui1EoffwwvtPXCrjKhRtIfxYsfPb5OUON4KQ1MVRosbP1BgCeFpqIIWRbgv34naUxEUTzyGRsPB6fY2g

• First VPN Dismantled in Global Takedown Over Use by 25 Ransomware Groups

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8yN-yeHodasjpiRqdUbE1MGyOfiyAzo-x6KZV9oilxPvkFNoyLVU7oNmG05F5g49pLeMYjgJtU0mFk9ft0qi4oLFgTxm0KWBncWw9lq0lVJFdkzshBzju

• In Other News: Industrial Router Exploitation, CISA KEV Nomination Form, Gas Station Hacking

  SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broade

• Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKqQ4Uk8lGWwF7f6lrmP6dRHkEmQTJsqFs8xvJ5256xUcHTeWMNVMkPguALNqLPpJWneU9XWIEzi4jSUVTiS2In1QMSl7NEjNDB99yHlGeCjw4OAQ3Lx8j

• Pentest Agent Suite – Bug Bounty Framework for Claude Code and 6 AI Coding Tools

  A fully autonomous bug-bounty framework called Pentest Agent Suite has been open-sourced, delivering 50 specialized security agents, 26 slash commands, 19 CLI tools, and a cross-ID

• Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure

  Drupal is warning users that it’s already seeing attempts to exploit CVE-2026-9082, the highly critical vulnerability patched this week. The vulnerability affects an API designed t

• LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjM0W1UqsbcZ-8IVn8ov3V24MQ74VaKe3auGFWNunDUfubEBeKEGREuFjC9-i7HfLfSwFQQ5wqe8bhVWvAUVC8U5AQg1c1Qbe-M7bSjuWCwcjTRrc2Du7L0

• Hackers Use Browser-Locking CypherLoc Kit to Push Fake Microsoft Support Calls

  A newly identified scareware kit called CypherLoc is locking victims’ browsers and tricking them into calling fake Microsoft support lines. The kit has been linked to roughly 2.8 m

• ‘Underminr’ Vulnerability Lets Attackers Hide Malicious Connections Behind Trusted Domains

  Threat actors are exploiting a vulnerability in shared content delivery network (CDN) infrastructure to hide connections to malicious domains. Dubbed Underminr, the issue is a vari

• Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkqwlAgmL-HrE2pSx8xqfY4-AyYZ59wK4x5AWtnCXSHRoBO1wcYTpWw42Fe6VRoAT77e914MSqZW56fKX95IueHTCrk10XNn2Yxh7CU8iCdX5lzFowGeVk

• GitHub Adds Staged Publishing to npm to Block Automated Supply Chain Attacks

  GitHub has introduced a major security upgrade to the npm ecosystem with the general availability of staged publishing and new install-time controls, aimed at reducing automated su

• Over 5,500 GitHub Repositories Infected in ‘Megalodon’ Supply Chain Attack

  More than 5,500 GitHub repositories were infected with malware in a supply chain attack that relies on automated commits, security researchers warn. The campaign, dubbed Megalodon,

• Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOPcHXcMRS-BJNvy9aeoCz5H2Mmdh6mO6Kl3kM-l216B-3Wc0Iy5wayPkxJ79KtkHx2CGBwDVPMMeuB9E3jQlPXsa-vKqALoAuTwmEwsbH5sK0xs9xbXWg

• CISA Warns of Drupal Core SQL Injection Vulnerability Exploited in Attacks

  CISA has issued an urgent alert regarding a critical SQL injection vulnerability in Drupal Core, tracked as CVE-2026-9082, which is now being actively exploited in real-world attac

• DocketWise Data Breach Impacts 143,000

  Immigration and legal case management platform DocketWise is notifying over 143,000 people that their personal, financial, and medical information was compromised in a data breach.

• Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQ5LyRYJIkEVUSrrBV-qvrXIKC-B4h0JAxyV4IalzuiEzXi6KeCnZNTUWIIld3oeC5kDx85xppqYm9tGUB3Sss9WqH2bYsOVxkB3PhjUkcQrdyvr6JKsYg

• Authorities Seized 800 Servers of Hosting Company Used to Launch Cyberattacks

  Dutch authorities have seized more than 800 servers and arrested two individuals as part of a major investigation into a hosting infrastructure allegedly used to support cyberattac

• Laravel-Lang Packages Poisoned for Malware Delivery

  Four popular Composer packages maintained by the Laravel-Lang organization were poisoned with malware after hackers rewrote all their Git tags, security researchers warn. The affec

• npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4rnMZgOYbsYr65UN9AZ3oFzcAwqXSYqgRfjUGpeaQeyP-0OAaqJ9aceXPAiujRKwyGQMa4ShcSvtOWPb9T3qpqF2LATAw2U4iA7IkU9ok0alDbzNWYJea

• WhatsApp Chat Histories Stored Unencrypted on macOS and iOS

  Security researchers have revealed that WhatsApp chat histories may be stored unencrypted on both macOS and iOS devices, raising fresh concerns about local data protection and cros

• Anthropic: Mythos Detected 23,000 Potential Vulnerabilities Across 1,000 OSS Projects

  Anthropic says its Claude Mythos model discovered thousands of severe vulnerabilities across more than 1,000 open source software (OSS) projects. According to the AI giant, Mythos

• TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOb58wXNPgRDazHcSLTObawPnMVsCDUEAoFclGVn3CC8qe6Pr0-Gce-SxCO7FJ5HzU23WEsoU5iTc0zvLL0zzbXPcO8MqVgHIIAKXJo4ExcujDPV9yiIdN

• MiniUpdate RAT Uses Azure-Hosted C2 Domains for Targeted Espionage Campaigns

  A new wave of targeted espionage attacks has put technology professionals across the United States, Israel, and the United Arab Emirates on high alert. The threat comes from an Ira

• 266,000 Affected by Data Breach at Radiology Associates of Richmond

  Radiology Associates of Richmond (RAR) has disclosed a data breach impacting the protected health information of 266,000 individuals. According to the healthcare organization’s inc

• Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinuOeS1qVC0UHhPnJ0jlSdfScsZDRtkI6VU366iePjKdNTqLiqHcqjRcGL-sNBdUkShUH71YDDVwavzXM1cIu2UU9zE8VYgbJYsRUQeWRZAO75JC2vQHYs

• Italian Authorities Dismantled CINEMAGOAL App that Enables Access to Various Streaming Platforms

  Italian law enforcement has dismantled a large-scale audiovisual piracy network centered around a sophisticated application called CINEMAGOAL, which enabled users to access premium

• Oncology Institute Discloses Data Breach

  The Oncology Institute says a previously disclosed cybersecurity incident has been confirmed to impact patient information. The Oncology Institute (TOI) is an oncology provider fou

• The Alert Firehose Finally Meets Its Match

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhULc1VvUr1LQ1qZPTiwsPmN3JbNIk0OSlxHRT0MFdY2kM5Z7psdZtrctiSOybvu8i1sCwcMeSUtXxHb0xBkQ2lCUt2lkKmhp93ydvN4-E-qObRkmiFK2s-

• Hackers Actives Scanning SonicWall Firewall Interfaces – 597,000 Sessions Observed

  A sharp rise in internet-wide scanning activity targeting SonicWall firewall management interfaces has been detected, raising concerns about a potential pre-disclosure reconnaissan

• Ghost CMS Vulnerability Exploited to Hack Over 700 Websites

  A vulnerability patched a few months ago in the Ghost content management system (CMS) has been exploited to hack hundreds of websites, including ones belonging to major organizatio

• Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5bYCvNMmCGXVH5raR8wqJQv52CST3mK7UBfLXVnqRRLrHkhJpSOBjdPyR5oXmPsSB-X3-Sib6-eVToqi4UXB218ESR2uFdczESGAM5i4ZkxQyE7AkQteC

• Kazuar Malware Evolves Into Modular Espionage Ecosystem for Secret Blizzard Operations

  A Russian state-sponsored threat group has quietly upgraded one of its most powerful cyber weapons, and the result is a spying tool that is harder to detect, harder to kill, and mo

• ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-or-Die Alerts and 25+ New Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhYNaH2vOiD-OgAVnO0nGCSr8j4nnvHD2n7RieJD2mDMlPevfKoBafjhvob13LV4pOFhgMuZd6ex8zyQnCM1AyVfl6fuRG9Max2F76Ku9rWbieBvF0AtGlQ

• PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhA-FbTXMB7fJu4ZxIlvKU2wHShSiMZaCQBah-p33256FjWEUsO0kd4s-LXOTYQoS39Mj5f7nhj-ERtNF2EPNU9WG91ZWJXpl4cwYFoWz8npaMpVWzAhYjV

• PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2N74T5rZvfRcHqUhwtyI3hbxAAQnB-RQQqpiGSIJqdplaQaZcjvqLR80d3pIjwJyGtAO5V0Ji63w4V4Ww901x4aSGYId3lzqXNdGUMbprz80zXoKzHVoI

• Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiX-v9Rdn-UppGqdbm0oFYXNg6myRCPn8r-d4BXVN0e2r2hqrYbGPUwOKafMbwKlojjbck4C8Ez6dxZ7WcLF45PNphvCo1K4OGhXl0u9fWanVMbO62iZoWM

• Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnVSDBWt4hKZ-DOrZqHWPVH0JxrpcUeup9hpMpoH5Ny8bpuJ6Lviv58aH0aK2S2IJvAugaYRhM8P9wUW3tbVCu2kFMQbG5F16kI3PvS6gmR2Px8qOxcat-

• New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentials

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixNgyNI9ObZi3Il87CVXhEWyWgcK-O1IKhQKRs7NPrNVqTMBZRw7AZpmbk5RdsPxNPmO9IyXaq6QzYBN691HBgfE8HpwnyJuE4-vaCAwHPpb6UfeSRcrMI

• One Missed Threat Per Week: What 25M Alerts Reveal About Low-Severity Risk

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUaPw5V89Ez9z5x8eFLFOhwPphGqXDQVGfd2sI-pX9Q1XTcpYlWEhFiZ6o12fzAyvtCFDQ0zs4AFlHl4HJNnjWH8hUXM9r-oBl7YMEnU1F41Ho7DL23NJb

• Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromise

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiholjenZRIykmReErkRiguk5xd9RV4BIEEPM0nT-o3LvMvDkCTLpd3G0NpqDGEFHp-f6QyvGRMip6CBhGlllYVlp9wS3XBVoV6xW47CDka7Ig8SaotcuNl

• One Click, Total Shutdown: The "Patient Zero" Webinar on Killing Stealth Breaches

  [](https://thehacker.news/patient-zero-playbook?source=article) The hardest part of cybersecurity isn't the technology, it’s the people. Every major breach you’ve read about lately

• Fake Call History Apps Stole Payments From Users After 7.3 Million Play Store Downloads

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBMXgW6K0BZvt0-jhZsmX3Uy-nsd9wb9g7Gs7d3G7uH-HIlEcNhEt9xpaKD62iJolLK5Expt-6qCuvIf7llqtQclB64I9zZmi8CIC0lMJiIz8nx6r4C-Nj

• TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWchpptUYeW4vXSUXfGq-uMzB1mrdzsvX8XIWssIKzaWa4eYbaLwec5Zos3xCoD0s8-LDcGI7Vj8DjFq6RtUY68HP21YudHYdsFS2xdyzQE7OPyuTlqyO2

• cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8HLwOMzo20kbZmflPvJJmY7su6wWOWgDLV-dJNx-k76m5ivbwVoCkFrnsLXkyO4PHAyLSkPXinjK71SDmWabyOcTlKb3juZgkXTzOVuMvZk6-LUFMhoJ-

• Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak

  Ollama Vulnerability Cybersecurity researchers have disclosed a critical security vulnerability in Ollama that, if successfully exploited, could allow a remote, unauthenticated att

• Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPtLFShqXoM9Nzsl5kmSsF2UGsm6VhRoLNodcqRCdq45zqy4ekFVtamokNzEFifQknD502Wc0uFTBUdvLsBsYn4QAeVHSWLmhF2ROBMXutev8T6JjCGrra

• Your Purple Team Isn't Purple — It's Just Red and Blue in the Same Room

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0dlupn761jekig7BbPagwo6DtccMFQV8oESHiCBIs04DdhvoVtfwhe7OVEh8VvyFpa-VFo9GKWL8tx2ZKTSn3qA7iAFCvTfoevjyPFYNb3eAmpp4pkWk3

• ⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiD4a3gzeAEAv4Bs5FqWbHG1cRyNqIOjygeSxxpNoChwyyMUWlbZHzkG0n8ysGpoAYuKqklfMtTKRct0OeYktaKLhdXpRH5pKH94tVaMX7iPeNDf7vZjFky

• Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation

  Zero-Day 2FA Bypass for Mass Exploitation Google on Monday disclosed that it identified an unknown threat actor using a zero-day exploit that it said was likely developed with an a

• cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgInpdPoL0Kf1i9D6daAAGB1QPCR3E0dArELz-ks1Y6cJlow0jdZYqamKMKMxC12OC-XMwUrDIWdhxKd7zLLQfH-rDl0-ViVSsFswAuJL0mEtQg-FW66c1i

• TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiq0A38O89uC968dpFnFxE4v3J4fpr5nEqC-2QiSJrtZlgPocPYIaowCvCMeONhcrFiaoSdBVeNsuTa2ipAZZ3HBMUDcfO8DZ06pughteYJItHhMLeBrjnf

• iOS 26.5 Brings Default End-to-End Encrypted RCS Messaging Between iPhone and Android

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8hWB1CFFk1cxzc9VF7NI2QB-oCzrDMhxoIeajumiDRPkGyEt1wzhH3A3awM8uAZlRb2OXf33nd2O4UgIwHlCRNED92zQwFnDvyi9ypYQgQ8gRLCzkA6pH

• OpenAI Launches Daybreak for AI-Powered Vulnerability Detection and Patch Validation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLWuBkkGzJLNmcxzqkKdh6dI6X-juFjpMWr-k6VGVTL6G1XZUH1sna06RS5PQY0e4A1VpUjvR-dpWMCx0yQJBdjFyjnoyOek-ysMpU7cgWBkUHChyADdRo

• Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqFVhPeK2Y77CmHxc0azDelzWwpgSb4m8GZPLeJlsr2QvCZU5ChGQK37bJ2XsGQRaNszalreV1iNyYDzeLt1I8iqafNTvFCPFQ0czKwX3Q6Q23Tqdavuny

• Why Agentic AI Is Security's Next Blind Spot

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzo1TUnQJpFnJbrO50dvjG14LDr2L6gKHsIIr5P73rSCgksrt2B9eVmRGKxPVvJ1qVMF63ka4So6vj5ln9T1nBIt2MV2DcHdnYyQp1RREL4nbtnPghY7q5

• Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXIhs2kZt0YGdDcd-Io67mq1GINiI71LYhuin4qqmlgUgCuZ3fGUvglg5nh5DK8kfPP8RHki86yMyqh4rTE27PGgPBh4RQjkh91-QGoB8cav5NUsYAwcV3

• Webinar: What the Riskiest SOC Alerts Go Unanswered - and How Radiant Security Can Help

  SOC Alerts Go Unanswered Why do the Riskiest SOC Alerts Go Unanswered?[](why-do-the-riskiest-soc-alerts-go-unanswered-) ------------------------------------------------------------

• New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbBy7H5qvorFUmJqREACqqxVC0ogVq88dP8wLyKyUPF9fCowpUSkb7foEsEPDALt0ccCpcJc6PXCJjFmQo0oX3furU-cYPULBa0-pjpiLGV04JD6kr4G0V

• RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggIbYm86Vn45Nd86Hd5IEqHufRIS5Ud3spGUy5JWHy-My-NBVocyj-aR7E3gBKibPnrWd5DRYnDfmbaHUMuaYcNnpaUIDN11VLySLNUsXwFwVIALsNo419

• New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrSn3emmNbwXDi3elR0wo5ErHhg-gPT4-u4zk7MHZg4u0ruMmj2KGgPF8fz06Riv6Gu5NXMN3eBP8H5bVf6dmvOz-lvb-qrvhLlssLUzl97ZVmIWoIOmMP

• Android Adds Intrusion Logging for Sophisticated Spyware Forensics

  Android Adds Intrusion Logging Google on Tuesday unveiled a new opt-in Android feature called Intrusion Logging for storing forensic logs to better analyze sophisticated spyware at

• GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Data

  RubyGems to Exfiltrate Cybersecurity researchers are calling attention to a new campaign dubbed GemStuffer that has targeted the RubyGems repository with more than 150 gems that us

• Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flaws

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjk3m3CoTiKH2QVXSFAOVKKnTl-Ybt1FDE4M7BGKujskSYNQ8pOlcvZfyNv8CW2EJIVdMQaORcCE0H-ufTvD6hR-LOOZ64GZPS9bH7YrE4i0r4LrGCn7vXm

• Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOfGXVOYqF2EcrcnYIDCnTYdmWpV-uaZ5nV00ukZ8uCk19wFFOaxVvgwO8LtlIkVo8pvcSSBs8Afc66yo2PbiMDjq4UDqnytAqP-Nq8CqTOfEtqwuWRmjb

• 18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhCvxtNv7UYYMCITB2HLsBgkN83LdRXcw0wmP9gMAfXeNpmJoOJKNIaQb55b-GLDeQHx-dUBkASGDYgstnvYAE5eFuwyzMSxY804fn56OaTsGlESOab9y-

• Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXt7ooDl2PwJY4nazAKdW9rmILsmosve2FZaO9usxTkrkksEEvsLgY-ucMErXvjvusuWjN7PWRM9KaRXB1OkL75gio7tcqpMsPZxaFNE9XDpYmARH3DwgG

• How AI Hallucinations Are Creating Real Security Risks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi45HPlwBwWVoL1fRSEGy7bjtz4Z05lAO8NWxLqPrzQ93c3j5aajCaK5gCrJC6aYP0ePV36n27rw33vJv5mUXf3mtdOEItJjHrSkzckVGAdTU2UMp8s-HAV

• PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2IaSkdVZDwyJJT-sODoazviDXhw3MGkn5XHYocnTL1YfLJpgJ-1wNaAm0Rk0phyrIv8vS73SNNkPSmlxRkK9ySAQGnntCP9JcVKyqee6lxjlYEp0cs2CR

• New Linux Kernel Vulnerability Fragnesia Allows Root Privilege Escalation

  Linux distributions are informing users about a new kernel vulnerability that can be exploited by a local attacker to escalate privileges to root. Dubbed Fragnesia and officially t

• Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEld5BcqD9rYWVjx7oXlV5pN9djvilow0iIYP-LlFEzGReX8fTPZ0gKi9zMGVLTT8qddHu5FyBMaZpQroEzYFpsoPWf96hD7JeTdqsROemmavXW2pDxNwc

• Hackers Abuse OAuth Device Authorization Flow to Steal Microsoft 365 Tokens

  Hackers are exploiting a little-known feature of Microsoft’s authentication system to steal account credentials at scale. Device code phishing campaigns now target organizations wo

• Enhancing Data Center Security Without Sacrificing Performance

  Every data center cybersecurity team faces the same impossible equation: host-based agents consume CPU cycles that high-performance computing requires. For years, the industry has

• ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjImYNT-qC7frGzEXeok3KDXJNMKote6V1FVXIpkAoSEER2z1YyT8dpFq5RtRhBQ0cweEPbBIuioDWFf5rwMf-0V6rXR2ZrMh2ISDa7X7NlV9zIGsoLSAny

• Shai-Hulud Worm Steals npm, GitHub, AWS, and Kubernetes Secrets From Developers

  A dangerous new piece of malware called Shai-Hulud has emerged as one of the most alarming supply chain threats of 2026. It is a self-propagating worm that quietly tunnels through

• Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026

  Cisco on Thursday announced the availability of patches for yet another critical SD-WAN zero-day vulnerability that has been exploited in attacks. It is the sixth SD-WAN flaw whose

• Stealer Backdoor Found in 3 Node-IPC Versions Targeting Developer Secrets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTj2m9-HHmDEDzKIsalsJHJcwcUsIFajvcpTLP9QMyqS9FJroTH7lXeOGZFuO6j6F-RzbIo1kBIQ0udSFQGzjN2hxO8ZfyFeHM5557BPI1sjiJ7cEMJJE6

• OpenClaw Chain Vulnerabilities Expose 245,000 Public AI Agent Servers to Attack

  A chain of four critical vulnerabilities discovered in OpenClaw, one of the fastest-growing open-source platforms for autonomous AI agents, has left an estimated 245,000 publicly a

• Chrome 148 Update Patches Critical Vulnerabilities

  Google this week released a Chrome 148 update that resolves 79 vulnerabilities, including 14 critical-severity bugs across multiple components. The first critical issue is a heap b

• Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9rok1ToPK0gWug0GnICltZkvx6bMRyhHfTJG1AcSfrGpMfOVc61O3FpyenIW-wpb4s6Hl3qZcU5nEs77SMWSpKNDR4rrlY2syVVSNEBrpHx8RkWmYaN9M

• Gunra Ransomware Expands RaaS Operations After Shifting From Conti-Based Locker

  Gunra ransomware has quickly grown from a new threat into a serious global problem, hitting dozens of organizations in less than a year. The group behind it is not just encrypting

• TeamPCP Ups the Game, Releases Shai-Hulud Worm’s Source Code

  The infamous TeamPCP hacking group that besieged the open source software ecosystem several times over the past half year has released the source code of its Shai-Hulud worm, openi

• CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4XG5z00sF3uL0ZbhtZNiergQ9QVaZJydwP1pXEdPh2o29mwvTS2nPKRbxHftwnEJ1pvxMQS9TQknWqbovk-vW7BRPHUSsBhN4yL2iOwJnlmK7lzCdW9tJ

• Android 16 VPN Bypass Lets Malicious Apps Reveal Users Real IP Address

  A newly disclosed flaw in Android 16 is raising serious privacy concerns after researchers revealed that malicious apps can bypass VPN protections and expose a user’s real IP addre

• OpenAI Hit by TanStack Supply Chain Attack

  OpenAI has disclosed the impact of the recent TanStack supply chain attack, warning that credential material was exfiltrated from internal source code repositories. The open source

• On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirN79ZRjEd5wnVbOTlJJsWjQ54cwSj2bM5NDzBSgAFO8f9LrlIwQRI0ZogQX42iejmhgc1n2YcA91pFrVqtqNKKyAIXblcQ1Yx9LTs1TeNDbNN6JMUBXCK

• Google Project Zero Discloses Zero-Click Exploit Chain for Pixel 10 Devices

  A newly disclosed zero-click exploit chain targeting Google Pixel 10 devices has raised fresh concerns about Android’s low-level security. Google Project Zero researchers demonstra

• American Lending Center Data Breach Affects 123,000 Individuals

  American Lending Center this week revealed that a data breach discovered last year has impacted more than 123,000 individuals. American Lending Center (ALC) is a California-based n

• TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1l4Vq20M4553fkDfGbO9VqLV9Au-6EefivLp8HT2W5QxJvgWf1mr6pg5xsbC5j3FCJzOOCJvCImY1LjjFYIN25ajki1iSEVPvTyeVY7bC3ogcQFzHmE1X

• Critical Linux Kernel Flaw ‘ssh-keysign-pwn’ Exposes SSH Keys and Shadow Passwords

  A newly disclosed Linux kernel vulnerability is raising serious concerns across the security community, as it allows attackers to access highly sensitive data, including SSH privat

• Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild

  Microsoft Exchange Server users are urged to immediately mitigate a newly disclosed zero-day vulnerability that has been exploited in attacks. Microsoft this week patched 137 vulne

• What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVcSUDrpIZyFrHqIlIGnXfIShsEamRNviaM6TguPwmQI9KkhrIXOQbQ0WVKiOkcBGkFqKTKZmK16zPChmlcCbZHIkX3KC0sjnyXYJjpZuJXO3OiIhUe7Ez

• Malicious JPEG Images Could Trigger PHP Memory Safety Vulnerabilities

  Two critical memory-safety vulnerabilities in PHP’s image-processing functions could allow attackers to leak sensitive heap memory or to execute denial-of-service attacks via speci

• In Other News: Big Tech vs Canada Encryption Bill, Cisco’s Free AI Security Spec, Audi App Flaws

  SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broade

• Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence

  OpenClaw Flaws Cybersecurity researchers have disclosed a set of four security flaws in OpenClaw that could be chained to achieve data theft, privilege escalation, and persistence.

• JDownloader Website Compromised to Distribute Malicious Windows and Linux Installers

  A widely used download manager trusted by millions has briefly turned into a malware delivery platform after attackers compromised the official JDownloader website, replacing legit

• Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent Access

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8BT1AOScncZQMA-0WBdCzTDAHGHSey48Mywhij-TJupCdzP3s3o-MIImRtMZcoV2OqX3RjRV4COpVqkB1mrH3dzjwvSTwCEXOq2m80HgDo-xwAZ1KpR1h

• Microsoft Exchange, Windows 11, and Cursor Zero-Days Exploited on Pwn2Own Day 2

  Pwn2Own Berlin 2026 is rapidly escalating into one of the most intense offensive security contests in recent years, with Day Two delivering a fresh wave of critical zero-day exploi

• PoC Code Published for Critical NGINX Vulnerability

  Technical details and proof-of-concept (PoC) exploit code targeting a newly patched critical-severity vulnerability in NGINX are now available. Tracked as CVE-2026-42945 (CVSS scor

• Masjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT Devices

  Masjesu Botnet Cybersecurity researchers have lifted the curtain on a stealthy botnet that's designed for distributed denial-of-service (DDoS) attacks. Called Masjesu, the botnet h

• New Chaos Variant Targets Misconfigured Cloud Deployments, Adds SOCKS Proxy

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjO6ntnqBUePhV2XQEQmTFh-IjdPR64uT9ODhO3RYBAv8YohhRCwMg6OO9UKlvJJCd7rs1c391fbNZ59qDsSujaFJuso3h94xKo2BX2L5Jj-osBqZ3VglM

• Bitter-Linked Hack-for-Hire Campaign Targets Journalists Across MENA Region

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlfEPPxKdPdQANFPwRrggWpWL4wPe22BHdr5FpqDGHKTwN95xiQVwqqN896qCkYvn-wrbDTXMl6wZaMD0YwEyRAI9lzSZjcg9-RhoNXMh-j16cA0n4CIT5

• Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwKu6NdwE0kgawNywNJK7cGCEdRfzOKwsH9AeIT7zJ49RPqKJAG3SyjH44SS8Zsd-gAUFDFKnfdpaFH8sAZT9wevB2fS0QVk-gCp8xg7j1XcwGJzv05xpo

• The Hidden Security Risks of Shadow AI in Enterprises

  Shadow AI As AI tools become more accessible, employees are adopting them without formal approval from IT and security teams. While these tools may boost productivity, automate tas

• ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6d4nK1zoWjzSmbdUmGPSycMwGmzcYM2XRrFHueobgO8j7hwRdv8Ct856ggk29HqAOw1-HGCtPpxyGDcuQIKY53ATLKb8bQCsJR5bJf8VqX1igItYBIe4i

• UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaigns

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4smwzOHJUhoy2YQYZQpTIp9u5xk7vywCOtewG6WfLl1S3h1EO25k8GY6WSHovGYwTn4vo9uMFcoNX6XDa0-BC0mXJrTdSHtWGJDP1GIXqGvRnlqnqyPwz

• EngageLab SDK Flaw Exposed 50M Android Users, Including 30M Crypto Wallet Installs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigi73Eo-lmEoLh8BcTJmWW5GrmLrm49pUkkl8zyxIg1YTEncbgCaY-wXarkWZuipJhJEubcJx-VEiHOvNrMtPw1BoEU3Ni8gXNcKcbWX4TqBU8pikOAkRd

• Backdoored Smart Slider 3 Pro Update Distributed via Compromised Nextend Servers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPUQqw4JQlrmSih69TSpC28TmE2G1rOMs1kjrdeQbXFFNV6nPvlVQh9oMIwtOLiVJVUxYZFZ0RDiXmLDOPXpF-pbaStwjml7hxE-OITfsVlk2wA-nKUOpc

• Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLOQ2mcgefzPnej8R2XYY5eLnbFWle2koFcBGH6gyLGu10rBVnI3f3oHUmafvlbNJFc8N50ghG-0dMP-oLzJcZpObdY8MU67qbCc36iWMApPM0Z6QfMrkl

• Google Rolls Out DBSC in Chrome 146 to Block Session Theft on Windows

  Device Bound Session Credentials Google has made Device Bound Session Credentials (DBSC) generally available to all Windows users of its Chrome web browser, months after it began t

• Browser Extensions Are the New AI Consumption Channel That No One Is Talking About

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhj9DUEjhk2fpOJYkJSEMuXQKjwHL1MhXzLniQFjNXvUViJEcMwk4MacWDYrrCg096uqXg7pJVZYgagJF58e28tr2lOkZsGqpXbnKfnDVStpGIz2fBGvXay

• GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioOU2XpKmyRPz5kTr4GhD1YLJ2t7F6yv7bQD1upkiwmGwmzirnDAz92GvtjckyoBhBjaRqeR9XPm6e0yHdKLowfDDgZNkRlCvCneJEncgiviFu7PgD4wQg

• Citizen Lab: Law Enforcement Used Webloc to Track 500 Million Devices via Ad Data

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJjyKn2cWWKQvAjaegOP6UqdtgG4Cr6nQdwobWhvYvaSKO-VGcFFSSAvT6ngpo8T9n0BitFhLNKPv669Qp3I2ZajEs3DbveUT5qhc4zVWHRbjJH4fv084F

• Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621

  Acrobat Reader Flaw CVE-2026-34621 Adobe has released emergency updates to fix a critical security flaw in Acrobat Reader that has come under active exploitation in the wild. The v

• CPUID Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor Downloads

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhCPq2en6ihCNpYdSr5mWkN43O4Rl3tXYz77I2achAfYSy7Emoaj8fNqmFHLOydg6Ai6DwDKBEKD91ywcO9eT2t-rrFxEiThe79Rsa4dapUcNZSEdWl9NRG

• OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjE5gb0KURzHAgdXMKzxbNFW1AJ8G2ezWXrHrLReEmbX6BKaG3-tIjiDVcjk-4nIZ3Kg2564qiWXVVGcERIi4vaUvjqG-BuENXb7i6P3M2rdOHz-S9DOcKI

• North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhm-HTAVB66ntSv8R4Bgh9szlrPPh6ah0eJGTDheDntj2w9bW9XzWcgs2CAGsNC8DS7T4M7V8q18DtgMZu3mJONEewqoWlpefdtwp6BgudRjw2Z68jXoP8t

• Your MTTD Looks Great. Your Post-Alert Gap Doesn't

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6yIgStYTVvAIztG3gjTOWA2HNY1juzcSFQVACCzI1G1EU97z9wTsAO9HJECkmv0RcAYSxu4xSALf9jELTrtC9ruDKbMS5DPq2U2TYXLtvxZ1F4sRaQ2KI

• ⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZNd-YcwKXoDPmPblT00GaI9GQJvtJTHZk-5RBS1QEtLRupE9KKh-ogAP61b-cLzJm90PHDoRVnhiUzxlqcn-3gB2EtBG2TYxt8erP8UmLj3t1L9Ykh3vf

• FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb77IQHAfOvWFPWbcgVYJGdRtNJJJWBcjYH6M6cCawBv2tQdybani7QetLGwH1tTBHJ2P3Lr6gWdY0sz3547YLzkSLWX3T2l84-A7ndRK3T55QblpJ-j2o

• JanelaRAT Malware Targets Latin American Banks with 14,739 Attacks in Brazil in 2025

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMP1knUStbLpgNZ-k52a4ctZyxeERGEeqqVfX75PVTgtdu6XpoIlhHiFAwa4nTwg0089TuczQY5YZOgHOQk-TpVZNxs0piNVCPHsgBPSreTcKQ8gwISSDK

• CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkkewWzrjyqzejet7cyCWdTUMfgjGZgkDpis6rUlh7qnyPpmcN1kvVdKvziAZq2cOkFQDrJNM8E6WE8Cl7oPNdq94MOXJLa0nkbEmAFCBMnjLQzTy-WjHG

• ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjthzbWdOOZKL2JKvluG78cobCs7bGxvHsfzSMHt4XgX1OO9h-r7WdlYCCDrCoKo2dAXhh264NTGUrFKBpM8pv0WcePn5gUp1atSJ4-iC4wr0jmo7nDZ46J

• 108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 Users

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEOmjr311c0yBDI593joFXQLaRdpm6DY67lbFv83YcYlRHaJkpocwXjDZDsV9F9DM-SavZwCOZ-fg10ncUJyW3ODlfBjqG6aKytdBfvXFGLswxeJ69oiZX

• Analysis of 216M Security Findings Shows a 4x Increase In Critical Risk (2026 Report)

  [](https://www.ox.security/resource-category/whitepapers-and-reports/derailed-2026-application-security-benchmark-report/?utmsource=hackernews&utmmedium=paid&utmcampaign=2026appsec

• Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSTMJQqqJsKQgPpv94bO9xActQCEJXJrZGAEmCuyUghslqHdHDYmuVYqIVLGqMLiZuYzEBoDdGDQRVAX0KyGq9QcuIzQ5LVbNLBnwUwW2R7IBg0gopxAI9

• AI-Driven Pushpaganda Scam Exploits Google Discover to Spread Scareware and Ad Fraud

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiON8Ew8R1EO7t3yoLoTFdM2hQsDW9AtBPPBcNuPup6ZmpGta3VyYlkhiqqRlW5CDWpnU3IJ-EAbnV6nrfzJ4V3mdWIng75afS2TPvZOs-MLc0a5lxiLwR5

• Google Adds Rust-Based DNS Parser into Pixel 10 Modem to Enhance Security

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjblrgfLU8m4awyQDEqyzwguow-RuCp4UH1k5DBkrUrP87A7tsEQPPaLDD9M4VXF5mSNrmp1eurxQW-nVjM1nNnkyEIFyFiry3nxE0Wq3xrT0L06S6B11rE

• New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgP-RqcuX8QuBEwVkchLNSjyIAqQEuFwy0prqQ1gGqxpBFESQLuCzgGB7-cjYhJrbLhbTkj8G4NedN06plhhqLdRpd01mTh8XcOHjvQUuJqfjTROZeh40Wl

• OpenAI Launches GPT-5.4-Cyber with Expanded Access for Security Teams

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrjpxBjlnOwelWhtbcyO3kBGpQwkfPkbL7RytRsDo26AL5rMz4inDrjZLSfjy5R6skvnpiOA5M1LoDaAW1bCz4Isy4RMffGJVzgm4kYy5N-V1ijfLhVHef

• Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKhAYMS4CZDglUzVBKPpIJJJjC7LSHIE8r8HSYTDvQtfuqIlLk-jorWPPNvMPaiuWSriWM2WP-cyKqrTRwlOG65EY9ZZWuRYsrzcn05wg3mkQd-j103HEj

• Deterministic + Agentic AI: The Architecture Exposure Validation Requires

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3s5QStAA0bgcCWhxktRnDbuCjGGiFi6NUz1Z9zVK8-4CkZ8FS82Sc5Qg9-wKK98yThRDobcnyJcD63TIzW4OUTXzNrXTD6PXHoNMBJpgt02mi7K24qVMx

• April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-FBwJYevQ8Ner9ypyp5-H1XIPfa5guhQXC-W4llTZuBI072vjCoxKh9PUexQBZGJIeuZXoBAKboz9xz5Gzd0p1SiT5UME0wd0lTTOS6EIh3nJ6vsAeMzG

• Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-efZdYJpyjLdBQDLfJxWi6aiElSTIIzesGLR7SNMM0laIvBdFHioyAfxmOQkhV-bBV5SqCxRRhocp4-Q3EezvtE5Xp2aeNcFrP6d89jhOY2QiCVhhyMCM

• n8n Webhooks Abused Since October 2025 to Deliver Malware via Phishing Emails

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSXMJaHSQp1aJ8l7rKKtfILQtDMLWTUVOPwWqizQ-nRzb5JbG1BJOFKTs0NYGVQ0fBFTzLkjaY0bntn7UDnlyy502mDQJzvqFhTJwmYlctN551StWLJf8h

• UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhH3uHu3ez1qUhePM8e1rCVaEUwBzhu09tblZcAl6jlOEYHN1Zq2-rm-dyEOArGNUm63UjM-Qs8XwFKUa46UxOwufTn4BmRlfv1xiwlxkk3XboMQu8d4fHp

• Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNoBvtFhZbLfNE2AsVSzuOt5V9YMzAumIA2M9c7QVbpi-xMwDIgVtDgCIi2bCYgHPviS8P-Ap1k-8aVmHABqLzNGE9g014MM1gnfJEJPKbKczoCjPoI6Px

• Cursor AI Vulnerability Exposed Developer Devices

  A vulnerability chain in Cursor AI could have allowed attackers to hijack developer machines via prompts hidden in malicious repositories, Straiker discovered. Dubbed NomShub, the

• Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihdjDVphpsoBIBjhimILabg28ZsD4p-xNzJol1uD3SSIRBvkp-juko45B2sjKpQmJi-h2tHZf2yWAvuCOZRs3m3q4w5sj7x-MyXWosuKglLblipF94T8f8

• ZionSiphon Malware Targets ICS in Water Facilities

  Researchers at Darktrace have discovered a new malware strain named ZionSiphon, which appears to target water treatment and desalination plants in Israel. ZionSiphon has many capab

• ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-Year-Old Excel RCE and 15 More Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzTVmwPjmV14aBlnHuLOX2yEZR6VGpmadgiPHtNBJV0KVNGOj2tnqE1cb3U9RhBXN-Mytte3jKs2n2dQwBhX2dYDETy5es4cGUkbW5bdIaVhx8i3gWQhda

• Email-Borne Worm Surge Drives New Threat Wave Across Industrial Control Systems

  A global wave of email-borne worms hit industrial control systems (ICS) in the fourth quarter of 2025, marking one of the most concerning threat shifts seen across operational tech

• Two North Korean IT Worker Scheme Facilitators Jailed in the US

  Two US nationals were jailed this week for their roles in North Korean IT worker schemes that caused millions in damages to US companies. The individuals, Kejia Wang, 42, of Edison

• Newly Discovered PowMix Botnet Hits Czech Workers Using Randomized C2 Traffic

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaSAtFbXFX7aYFcwPPrHEMwEZ4VJp2mJQuYo3B3Q2Zrot1coilMUWffYOUUFHFRO6zwHHjlMCMOJcbnciF69KLU1LpMhcfFk5YV8A4cdIchhqR1NQGEvyz

• Hackers Target TP-Link Routers With Mirai Malware in CVE-2023-33538 Exploitation Attempts

  A known security flaw in several end-of-life TP-Link Wi-Fi routers is being actively targeted by hackers trying to install Mirai-based botnet malware on vulnerable devices. The vul

• Recent Apache ActiveMQ Vulnerability Exploited in the Wild

  Organizations are warned that a recently patched vulnerability affecting Apache ActiveMQ Classic is being exploited in the wild. The flaw is tracked as CVE-2026-34197 and it came t

• Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKAY7CueGuHevAtV544WN7RTKISrobQLFpjfi4kjdzP1I2BA3rnll69dv1kfvHYSCcU5tQISA0OOgcQVibKrl4o0AvtUyM9crfZuSb1XFH03iLtPglZeHn

• PoC Exploit Released for FortiSandbox Vulnerability that Allows Attacker to Execute Commands

  A proof-of-concept (PoC) exploit has been publicly released for a critical vulnerability in Fortinet’s FortiSandbox product, tracked as CVE-2026-39808. The flaw allows an unauthent

• Lawmakers Gathered Quietly to Talk About AI. Angst and Fears of ‘Destruction’ Followed

  A congressional subcommittee on Thursday held a roundtable discussion on the potential of artificial intelligence, which took a turn toward the existential as each lawmaker aired t

• Operation PowerOFF Seizes 53 DDoS Domains, Exposes 3 Million Criminal Accounts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgePkLgywRZdW-d26RoQHpyVUy3nKssYfrZuFEdZ-fjRzJHTpESHBPlLvUIIvjjeLVTn4GTBoH76mfzh5t4PoKyzZhXWBOnCAkssRVXvblAMkEdhlK4G9YE

• Nearly 6 Million Internet-Facing FTP Servers Still Exposed in 2026, Censys Warns

  According to a recent April 2026 report by security researcher Himaja Motheram at Censys, just under 6 million internet-facing hosts are still running the File Transfer Protocol (F

• Another DraftKings Hacker Sentenced to Prison

  Kamerin Stokes, a 23-year-old from Memphis, Tennessee, has been sentenced to prison for his role in a 2022 credential stuffing attack targeting the online betting platform DraftKin

• NIST Limits CVE Enrichment After 263% Surge in Vulnerability Submissions

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrjR1nq2z66LZ-KZoSSgEdNs30l3Wv4kqz4R4acFd3CW2tqG0EDILlATrje1-tvZhdjnU9rSRO4cQNmlQGelsfBGGiMlm9kxotVRlBDFyMISCJIFUPN78A

• Nexcorium-Associated Mirai Variant Uses TBK DVR Exploit to Scale Botnet Operations

  A new iteration of the notorious Mirai botnet, dubbed Nexcorium, has emerged in the wild, aggressively targeting internet-connected video recording devices. According to recent thr

• Google Blocks 8.3B Policy-Violating Ads in 2025, Launches Android 17 Privacy Overhaul

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj84jgyS7JCiumwEWR-XKLRuLvsljuCRx-alsYQHKikYlefpZeL1Wqh3GEALkiLdX886cZVY22LQAETSoYLrNdEJ4115IkJtXq5v1EMvQdvU-xS61E89Oww

• In Other News: Satellite Cybersecurity Act, $90K Chrome Flaw, Teen Hacker Arrested

  SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broade

• Fiverr Allegedly Leaks User Information to Google Indexing, Researchers Say

  Freelance service platform Fiverr is facing a significant privacy incident after researchers discovered that sensitive customer files are publicly accessible and indexed by Google

• Three Microsoft Defender Zero-Days Actively Exploited; Two Still Unpatched

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJ8x3Yg0CYomOu1IpHfhfmiqJtgaMSnnoE2tJR6RdXGIy1rLRTORge-ukCLYkEj6xzeGTvmuy-68qfU4menG7pvwZi21h7ycQFwY3OXCH1pg35BAYeaHdz

• Researcher Uses Claude Opus to Build a Working Chrome Exploit Chain

  Amidst the heated debate surrounding Anthropic’s recent announcement of its Mythos and Project Glasswing models, a security researcher has demonstrated the tangible cybersecurity i

• CoChat Launches AI Collaboration Platform to Combat Shadow AI

  Shadow AI is by definition invisible to and uncontrolled by both the IT and security departments. Shadow IT is a long-standing security concern. Its primary cause is the employee a

• Mirai Variant Nexcorium Exploits CVE-2024-3721 to Hijack TBK DVRs for DDoS Botnet

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6cxZZMfiWctk3Me9QO6UlzVRFab0SPGMTzThjpcPHCXm49bQ0rRvtG2W6gicJw4Mi1QUuv-yTDMK5GKJju3QicyjYJwdbA86Ok8w2oU5Vg28l4s0HAVv7

• Apple Works on Fix for iPhone Passcode Bug Linked to Missing Czech Keyboard Character

  Apple is reportedly developing a software fix for a frustrating iOS 26 bug that has left some users entirely locked out of their iPhones for months. According to a recent report by

• White House Chief of Staff to Meet With Anthropic CEO Over Its New AI Technology

  White House chief of staff Susie Wiles plans to sound out Anthropic CEO Dario Amodei about the artificial intelligence company’s new Mythos model, which has attracted attention fro

• $13.74M Hack Shuts Down Sanctioned Grinex Exchange After Intelligence Claims

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPcUvJCFRqDmEr1ZDSaUJCAymmKwZOeXdmfPY6Eekp7tLOpqjXLKHilHOHlNyuxmennQE8H5oxuRTaCncC8hsoGYEloD8OrDlR1wpbxGivBBB7KdVX8kiv

• OpenAI Expands Cyber Defense Program With GPT-5.4-Cyber Access for Trusted Organizations

  OpenAI has officially launched the expanded phase of its Trusted Access for Cyber program. Granting select organizations access to its specialized GPT-5.4-Cyber model to strengthen

• Tycoon 2FA Loses Phishing Kit Crown Amid Surge in Attacks

  Threat actors have migrated to other phishing-as-a-service (PhaaS) platforms after Tycoon 2FA’s disruption and are reusing its tools, cybersecurity firm Barracuda Networks says. Ac

• [Webinar] Eliminate Ghost Identities Before They Expose Your Enterprise Data

  [](https://thehacker.news/ghost-in-the-machine?source=article) In 2024, compromised service accounts and forgotten API keys were behind 68% of cloud breaches. Not phishing. Not wea

• Microsoft Teams Right-Click Paste Broken Following Edge Browser Update

  A confirmed bug in Microsoft Teams desktop client version 26072.519.4556.7438 is disabling the right-click paste option for users on Windows and macOS, with Microsoft attributing t

• TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks

  TrueConf Zero-Day A high-severity security flaw in the TrueConf client video conferencing software has been exploited in the wild as a zero-day as part of a campaign targeting gove

• Android Developer Verification Rollout Begins Ahead of September Enforcement

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipVNIw-uYi9MySm3LytKQD-PQgAh4NdQleZDyrEC4zBRuNzOf2qjlvwgPMg8qsq1sopzgKv1gOlJuQCEs9dq8jwQVdonLibQPmhJX8ZzOwfgyF6cuoixyo

• Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj39e4BXzk1M6BK7XEJcfogVbdwnYJjie08kNTAeW5T46Tn8UvbbaYGrrEpgw1Pa4IpJYeGe8AR7TUCp4vWYTcG-c5DY0HNlHW-8SbYkscVvjAKjKR3gHml

• Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4u0-Mq5eI-6nWqV9d-E4BTvsdeDTEcK8Bo7pHnANyD6m8b8d5dPcx86sb1P-PjfLce84hgNF8ja8y2tvnYjlmvE4VGzyvAyGqd6TGOxYei3Oz-FIvVEDx

• 3 Reasons Attackers Are Using Your Trusted Tools Against You (And Why You Don’t See It Coming)

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnuThJU5o7fpNxZwlNpyZFxPX9Y7rDp2TF2zUrPTRMhLEcnv7UQfdVgoAJ5gh8-JpgNvnJOG5dbOABLCmemzmYazgTwPTxScbn9vlwlCouNIuKZvmaeE3m

• New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyWMOJn1hRPua9p7XXWPbTqgrYvXyaNEXlnlLUQ0duD4P-W9fGyvbuprkiN0IMEE52vzt5mc603V4lG5eH5KpKFgmk-lARuEXxcQVIgCNb-NPJghF3wvF9

• Casbaneiro Phishing Targets Latin America and Europe Using Dynamic PDF Lures

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpJd0tgZX0EzqjxkNOrJsyGRUV4N21qsJC30j2VYYargUXl2tPzBidXWWmAG9Wfb5f683WOOle2CElerewagtzAAI8sbcJ9XrCbtgcSRtWF-itSYXH4hbT

• Block the Prompt, Not the Work: The End of "Doctor No"

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvlo2Z4APlfxwY81FpX62ySlxihctfAGwiT0WYd1bPrdk5sMFO8w7xRzVqn9vYqFpE4TSS80iuNQZ9SgcR4Hz8f6WYFhD5OaoRmY-sD20cYox6Tx-xbhia

• Microsoft Warns of WhatsApp-Delivered VBS Malware Hijacking Windows via UAC Bypass

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgq1lOqG2e9eetuSt3ne59NkxH-r0lCjnTmodLlbXt29w5AHutoClwW1RfvpY5rC7vqb1rVBR4ApELx1ROFvmuMpPpk9R7tshflL0WwPRuD25vu1gzaFuul

• CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4SwwNEiRJL3-C8lgRSj7XKNGuxhA-uAdcUZBQRRzmC16xbgg4bYkHTBz2VTfXOle8Su66hHz8vDXIOOQ2nFXlNo8wOIVWYGmVW-c9X4Luqx1-qFCiLmOM

• Apple Expands iOS 18.7.7 Update to More Devices to Block DarkSword Exploit

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOPIq2XjzxLFTE4iwZWuKsLifOBVn0sVZv2vDEl0D3eXsyiW8ePJH7ukb29zq7gb7-7fJy8WjCRC5e-sYoMLXT4ZE-12llaj0H76qjygPmEl7cuGiC4jrL

• WhatsApp Alerts 200 Users After Fake iOS App Installed Spyware; Italian Firm Faces Action

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhH1Qe0E88MYHp7xg6ApE5TypZK02tmUnhvX60svA9npwirnTJbAb-Wl4rvLo3gq3kX1l9JUXDgXZJ0yPGNZlUo8n5DG1-pqONNFQIA2epqNdU7tNGZSJPJ

• The State of Trusted Open Source Report

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5yI578d17vaAxuCMW2SLrz3ibI4ibSfdDCfum-B3VZ0Ukyd79Eue2VR8ofUCBpISSXsL8biYdRFyuMm78T6PTU7U1w6jJK3qV7ohPRSt3NGDTtAkseitL

• Researchers Uncover Mining Operation Using ISO Lures to Spread RATs and Crypto Miners

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpKoZinOy6MS9s0nTi1TV12H46KUmgkxu0kGinPE7yyq7Vpo9lmmcz30e5ve0yCk2T0ETCedeV6aXs0iEjI1rOykcXwBPa2a11yb75bjgjad7WKkKgsUAv

• ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEht9hzOUmn8npVxCAyWUe1DLsv1VkWHox2PmDxZnVuGXnQt7R5l7CZHlYu9m9BcwAib4L0j0x877sDuCF2shmSH3ef0Me-m0sbKDtu-ZEw5RLqLGNsjGJ0o

• Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromise

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH6wuST9R8voZTpCC-v5LSwd4O7vlbuRDhXMzcSw9iu0k2JvFOao-3Jr2o9iCs0jqX3pIqHvcYon-5Ad80WXeQXKVDTgJUN0A6nl9f73BA1U0wRoZBqgyS

• Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8T48UROZtSjRXtkxVcNT2VmXbB1texWQPAqLbm06uwmJ8VsYFbHeXOnZx9uz9QL-LB3aWdwcLm9TbuRler7w7jjXJlLtQweQualaW4XEVav7YsulqxCJy

• Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRK

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUiYsLIirEMJ6RmQKL7LnI8V0CmqL2qggZITpbnhuDXgXPAsXZ7cGv1KBjp1VBfeBVjUHypgPIC1DENjD735MO9gZQVPZOxI424cuWoRowXBNflIs3rteC

• New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2s09d3X9qYABLHP5v1u9iyjRN5p28u6xvnL0qkKR1-s1CsqtIDAWeQCFKQ9S4Mde1ueUmzcjNA9SAzWN-lDWwbmTmmlwbbLkyKx-EJc2-bjhKlEsChsp3

• Why Third-Party Risk Is the Biggest Gap in Your Clients' Security Posture

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVOZWf-jO2HykRTz3eVXj5HliZeT5oLJzIB9b4aX4fX0nV9zUgCHLWU9qxq7Uipi77Sf7I0DfRNGpmI0DwAZTusda6siewFmPGUnLjPIrsUDwagoy7PyaU

• UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzgZRu55MSbdanW8-1PyCciQIyWUcB9Dv4WhQQEELGJqahN5q7MyrDJKQ77e-9-fNetZJZiaJKERrgMWTGcQ-4TKhzhWE6veQp5w3wxhUnjq3NPMifbpdn

• Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2zEf8l08MTElI1sGlJPVVWtscud2RAXdsivOvcby3pO4NUWMBioT3FNaFL7Bw0GeEqnXWqY10FVqXhVNBTOrl0UMPoyun7AvshwpvfJIdfdJ0yJ1V2mz7

• China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgi-dKCldJqtZI1CocMVxHNKusU5tcnMKjx7mzG9EfehvGacnTy4tsTfZLMfhyphenhyphenC5W210OxrxijBNAP8UumXAZH15ZSOM4x8xb9VTIHxN1HCou

• Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

  FortiClient EMS Fortinet has released out-of-band patches for a critical security flaw impacting FortiClient EMS that it said has been exploited in the wild. The vulnerability, tra

• 36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9axxKrcvcFkL99SIB2AlrcEW2RIZ1Ff8PollH7XYSWrYSOgoPXKlF5rsdgyr9BSWVUa5oP07faIDvxNyUkrpuz5i2xuiEdlU-e929rCWpkLjDGRs4EBjz

• $285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2eFUAGb2m5vs6mOwArunSX0lzBpR8Ag24yQhUtaYxrcHx2V46YcocY9oei-HH89QSB-HTxXta3bLH70n6zMCRD949ttVsKlt4WnzSZ0rl1v4Suj3A7xft

• BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsBHK8DX9E30isZVcn1e-a6p8bmNUAki0SmUh1Tkt9dP8L3D4WcwT64CI5OVuh1brb1Z4pff7onp90K76ktHbs6-H6Kr0rq9Q2f03oW91e3mA5dN5XdLDy

• Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools

  Qilin and Warlock Ransomware Threat actors associated with Qilin and Warlock ransomware operations have been observed using the bring your own vulnerable driver (BYOVD) technique t

• How LiteLLM Turned Developer Machines Into Credential Vaults for Attackers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhbMDHeEKBkLDrqXHQ8NZfqd3KdR2hzLuhCEQuQKp0yXA20kmu7JR385GZdV94U615EVunwKkJkDSHlqeoEiu5pB4uElhCSOvOXWsVUUJvgNkmZE1Z22oyI

• ⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZyEpyaWHYHm8-TyNZQgYtoAqrsAUDZ0onxgp1BUSV0khgAkwy7S9fMT75sRAm2blJXN6xw6i4r0fXPhayN2Afrr7ul6egJc2nvFJUoWqmy0iJCr5JdK9-

• Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixIItKplcozAxhBXqaAcKz33Dp67WELaaBHZDIxGe7-qkKNWIITVvI4a3jSBA17z89XvJMprYsmkylYUvuWW4GeMWTWgBCWLWc3izPx4XtlW1PJDcbt1do

• DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh23Q23hk6ndf9evdsf7JVcn5OswTUqwd0B8EvWdftPQXN4K1V6nHICkMvzLf4jUfCCHpUmaZIzECekbKf3PQ2w2gRlY-AphdBRZgyJHq7XQsyISvp6iTfV

• Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgf4g-Zhhi4P6IHkSqUlU3EzCQNKPJ1nV3mWfQAtS6gfGu6H7wuq5OgVXGvF1IM2afayopX3b0zj4bjVDYaO7dBc4rl0A0Y6GND1VkbLdugULVW6a6P7iN

• Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjCGR6ZfT0UppVPQsgk7lwTbzfybdDFY-HeJi9F6VE6HuN7-Ja-lpveDnPA-kcS7x8l1oZ0lUqPoEFdRTOMt0Z8H6EeTNadVP7bjlh8Je6Q-T5KAlOCzOWt

• China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhN-ulbNH0WxLgcWOo1fnNpmYNLvHo4VW23VmfdGvDlcbd9IvuUBKMp1hY21B2NlBxtCNa5FCPEzjxPaLpOhz2uXR22uAmgHF0n-wJMb6DZmPFPjlC2QsYb

• New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjD7E4oEicfW1OaHztWEuM4qrsJFnHRPJ41f8R-2VeKUFV3Y59XaBUctumc2R91miQ3dMPnwkEcpPMqFErKmPRJhS3VRceve1GOSGGUsP6WHGIfoQAuVV10

• The New Rules of Engagement: Matching Agentic Attack Speed

  The cybersecurity industry has been drowning in waves of speculation about the impact of AI-enabled attacks since ChatGPT was launched. Today, that speculation has come crashing do

• The Hidden Cost of Recurring Credential Incidents

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKmTyBv8aWjZuBbedJ5TZkS6Y66K940b-vB3d1MoHwX2AXWb8xmabo8pN7pcFBicVbmRmK22bzd9nX3XceGzlcmkfej9nF5VJk1srniaJ2F28JEmeFynSR

• Multiple OpenSSL Vulnerabilities Exposes Sensitive Data in RSA KEM Handling

  OpenSSL has released a broad April 2026 security update that fixes seven vulnerabilities across supported branches, led by CVE-2026-31790, a moderate-severity flaw in RSA KEM RSASV

• Anthropic Unveils ‘Claude Mythos’ – A Cybersecurity Breakthrough That Could Also Supercharge Attacks

  Anthropic may have just announced the future of AI – and it is both very exciting and very, very scary. Mythos is the Ancient Greek word that eventually gave us ‘mythology’. It is

• Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNAquH2CuNdKvNbKqIsmTqg2Rpb5SRn8zxBKdQliREzpqByd0ye0aD8IFVa1JUj09QnQVJVnAVET30DX0jRBK1LBXJ-16QCGoiYDH2ibCfoYcttx3McOur

• Indian Bank Warns Users of Fake LPG Payment and KYC Update Scams to Steal Banking Info

  Indian Bank has issued an urgent cybersecurity advisory warning its customers about a rapidly spreading wave of fraudulent LPG payment and KYC update messages that are being used t

• Iran-Linked Hackers Disrupt US Critical Infrastructure via PLC Attacks

  Several critical infrastructure organizations in the US were disrupted by Iran-linked cyberattacks that impacted operational technology (OT) devices, according to an urgent warning

• Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1fiR51KBq7hNIR1D2V9e0jituEJTVutYd8b9v6KR0YdA30xWCSKJo3nfIykSdYSjZNe7gvNj3Wf3HidhZ24n-piDo8LhrE6ctyZrcLYNcJwCSP0KEe7G0

• AWS and Anthropic Advancing AI-powered Cybersecurity With Claude Mythos

  As cyber threats evolve at an unprecedented pace, Amazon Web Services (AWS) and Anthropic have teamed up to introduce the next generation of artificial intelligence for cybersecuri

• US Disrupts Russian Espionage Operation Involving Hacked Routers and DNS Hijacking

  The US Justice Department and the FBI announced on Tuesday that they have disrupted a network of hacked SOHO routers that Russia used in an espionage operation. According to US aut

• [Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk

  [](https://thehacker.news/identity-maturity-2026?source=article) In the rapid evolution of the 2026 threat landscape, a frustrating paradox has emerged for CISOs and security leade

• Docker Vulnerability Let Attackers Bypass Authorization and Gain Host Access

  A newly discovered high-severity vulnerability in Docker Engine could allow attackers to bypass authorization plugins and potentially gain unauthorized access to the underlying hos

• Hackers Targeting Ninja Forms Vulnerability That Exposes WordPress Sites to Takeover

  A critical-severity vulnerability in the File Uploads addon for the Ninja Forms WordPress plugin could allow threat actors to take over vulnerable deployments, cybersecurity firm D

• Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6xcrxyaKNQYXfVN-AHFfiSrJ8SwW3v7MgKlJNBi-E5WIwT3ZNrNm4fcT0JZKHHLH9fbtMKdYhG2DBHxkIy7-EydaWvEeeo4LDRPgAJ1K8i-YFeD9a0gPn

• Amazon S3 Files, Turns S3 Buckets as File System to Access Your Data

  Amazon Web Services (AWS) has introduced a major update to its cloud storage infrastructure with the launch of Amazon S3 Files. This new feature allows organizations to access thei

• Evasive Masjesu DDoS Botnet Targets IoT Devices

  Trellix has dived into the inner workings of Masjesu, a botnet built for distributed denial-of-service (DDoS) attacks that has infected a variety of IoT devices. Masjesu has been a

• Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBiMBUkucAS1NG7NHlk46hGqNyjv5iU5w1Z6HVNXgQywcDfTSOdtQWSqYA5ccSojgRB45ScYHFfyPWqe9QbOZYo6u6V5qUAcRQIm4CfIDvkRqhs7rtPhmD

• Google Expands Chrome Lazy Loading to Video and Audio in New Browser Update

  Google is bringing a major performance enhancement to its browser by expanding native lazy loading capabilities to include video and audio elements. By adding the loading="lazy" at

• N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, Rust

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiJCapdeJ9Q-yAbFZ7EG69FNgjPvK7YptY2C7TN6txlcPMbvVrcbqN1bi-vy2IFi8Ai485K-DZblHR8XwZxdch90kWSv48wjvZF7oj0wy0IMd-B7VPuSiU

• Massachusetts Hospital Diverts Ambulances as Cyberattack Causes Disruption 

  Signature Healthcare in Brockton, Massachusetts, has diverted ambulances after a cyberattack caused significant disruptions. Signature Healthcare runs Brockton Hospital, a 200-bed

• Microsoft Confirms Recent Windows 11 Update Breaks Start Menu Search Function

  Microsoft has acknowledged a server-side issue that disrupted Start Menu search functionality for a subset of Windows 11 23H2 users, and has since deployed a fix to address the pro

• FBI: Cybercrime Losses Neared $21 Billion in 2025

  Losses resulting from cyber-enabled crimes went up 26% year-over-year in 2025, narrowly missing the $21 billion mark, according to the latest annual report from the FBI’s Internet

• Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihvGfSh39Lhl5ird3iuR-T4gkaVejmXgtJ4VwbkLxAqG2hBZWkqQ8LR5k8wfuapt8oUdtifp8Le-uA6Xep8kGe3BRCx5qM1vY9DiMCnMgTFeFK8bc0wBSU

• Anthropic Unveils Claude Mythos Preview With Powerful Zero-Day Detection Capabilities

  Anthropic has introduced Claude Mythos Preview, an advanced language model with extraordinary capabilities for discovering and autonomously exploiting undiscovered zero-day vulnera

• RCE Bug Lurked in Apache ActiveMQ Classic for 13 Years

  A remote code execution (RCE) vulnerability that lurked in Apache ActiveMQ Classic for 13 years could be chained with an older flaw to bypass authentication, Horizon3.ai reports. A

• Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBk9NZeohGdUGAoq15KdOgD1oLAfVbW296B80LqWpzR3Cal5Zerxl9gJCmrK9g9WROjalAzzvElgqRAm-2WtyxAJLfisSZ7b5SHwDR4QvJnuO5H3g3W3Qd

• Hackers Actively Attacking Adobe Reader Users Using Sophisticated 0-Day Exploit

  A highly sophisticated, unpatched zero-day exploit is actively targeting users of Adobe Reader. Detected by the EXPMON threat-hunting system, this malicious PDF file is designed to

• APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBiilqDko4PDmo2Iu-E-25PRzUJ2LygbHdv1RsdA31AkJBL9QB3AzdxV4j-jo2Xf9wXwlienf17HOuJyiue3JOWNfTFdln4gXJcounilzPxOsIXpN5g6im

• IBM Identity and Verify Access Vulnerabilities Allow Remote Attacker to Access Sensitive Data

  A critical security bulletin highlights multiple vulnerabilities in Verify Identity Access and Security Verify Access products. If left unpatched, these widespread security flaws c

• Data Leakage Vulnerability Patched in OpenSSL

  Seven vulnerabilities have been patched with the latest OpenSSL updates, including a flaw that can allow an attacker to obtain sensitive data. The data leakage issue, tracked as CV

• Smart Homes Are Getting Smarter—But Post-Breach Guidance Is Falling Behind

  Modern households have started adopting internet-connected devices, ranging from cameras and speakers to locks and routers. However, with this technological advancement, the risk o

• Latvia Warns of Disinformation Campaign Targeting Baltic States

  Latvia’s Ministry of Defence has warned that a Russian information operation is currently targeting the Baltic States, with false claims that Latvia, Lithuania, and Estonia are sup

• Three China-Linked Clusters Target Southeast Asian Government in 2025 Cyber Campaign

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMVmr08UFvUwMkDRW62724LCJu5Z774vza7r8UADDdCZcBFNJTeJ9WPFkt4BLIknMuCpLYow39D0rgDkTkftiSLBxtPsG3YW6Y7CRiPRxye2Con9Z1lP77

• Healthcare IT Platform CareCloud Probing Potential Data Breach

  Healthcare technology solutions provider CareCloud (Nasdaq: CCLD) has disclosed a cybersecurity incident that may have resulted in patient information compromise. CareCloud is a Ne

• The State of Secrets Sprawl 2026: 9 Takeaways for CISOs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4tVpFBDvdU-vz8vM1T6SJZwd3AiySFqEyonUutxGPNimXEqTVOKN-pCIlF5Ti2GngFUPtEphVI4Qep03CBciF7NhaWEIKYdDfkVY-VleTTcqYJvcMTKrd

• Hackers Impersonate Ukrainian CERT to Plant a RAT on Government, Hospital Networks

  Ukraine’s frontline cyber defense agency became the subject of its own investigation last week after an unknown threat actor built a convincing fake version of its website, sent em

• CISA Warns of Citrix NetScaler Vulnerability Actively Exploited in Attacks

  The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical vulnerability affecting Citrix NetScaler products. Identified as CVE-2

• Critical Vulnerability in OpenAI Codex Allowed GitHub Token Compromise 

  OAuth tokens are frequently complicit in breaches involving AI. When researchers found an obfuscated token while examining the relationship between OpenAI Codex and GitHub, they to

• Russian CTRL Toolkit Delivered via Malicious LNK Files Hijacks RDP via FRP Tunnels

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh05CEOtp0cIlsi1qDK4HRH2PPOFyvB5jca65pAQVsnCfBHZ-wRGt0s8VhvzOl-4Q9HxGKQsOefVGzJ46ElLQNaqFEp6wPUou4aqTvEKMPlEEGOTyEtISTj

• Cybersecurity Is a Calling, Not Just a Career — Dr. Priyanka Sunder (PD) on Women Leading the Charge

  In a domain still striving for gender parity, Dr. Priyanka Sunder (PD) stands as a compelling example of what two decades of purpose-driven leadership looks like. A multi-award-win

• Apple New macOS Tahoe Feature Warns Users on ClickFix Attacks

  Apple has introduced a new security mechanism in the macOS Tahoe 26.4 release candidate to protect users against social engineering campaigns known as ClickFix attacks. Discovered

• Lloyds Data Security Incident Impacts 450,000 Individuals

  UK retail and commercial financial services giant Lloyds Banking Group has disclosed a data security incident impacting close to 450,000 of its mobile banking users. The incident o

• 3 SOC Process Fixes That Unlock Tier 1 Productivity

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFh5EaxE3C26MNKxziPoKvAK16f1ctGNYfS1E7IY1tfyazizZwtmHaqHaTHSqBwWAMtENhtk5K1GzWLRln80K-vm2S9lkVeE3tpfQeVTaptmT8kNoeCFLD

• CareCloud Data Breach – Hackers Accessed IT Infrastructure and Stole Patient Data

  A prominent healthcare technology provider has formally disclosed a significant cybersecurity incident involving unauthorized access to its IT infrastructure. An unauthorized actor

• StrongSwan Flaw Allows Unauthenticated Attackers to Crash VPNs

  A high-severity vulnerability in StrongSwan’s EAP-TTLS AVP parser could be exploited remotely, without authentication, to take VPN services offline. An open source IPsec VPN soluti

• ⚡ Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2e5F9xrNGflqGG3Z7UcoPHMKZnF1j1FJBpwnPfV0MBCUweDKegb97Kcry4OK2kQgx0bQ91Lhem0BdasOpiN9UoKz7rNTAVgBuJzbM9jCaF4APqUsXlkiZ

• AI-Fueled Cyberattacks Surge in UAE Amid Rising Regional Tensions

  The United Arab Emirates (UAE) is experiencing an unprecedented surge in cyberattacks, with recent regional tensions coinciding with a rise in digital threats powered by artificial

• ChatGPT Vulnerability Let Attackers Silently Exfiltrate User Prompts and Other Sensitive Data

  Users routinely trust AI assistants with highly sensitive information, including medical records, financial documents, and proprietary business code. Check Point Research recently

• Exploitation of Critical Fortinet FortiClient EMS Flaw Begins

  Threat actors have started exploiting a critical-severity vulnerability in Fortinet FortiClient EMS, threat intelligence firm Defused Cyber warns. A centralized management server,

• DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser Credentials

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2icgdVOmzM5pZsm88HvvmzcWKRBBXvG94z4fSZMEVPzb7GDoJMGDckeaK2dYVEoId5bhMbBtB0bTc0xWJshdOQ-fJEUH5nPIo028Cpm1bmmR1Qlrv5M6a

• Intesa Sanpaolo Data Breach Exposes 3,500+ Customers, Draws €31.8M Penalty

  The Intesa Sanpaolo data breach has resulted in a €31.8 million fine from Italy’s data protection authority, after an investigation found serious lapses in how the bank protected c

• EvilTokens Emerges as New Phishing-as-a-Service Platform for Microsoft Account Takeover

  A new and dangerous phishing toolkit has entered the cybercrime scene. In early 2026, a Phishing-as-a-Service platform called EvilTokens began circulating in underground cybercrime

• Google Slashes Quantum Resource Requirements for Breaking Cryptocurrency Encryption

  Google’s Quantum AI research division has published a whitepaper warning that the cryptographic foundations of most major cryptocurrencies are more vulnerable to quantum attacks th

• OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSleuSc-PdTH7u0CSOLasljqQ-HO4A5sIqzvVeeVlGlqynCVYSdgU1c-7zoVavi1OADQiN3-KS93PbMbmc4daNULqCXV21ChjnRUvqXIPT9mnLRCmbHdVy

• WordPress Plugin Vulnerability Exposes Sensitive Data From 800,000+ Sites

  A high-severity security flaw has been disclosed in Smart Slider 3, one of the most widely used WordPress slider builder plugins. With over 800,000 active installations, this vulne

• US Man Admits Guilt in Child Exploitation, Cyberstalking Linked to ‘764’ Network

  A 20-year-old member of a violent extremist network known as “764” has admitted guilt in a federal case involving the sexual exploitation of minors and cyberstalking, following his

• CrewAI Vulnerabilities Expose Devices to Hacking

  Threat actors can chain four vulnerabilities in CrewAI to perform various types of attacks, including remote code execution. An open source multi-agent orchestration framework base

• Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdY8iKA7o-K-4HkIjPMiBRWAn5vCvSNDu1sm09t10vWMzXO6cIblLHQyu1no-KBhq4W7EWS03zqvI4nk9mYWCDsCVoiX4cwsV9T862WTq1yGb6VkX1ZGTa

• Anthropic’s Claude Code Source Code Reportedly Leaked Via Their npm Registry

  Anthropic’s proprietary Claude Code CLI tool has had its full TypeScript source code inadvertently exposed through a misconfigured npm package, after a security researcher discover

• CareCloud Hit by Cyberattack, Probe Into Possible Data Exposure

  The CareCloud data breach is under investigation after the healthcare software firm disclosed that hackers may have accessed systems storing electronic health records. The CareClou

• TeamPCP Moves From OSS to AWS Environments

  The threat actor behind the widespread March campaign targeting the open source software community has been using compromised credentials to access AWS environments and exfiltrate

• Silver Fox Expands Asia Cyber Campaign with AtlasCross RAT and Fake Domains

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgQmoJ2iwUTLR-DicdD0xa7oYXgpGalL3L-4LyX9YMApiotQC-omFlhdcQByUQat1YJdd7ElMqhp8FDYpoaljcvVmCFPXS4yRRh0KnKa6FgqoEpiaKHJho

• Hackers Deploy Telegram-Based ResokerRAT With Screenshot and Persistence Features

  A new remote access trojan known as ResokerRAT has come to light, using Telegram’s bot API as its core communication channel to silently monitor and control infected Windows machin

• Axios Supply Chain Attack Exposes Developers to Hidden Malware

  The Axios supply chain attack that surfaced on March 31, 2026, has raised serious concerns across the JavaScript ecosystem, exposing how a compromised npm Account can be leveraged

• Venom Stealer Raises Stakes With Continuous Credential Harvesting

  Stolen credentials are the primary access route for cybercriminals. The use of infostealers to supply those credentials is the basis of modern cybercrime. Infostealers continuously

• The AI Arms Race – Why Unified Exposure Management Is Becoming a Boardroom Priority

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1pgefAVGqPo1F0pVFtbxdewmfgaNvrqH-R-BydTTpenzbOZGvoJMA7wwiXzhDBcxvhEm91tK9CsPBiB24g7WHylYCzuO8XI9tCraDla-ePrNFsli1YYrt

• Google Unveils Ransomware Detection and File Restoration for Google Drive

  Google has officially moved its ransomware detection and file restoration features for Google Drive into General Availability. Originally launched in beta in September 2025, the up

• Jennifer Cox on Why Most Security Teams Never See the Real Benefits of Automation

  Nineteen years is a long time to watch an industry transform — and Jennifer Cox has had a front-row seat to all of it. Two decades ago, cybersecurity barely made it onto the agenda

• Stolen Logins Are Fueling Everything From Ransomware to Nation-State Cyberattacks

  Like an inverted pyramid, the range of different attack modes are now built on top of the single point of identity abuse. Stolen credentials are a major threat. Legitimate credenti

• Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLtnrJRJvkUE-IMtV6DuDmg7t1XhaGyItG6cXmd2cz0-3sd8fgZi5jHZE9valO1-CdJjGcqkkeHxNPM2Y7lLK0lrtJXOEwXscylBbYfyCXtvvAfGeFR5Q7

• Hackers Weaponize Legitimate Windows Tools to Disable Antivirus Before Ransomware Attacks

  Ransomware attacks have gone far beyond simple malicious code. Today, attackers operate with the precision of a well-planned business, using trusted Windows tools to quietly tear d

• Apple Warns Older iPhones Vulnerable to Coruna, DarkSword Exploit Kit Attacks

  Coruna, DarkSword Exploit Kit Attacks Apple is urging users who are still running an outdated version of iOS to update their iPhones to secure against web-based attacks carried out

• DoJ Disrupts 3 Million-Device IoT Botnets Behind Record 31.4 Tbps Global DDoS Attacks

  Global DDoS Attacks The U.S. Department of Justice (DoJ) on Thursday announced the disruption of command-and-control (C2) infrastructure used by several Internet of Things (IoT) bo

• Magento PolyShell Flaw Enables Unauthenticated Uploads, RCE and Account Takeover

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmvoo5bgNhw6SuInM6rRHpdtYFmiDdMlG7hS2GdUJfwhXoOClt29lEpxaqI27b6XOOfX3eO8eHlUM0LA55P9UHfWgVPyqDWMO01Chkp6aC-is0292EqVXP

• The Importance of Behavioral Analytics in AI-Enabled Cyber Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIq94dqdTz9Ic4q8eAt2c90zqmtdvYtzdDTv5UHg6On7d5AiYKyX4DbcskeTXNuTucj287szoc6-QWLMwboEKuRYM7yeW9KstNR5irszE54SZvzHyFo7NB

• Google Adds 24-Hour Wait for Unverified App Sideloading to Reduce Malware and Scams

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgg5Jk2lVSKahNb8j13vUPG5pkYP6zhO6lI9b-X50lBxAq5yluF0ly4g80Z51IS-x-gwqVV3xIRyu5e9fMQb7Rsebhd1Als8TDnY2nLGESKkaVOP-balDBr

• Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure

  Critical Langflow Flaw A critical security flaw impacting Langflow has come under active exploitation within 20 hours of public disclosure, highlighting the speed at which threat a

• Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNf7vYlImTCJ7BCjYYEhoFZXTawhHcJJad9cFjQn98oQjaPY9HY6Qgpp6pAyqkq7CNHyVXI9fR8hcyVNlWknYia3f0BhAlK7fZb2gplznk9v9QCFGKtIbM

• CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJQDea3eiUAONNSYkmQsjicwXBMSALOAUJi7yPHqOStd9N-KBADSGXjH5zJS66VPyzi7-w5ULK7Ax9qH66Av9E3xIL8BB7sDKz9d-ZbmlyqeyfKyCUYBb1

• Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm Packages

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJqn31IC9aCQ9LMLCLRXgpwsa1gvtzXlYk20-1yRmCMYVMMwGHedfSgbKl24yaeTx4fqRc4-vscge-d3P6sN8sErQBVGD0kgxMGzV-mDCI1wGFh87BB8me

• Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxIh9aqIMPc6elNLcqZwmxGq0BHfA3NS2kkxawAr-H7SzPJKmvc7tXrykcm664TGFkJUIbBmGpJV0CkEjIxVoRfTCrc8br5biTL93Nvg7Jc9ccucZL4e55

• FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjiMsZnvgdoACYJn8WjDyLpvpy1iqvGpj-vb4hYfYTLujLp5dm8WZKjl64LYwY4-MON0-1k8-F2K3KDu0QG7isYjhaMvre0E0vrqJCSP49r2j374JPbV6Wv

• Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuTlyFHjxX97gPhHFjyvPGAPsLFbWQSHzAofYEPTsqZS1Xyc4KjjMDOqW-N7Iku9d1cuOJLI7EMdA-kA5X86I2neC5efkXETfsIVOZcIEVfLxWKFEnR3qX

• Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3tECPxIu-t1cl5YE211vm5q8dB99cO4mW6hbz0jCRbtDjalNgI7gX42M9MQAkty0IsWyxB3cJDMOpKbqQlLSKMnjbGaBOJHB9QslmSQB6-96o4RlaFLKu

• Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEie9fqlMd4OuFVtXiIjViNTGyYhyol3qoSCp1VC7Au7Zp3ccwTT2YriDd5iWY7vc67FF0inmVd16ko0WfG3C57cyOs-I3RNaQXnk2eyfKefaJajCkfjvD1r

• We Found Eight Attack Vectors Inside AWS Bedrock. Here's What Attackers Can Do with Them

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNP5vhVrLuEm9ElBgbLywUuexUg6KzaMreEfpqeSpQnonIKWfB4fcCXbXrkxTwUoqXqxjrXZdZbppYseQBmTTSXeZT3PLsXoUIKdVUxawVdz4e33nE6iPx

• ⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhe8A2RKkUN6BATGKH48mi3J6DYVutxBllcmOiNl7N3xeqPx9sySaIFdxMxfIp5VQksSCBdRKtpNpiWUcTo5VNClmu6dbs6hoM9Ljx3QXAWEnAjKAG0Vc8J

• North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware

  StoatWaffle Malware The North Korean threat actors behind the Contagious Interview campaign, also tracked as WaterPlum, have been attributed to a malware family tracked as StoatWaf

• Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMCnGCqDsAE40JVqQy2HjOcbqucRBcpx0JOpEQM9SZplWbseyzvfQGRG8Uux9NVkQhQrHYzTIlb3b58b47kkLOfIBcxeaMVT7SlUjBSr3URnME7qL5P3Zq

• U.S. Sentences Russian Hacker to 6.75 Years for Role in $9M Ransomware Damage

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVfjLGmDd5Mnjn0nKObBSns5Fi2bm8nQV7byjMhN5CmXRVoFHmNnjgUwsinDvclp6VzhMKGYrouaba9qJ45z-C-1K4eapplrlstzTO9Q4edC5rj8Yh1A8g

• TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhs6mMRIch1O4gn0txxM6yMSRtvi7D0xmBbphFA0WJimqGO4k48KNvAbF-an7swi-N0ZHOB2jt1WtJQjubozx7WzJH6Kr0CA0rCkP4TNUHR2NkC8NS6RaJD

• Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlh6CuYJhvsInqih03x9cvHFvmbF-F8DFJFY9VQMslT9g5ypjhDewDUjcvUlAMzyKbfOHz0eMdFqHdIGwbtOY0MOHDGrlA1TraO34SwYiKrieNnOQsAo5D

• The Hidden Cost of Cybersecurity Specialization: Losing Foundational Skills

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQpYFvavgLT2A2jdfoBL7Wp9ezuo1HDTIJiE8s2Pa5KXH-TOCWZqUGhcg6xb2WBpXtHUpH-tqYI3zUXmr-rWNMcrdZHIda5PaWdxskk39iOZqxz0ltvvh-

• Hackers Use Fake Resumes to Steal Enterprise Credentials and Deploy Crypto Miner

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbL1vWsuHhVXpRJ6YeAB7bUhrZmz7Ba3LRQ7MsrXsIVCXfxCMUs4nedbI26D5FpMqQ0uL6APhIlu12GJdDMWZ9AbGiz7qu5gUinMjsmh6yxiuqZvUzSrzj

• 5 Learnings from the First-Ever Gartner Market Guide for Guardian Agents

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNlBFOfxbwROPKI6W1sccbKKW4Dx3IGIQi1AnDrQqKxY1xaVxZv9gip61deVh8UNN1xLX6l3fOEm8pKGrHLSddhT8WS7w70a5FDT3eyew3xxDjCOC8QCYK

• Tax Search Ads Deliver ScreenConnect Malware Using Huawei Driver to Disable EDR

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHstwfvuhTqeOC7VWnSCBcxuxkGXQo989hK16LvSpzSRSYHXlBOeg2O61FYeF2rcfwnXFxzQHEkDyXYB6CGtMIB-qEfIMK3vMu-COHBNk5eOdwofhao0Ho

• TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 via Trivy CI/CD Compromise

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj52VkG6lfgHeRYSGJwB7xAkCm54uKyAUtZ3NiyGrlOTFUzejzA3uU0HPKiFCCvp1PSXhtiSqTROkqIvJ3kur9VTYMRRQRV4M90p2PVw28DxOUbH3CnZBgs

• FCC Bans New Foreign-Made Routers Over Supply Chain and Cyber Risk Concerns

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCWdGgQ4RKWsSD83uBmdU0Vfi3E1vEi1qS7ImOYUXa9S6eDs5ShKP0tz3sZL5FPdt6lzwG4scb7HQPjGnsdPDFNWxZ2k8yK-whH4uU9Ez3Nt5178ETgKce

• Device Code Phishing Hits 340+ Microsoft 365 Orgs Across Five Countries via OAuth Abuse

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifvDHwUAT0Y5sILbpMYi15pftc8kD-oPKrtaUucJ0PLeFRnxKsA14uMC3zCpTPZwj0w7GBTqFQCMfmwzzytv-RYTVBijkx2KWzKkS68n9QfolIhr2B3rSM

• Russian Hacker Sentenced to 2 Years for TA551 Botnet-Driven Ransomware Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSFQsR3JgSCA44WGyYmcmFuACIlDkUDxOnRar3b3B-JHXTZqdxARV6GEM5gvclJQktlfwnU88fV1Gzcr3HO7EJHoeE5kYA262Vv0SlCB6XPuyAiTSas8Iw

• The Kill Chain Is Obsolete When Your AI Agent Is the Threat

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIxwugQQz3vBJ2pK2wCBDYKIxoDHo60x7SHE5WQonARyDulZoAc7X7LDiThunfBQ60swcEgAMuqSwHykOcGvFnU3TRlGMbIiYJvAuJAStlKGb8m6wjPeQx

• GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvLAu4RdpX-vvdNOKVtvqBhpnDMoSdpatgQ3X32zeCmcAhOUZxJo37kHAf-0sBO3tTY8Pc6i4Jr9CWHwZ1nR7ikRy86CVMizlgDH40OF0kr3P7otHCE9-3

• LeakBase Admin Arrested in Russia Over Massive Stolen Credential Marketplace

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjj9UqvCgUXI-P9n0pHIj0a2d6gtlUe5ioSOzReAYnBthLWrwGhD0B9EKIlrrhiA8gsF61npoVKP8y1HftTKWD9xgTg0qBOHw2N3qn0Gak0BUAV9Jt2s8Bm

• WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDIJhct-gQspWhgoCYGYYTokFv7FUIEMJqaILu8IfMO3siPXFxR9g6eek-vKmgpFFO5QKCLBvl7pK8gFOGf8ZQuR6wVxOeBOxDm43bCBdmLDhPTyIGhoFs

• Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in Recent Mass Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqfaEjph6gMDAtZu968xynsgU3AggksTWUUL37NpNq6eQdTXMgQcv4JLSpNNMHSFGkKoHV6K7vmqLZ7bXIkXrHB5jF98FsN48HDQo0nligJdOjeJ5lOzlU

• ThreatsDay Bulletin: PQC Push, AI Vuln Hunting, Pirated Traps, Phishing Kits & 20 More Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOuz5FhCwEEsebWV1fHdF2VE-lnNBee6FrzMYsTdEODBsw07F76vTo3-UJKUz7QENWIUUJ7IdNj2vlhZbbdL5Chz6Vt6SyEbIwH-vw3J76SlUT02eZwbGH

• Masters of Imitation: How Hackers and Art Forgers Perfect the Art of Deception

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicYccGrhSqLyV14fb0UKZKIns-G-9cU181ytP5rPJvhMDJLPbmBBgiTIBALloFdEy87wloWgNeE3zCfQEYoS7uPOLec7Uk40LT9KFOiov2psTWX4XIabr-

• Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any Website

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvKbsVkCFVvziyQ564TDmmBjGzy6lzKUcCrmt-GZWOiCshAYGAhsMjib7OhvNS8OX6micW6hWSY4lWh6IoGcyytCywr9Tr-qhyI4Wau32zV80zS3OJRVnb

• [Webinar] Stop Guessing. Learn to Validate Your Defenses Against Real Attacks

  [](https://thehacker.news/automate-testing-security-posture?source=article) Most teams have security tools in place. Alerts are firing, dashboards look clean, threat intel is flowi

• China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDsXRdaBMsOY-JUezvB02i5xztpSMJYGGGmt3ujh5C7VDZ7YLODicjiwDHF0vR9Y6P7XfPJJ-sIzu3aElQOfOExYn15O9tjCrOubY531cg1hKVN7U1aGCq

• LangChain, LangGraph Flaws Expose Files, Secrets, Databases in Widely Used AI Frameworks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkhroYg33geYKogEf838RfX0FRNjBX23ucPFzrxtbtf2CyTxoGZZ4RbTArZX672fygWxhNN2MOX-SXaPzWJPOeRTrnLCzYzQZ2e-7HO98AIbj-wEXbrPWS

• BIND Updates Patch High-Severity Vulnerabilities

  Internet Systems Consortium (ISC) on Wednesday rolled out a fresh round of BIND 9 updates to resolve four vulnerabilities, including two high-severity bugs. Tracked as CVE-2026-310

• Bearlyfy Hits Russian Firms with Custom GenieLocker Ransomware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJahfZ55AqNWxz1cuJLjlOtmxDcBXqTxZ8URxFwRfQ1OsNpcQKZOafbe7MxL72WZ3c7ashklJn4nlUj6FD87PPAznL0bzBhlpRIpUTtHqluiAjZBZgMEPT

• Hightower Holding Data Breach Impacts 130,000

  Hightower Holding, the parent company of financial management services provider Hightower Advisors, is notifying over 130,000 individuals of a data breach. Operating as a holding c

• Hackers Use USB Malware, RATs, and Stealers in Espionage Attacks on Southeast Asian Government

  A highly coordinated cyberespionage campaign has been uncovered targeting a government organization in Southeast Asia, with threat actors deploying a mix of USB-propagated malware,

• We Are At War

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaOP8SQvGcKjVqTcrOQdTQqpsDiPV47qdwzHqpxth6iyxLDSHoBNBKHVyh5LUzM1W2LdABzaDP6TjMektIuSiYhTXirHygMx0Yh8dwpmREVfKUWPUiqRef

• CISA Flags Critical PTC Vulnerability That Had German Police Mobilized

  CISA issued an advisory on Thursday to inform organizations in the US about a critical vulnerability recently discovered in PTC’s Windchill product lifecycle management (PLM) softw

• Hackers Deploy BRUSHWORM and BRUSHLOGGER Against South Asian Financial Firm

  A South Asian financial institution has become the latest target of a focused cyberattack involving two custom-built malware tools — BRUSHWORM, a modular backdoor, and BRUSHLOGGER,

• AitM Phishing Targets TikTok Business Accounts Using Cloudflare Turnstile Evasion

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9MSv7TxvzRXdcpbtW0hSC0Jq57-VYEhbddL8im1K25nOcjSr0T3Y2f9zG8Q9l7K3UzOXBKWgnHAO9rWvYG9158OKLKcZiflq7e5fpqwxrW3IdPWzgTko6

• Coruna iOS Exploit Kit Likely an Update to Operation Triangulation

  One of the kernel exploits in the recently discovered iOS exploit kit Coruna is an updated version of an exploit used in Operation Triangulation over three years ago, Kaspersky rep

• New Silver Fox Campaign Hits Japanese Businesses With Tax-Themed Phishing Lures

  Japan’s tax season has become a hunting ground for a well-organized threat actor known as Silver Fox. As Japanese companies enter their annual cycle of tax filing, salary reviews,

• Open VSX Bug Let Malicious VS Code Extensions Bypass Pre-Publish Security Checks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxyuzdQgdhyphenhyphenfWqx9GyfXC7Bop28GdU7Bvyj3ZEvEBm8HbchBOMZFiLIGHSVFM9OdfCaKJSyAZzY3F3soB37-VtKEcYKShCnzB2D-t8DJ5mbS

• FBI Chief Kash Patel’s Gmail Account was Hacked by Iranian Hackers

  Iran-linked hackers have claimed responsibility for breaching FBI Director Kash Patel’s personal Gmail inbox, leaking photographs, documents, and email correspondence online. The h

• RSAC 2026 Conference Announcements Summary (Days 3-4)

  As hundreds of vendors descend on San Francisco for the RSAC 2026 Conference, the sheer volume of news can be overwhelming. To help you navigate the noise, SecurityWeek is providin

• TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1CMUCCEUOX5JczcW-qUC2Bw83GmKNoLItyUq-AeuCUvFrJJL0t6aW5EhyJzNT5OyQJulbqwy847fKEEBieTmTHEKn33suBcHss0AflwRWkPdmqT7FUbX5

• CISA Adds Aquasecurity Trivy Scanner Vulnerability to KEV Catalog

  CISA has officially added a critical vulnerability affecting Aquasecurity’s Trivy scanner to its Known Exploited Vulnerabilities (KEV) catalog. Tracked as CVE-2026-33634, this alar

• TP-Link Patches High-Severity Router Vulnerabilities

  TP-Link has released patches for four high-severity vulnerabilities in Archer NX router models that could be exploited to fully compromise devices. The bugs, tracked as CVE-2025-15

• Apple Sends Lock Screen Alerts to Outdated iPhones Over Active Web-Based Exploits

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiN7dxzt-3rxkQ1A-6Sd9EzxINF3V70WAx4hsUUNPofdWcCO6hp0vEHavIsQsCUyXY7hOUOk7kDGIt2zNgnigtzyYJyc31aiwpivHd4GEMPh0CHZHIBm58P

• Windows 11 and Server 2025 Update to Block Untrusted Cross-Signed Kernel Drivers by Default

  Microsoft is taking a major step to harden the Windows operating system against kernel-level threats by removing trust for drivers signed by the deprecated cross-signed root progra

• OpenAI Launches Bug Bounty Program for Abuse and Safety Risks

  OpenAI has announced a new public safety bug bounty program focused on AI-specific abuse and safety risks in its products. The new program complements OpenAI’s existing security bu

• CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation

  F5 BIG-IP APM Exploitation The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical security flaw impacting F5 BIG-IP Access Policy Manager (APM)

• European Commission Confirms Cyberattack Following AWS Account Hack

  The European Commission has officially confirmed a cyberattack following a targeted cyberattack that compromised its Amazon Web Services (AWS) account. Discovered on March 24, the

• In Other News: Palo Alto Recruiter Scam, Anti-Deepfake Chip, Google Sets 2029 Quantum Deadline

  SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broade

• TA446 Deploys DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAX955shB28AQ8BgXC9lMJBSEWWtw5FVp3L9rxuVnBSsDMpj5Ssjh7cqxd7eJIbES6b82XDHvxrH0UcyEXwbS05QkUbSDPzP8ZGcjy2QD2-gY9utPDfcJ6

• CISA Warns of F5 BIG-IP Vulnerability Actively Exploited in Attacks

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a newly disclosed vulnerability affecting F5 BIG-IP systems to its Known Exploited Vulnerabilities (KEV)

• Pro-Iranian Hacking Group Claims Credit for Hack of FBI Director Kash Patel’s Personal Account

  A pro-Iranian hacking group claimed Friday to have hacked an account of FBI Director Kash Patel and has posted online what appear to be years-old photographs of him, along with a w

• Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwI3gfUe4wDxvIuUsVXUVcyiZ6TWg7HIh7UgKbWXN8e5p6VbJM5hHvR0gCKbVRD3tx311R5b9TWnt0OrLNfpoSBrP1tv06PBWrUXtwzAZAvHVHo8a1uZXz

• Cybersecurity Companies’ Stocks Fall as Anthropic Tests Powerful New Model

  Cybersecurity stocks declined sharply on Friday following revelations that Anthropic has begun testing “Mythos,” an extraordinarily powerful new AI model with advanced vulnerabilit

• Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs

  macOS users are targeted in a fresh ClickFix campaign that uses a Cloudflare-themed verification page to deliver a Python-based information stealer, Malwarebytes reports. The attac

• Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgB5PedpQXDQaCrJ76V6gQtAUKvDiV1udgR3vPrPp8k7dcP8jACbAPITTEwRpl7dS05DzhYFlt2v4H6KTukko0Sg8vRZpDGgWNbGzVqQDwcntdMVmhb3x5v

• Hackers Probe Citrix NetScaler Instances Ahead of Likely CVE-2026-3055 Exploitation

  Cybersecurity researchers are sounding the alarm over imminent in-the-wild exploitation of a recently disclosed critical vulnerability in Citrix NetScaler ADC and Gateway appliance

• China-Linked DKnife AitM Framework Targets Routers for Traffic Hijacking, Malware Delivery

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYyMn4uLO-VZgiUrwRtAtJIOgkMnxpxz8eAMF1qozW3TT6F7vTTebQnOZuZHcioB-mqEHV7AT35sHZPKp5X2W6kJj0l8fZDPZoS11oLDOMh3v86rXC5IiL

• German Agencies Warn of Signal Phishing Targeting Politicians, Military, Journalists

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZLxiSHzgB4jnGhqSTb5U-LmLyQn1DAEdjL73NAKb8oapBTIPlINZbiOL3pHZNBlOHYI9yuZgxV8aRvGefuo5OzaP8TVtvoHYznKe-5Lr493T9s7hOHGCq

• OpenClaw Integrates VirusTotal Scanning to Detect Malicious ClawHub Skills

  Malicious ClawHub Skills OpenClaw (formerly Moltbot and Clawdbot) has announced that it's partnering with Google-owned VirusTotal to scan skills that are being uploaded to ClawHub,

• BeyondTrust Fixes Critical Pre-Auth RCE Vulnerability in Remote Support and PRA

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoSFjfJhHXUMJ0vAj8LwmTeAMOkqVJomqws8hEaofSam7jnpED75EtkDhrEkofhEd0oz-gZngp5Ue2kgvyhX3GrQA3gUp3v2H4OmEvpjYQb93gmQNeSppy

• TeamPCP Worm Exploits Cloud Infrastructure to Build Criminal Infrastructure

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiWjUJE4sQRwRYF1TXG-rmM3C4nC15zd82rYQuuLdwncMPrT8M2X-45ApKPH09DynvlzyzTd62EEy9116zPjR4FAO92QedrPRA6jxz9pgXSlUiTsryFlxV

• Bloody Wolf Targets Uzbekistan, Russia Using NetSupport RAT in Spear-Phishing Campaign

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiehyphenhyphenizfEezYiQzf7tUgHJUYqd7k7zumWKSqP1n8K5YoJMRzmHjxJHdnN0GydURXFuwrRJd2qyTQSuH8TWPoWfh7SX01ljHcMjQGMQrDCtW23

• How Top CISOs Solve Burnout and Speed up MTTR without Extra Hiring

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEWlaquUArR-GMqukRCHWrs9HN46zhN8-clTeBqbAGOl5ABkSUp-YEe32I-Da1P0TY8LZ7zbS-k9iYploghqd07vgWNP-JW71E5xH6uOHVFctuRCfRCZiC

• ⚡ Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUQIvJxIaWlqG1lWOUAxD5Ur1U6VZA2denhtk0dqfyI4yIlzqTGJkg1vqQVn5twAhjY9JraokCa2Ly2xBoZ4wXwX5XRncJcZpbANC1j8RtIBi9-jezYgF5

• SolarWinds Web Help Desk Exploited for RCE in Multi-Stage Attacks on Exposed Servers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1coFDcJGaV6fnBzpBs3TXSas4-odFMjYTlXPM-cyQcpzDyCshc0pH8HMEo1XmNUoVPRU4J56lg3ApR-KpFn8L6aiATW4A5XxcIUbCYO1MI9W6lTiW-vlJ

• China-Linked UNC3886 Targets Singapore Telecom Sector in Cyber Espionage Campaign

  Cyber Espionage Campaign The Cyber Security Agency (CSA) of Singapore on Monday revealed that the China-nexus cyber espionage group known as UNC3886 targeted its telecommunications

• Dutch Authorities Confirm Ivanti Zero-Day Exploit Exposed Employee Contact Data

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkGwO0dfI4hVFSzIpnPbDAGzLfh0FJh-3jiKa-mSrkIRuXECaLjAb1Yh9nM8I4KrZ40fAX4eYwHyQyVNRGJDCXkq6uzf5Tm0L0uiMb8buN2iEs-x4bw6yw

• Warlock Ransomware Breaches SmarterTools Through Unpatched SmarterMail Server

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQgRBFvjX4CSOktzf6QU0KcmxaSjFhOLkaPXZkzfoqHaq2A4TUCu-GxQCBQsKTK3PoDM-RLpolaRFIdbityIpVRtZA-5-VK2aYjRQZl0NWsHCpw-VrIkgU

• ZAST.AI Raises $6M Pre-A to Scale "Zero False Positive" AI-Powered Code Security

  [](https://blog.zast.ai/research/vulnerability%20reports/cybersecurity/The-2025-Bug-Hunter-Report-How-ZAST.AI-Uncovered-115+-Verified-CVEs/) January 5, 2026, Seattle, USA — ZAST.AI

• Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code Execution

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnvpWlJDRcbb7ljfQfr3-cgxfkViTJBw0bxfA9YRZxbXS7GWlhhOdByicULU6alislJQMfCcRjKjB3TWJXNSH4EnAYMPHbg7G2WxCD3bug8W1aCPOsUCqG

• From Ransomware to Residency: Inside the Rise of the Digital Parasite

  [](https://hubs.ly/Q040rJR50) Are ransomware and encryption still the defining signals of modern cyberattacks, or has the industry been too fixated on noise while missing a more da

• Reynolds Ransomware Embeds BYOVD Driver to Disable EDR Security Tools

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqTeSYoXhnTy-zKDDdCmNC4M0z32QT7sAvTipDACRrlUcGRFE2rWJ3wGacGPtT8n9evbDa7H2cL0GRj8ABmUgdMvaS9UBi8fhZMkvoXV8BhfCGYeCMvmRe

• DPRK Operatives Impersonate Professionals on LinkedIn to Infiltrate Companies

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjscdCXMOfFpYO0PkKXPhVwQXvjc7RNeTs0Wc79qPF6svrIVTW9mUaMX1qvJkDnuX7vpqcjjQoB6QRgA26lBjbjdTn12UPEOSHoWL0GTWWjsjdj1YsaGu3K

• North Korea-Linked UNC1069 Uses AI Lures to Attack Cryptocurrency Organizations

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1AmCdVPjXcdbUKaHP1fGGR1tT5hO6LUKR9OuPot9CKjgucWXED-ta6q76tazonthjXXE6rpHZNiNbWiV5XKJwfUX8Pqhciop7XuyOnQMnKMRTY1L3dp8b

• SSHStalker Botnet Uses IRC C2 to Control Linux Systems via Legacy Kernel Exploits

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIWksXdbZ0O2Uys7zlFHh363x928N5gROvDQuqYlRb952YgIX5wXoIOhRZy6ZBS0LswnaxSfsXm77mjIojyvIYLn8PQID-pGysGygXRuDj4MPbLlxHnwjV

• Microsoft Patches 59 Vulnerabilities Including Six Actively Exploited Zero-Days

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXD1L5ieHEUh9-eg9LNbLb5-NpNemZK7bZbgYQS5MAeiHtGT2NyiQWOda0XOYhmj3wHC0Bh4Nk8OzsXqAFaTCsja2EuPd6t-V2R5PZjtwUQ2-74OWfUJKr

• Exposed Training Open the Door for Crypto-Mining in Fortune 500 Cloud Environments

  [](https://go.pentera.io/pentera-labs-exposed-cloud-training-apps?utmsource=thn&utmmedium=eblast&utmcampaign=penteralabsdoor) Intentionally vulnerable training applications are wid

• Over 60 Software Vendors Issue Security Fixes Across OS, Cloud, and Network Platforms

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjn9BjSz22uW2NPDNZhkDs7Ygjb5lTP5jFhXbGlk3oBRgpncWsp6pu42-c0T7TXDPviwihS5GuwedI6ULAmI6Zp8NKWOMzS-wJlSjVkd02cB6rM0uLbi-ZU

• APT36 and SideCopy Launch Cross-Platform RAT Campaigns Against Indian Entities

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbazpuuwU1rJbldu2fNhcDhnmgmpygU-Ci4lvjJXXo3TlmbV06oWZJ-FEJjMtQnkzg9-cBOt9h8aCA5d2EuO3gRaDlbzzc1w4cZRsdDUY1YwMTXv9f3ebp

• First Malicious Outlook Add-In Found Stealing 4,000+ Microsoft Credentials

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGH5OFCdEH8WLDQvMuU6qAbaI73kVMtx4uASqujZ12UAb3Q-yJX3ZsFCpc1uJuUE4ahz24WgRv1JhOemISHdoYtPzZPy6o5HwRuoBGjThyru3WAtrcOqyA

• Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Other Devices

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXXnmQ69hHRCiUryP62cYqb4c5ShYwdmXYG1eTU8ujwrWwGICQBUVPzWAAqAW2fvWYURCEtEsBnhwDXKzV6oMBKSCFhfGMTsIRAoVrqRTHgHebhPRIMMPI

• 83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting Infrastructure

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYfLBzwwr9ktW359N5SPDJT-xhZCrJtOdq8gEomlVklbw7KMji47zmZbTKbToZYTw9PY7xIu3p6K6XFXOgE6UvQ2stu1BK5RrGrypa9YSeN2-XM0hGvp8f

• The CTEM Divide: Why 84% of Security Programs Are Falling Behind

  [](https://www.reflectiz.com/learning-hub/ctem-divide-2026-research/) A new 2026 market intelligence study of 128 enterprise security decision-makers (available here) reveals a sta

• ThreatsDay Bulletin: AI Prompt RCE, Claude 0-Click, RenEngine Loader, Auto 0-Days & 25+ Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4Nc7NCkh6bGnhFP3euTAuace33F0nRMsZfDoe-xx5pN0Wm5kDPdUQhqxqfMIsY7MgXIBUAqAeRIk8lwfY8CsOqC27RxU9MH03DMNRpt56mJGUokNrnEwd

• Lazarus Campaign Plants Malicious Packages in npm and PyPI Ecosystems

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg48-Bb1617Je211tmVOc4BKdYLJjIst0IBibAqJyCaHUi1ZpHQd0EWidmBrAbIlMm8fDx9yciZ0HiC4WdvabpudTHGJsa5sOEfHf6idS0Lwv86Zk3Bb9tV

• Google Reports State-Backed Hackers Using Gemini AI for Recon and Attack Support

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhH-X2QIhuzxjBzIZ8BlpGUbA-K-Wr-eqGI4bYJDBMYP8z3FHI65tVA3Oe5vVANpMVHx1f6f3i0sKT-yjmYq9SmCkixMEQVbhRn2PjPEaYnauJYXwi0i-3p

• Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 Vulnerability

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZHJd8VBVRuvpR0hMimwS1UYAG3EGKxE8Hu0PeuvkATyd3AmpT5SHvzwvwsAw6CpYuSfSPevYl9xubRLkKB7hW8W8LBSG5Q-MmyV0QpOhi6BrqwlFgkQWy

• npm’s Update to Harden Their Supply Chain, and Points to Consider

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2f7TicFSKUe4LQJy82mhhepyMplbLHU-VNYpYgxLvTILbFCviVqGKP4thBHnPvHWaw1EdFBuqDcDePYX1Z76KaB2j0pC8rWGM4eyu8tNLDcy0HChASJSx

• Malicious Chrome Extensions Caught Stealing Business Data, Emails, and Browsing History

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuDcg8kBvyrdu22dNN8lKs3vJNhknEuuZtq0Q-EcpvUKlRbXSHVssro3qio112lWV-dcFQO94jO4KAzhmbdS0MKJ7REEcNSrPr5hon0iUNDcP91cFAqcNU

• UAT-9921 Deploys VoidLink Malware to Target Technology and Financial Sectors

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgixJrBY7kbFJ-Pj-CDd1ryd3ktnmh80-81Vc6MNVQ9PqO5RMGBsXR4GPr2sw1ev8C92hXckh1OtCB5apA8O9jCaE7THkDPmhqg5KiLM6vHT1kA73tXRxfR

• Google Links China, Iran, Russia, North Korea to Coordinated Defense Sector Cyber Operations

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTgbqgbztkZlUNEYQUOZixcqxUV-NpLNChacFNUwb2l5mdWsghckr5BS98pnTl2haLryjPeKX8tg0fvAmGcPjYfJIuD3EFaa-oWyEDf-FRqofQt0rBjACV

• Google Ties Suspected Russian Actor to CANFAIL Malware Attacks on Ukrainian Orgs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiesoKhsaUAZZj0bK1IJ7xmSmGHegLjyAfbLfxf6rngoAh3HKgRNVkXxSGjwDPM-6nz7bueRxNicdflQ6bdwUptCiekeAMN67s-Ygdp6Ryk0S60X-gDQFZK

• Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware Staging

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTITWEvp6FkBovXCLk1PaSAb0HJBzETmOcgn9ZPlY81ojfvKU3aoqM3BOmtyqpL1idL2F1TY7e3dAJiW6DMDUAK5Q-zGKUnQvP1POiFDBM0HwKiMQK2DuI

• New Chrome Zero-Day (CVE-2026-2441) Under Active Attack — Patch Released

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFT4HoaSQbeCeLfXBXoGeq1zFeqdug4-I0sb9l4cbhjD9-84AWZx3KdM0pprDWqB9U673WmwexIudqWWrT4Fg44evASMxLYfTdwK43jwJyaL667fZDdQBB

• New ZeroDayRAT Mobile Spyware Enables Real-Time Surveillance and Data Theft

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUKaEDCa0YvJa9oAIavVh9Rz9NN1Cj0XVy8fKroTXMBQp7rYGL14oiZ14iCTMk0ToBg1wWx-iTClSpoZwg4hSAgPvFyatlGddSFgnaqdREUK24NW6xdnVg

• Safe and Inclusive E‑Society: How Lithuania Is Bracing for AI‑Driven Cyber Fraud

  | AI‑Driven Cyber Fraud | | --- | | Presentation of the KTU Consortium Mission ‘A Safe and Inclusive Digital Society’ at the Innovation Agency event ‘Innovation Breakfast: How Miss

• CISA Navigates DHS Shutdown With Reduced Staff

  CISA will remain operational during the DHS shutdown that commenced at 12:01 a.m. on Saturday, February 14, 2026, although at a reduced capacity. KEV is one area that remains. Alth

• Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkMGhmz-GyqlBgWLqr4q8OWMowIYyItP0DG0jxeAvGw8obfAPWwSoQoKHbsFYCruaXH8xJss4OechIdlkf7MKf0ohaTnqUacvNTJqG727FIWeBYnN6vTiI

• Android 17 Beta Strengthens Secure-by-Default Design for Privacy and App Security

  Google announced the first beta version of Android 17, which includes several privacy and security enhancements. Android developers have described several improvements related to p

• CredShields Contributes to OWASP’s 2026 Smart Contract Security Priorities

  SINGAPORE, Singapore, February 17th, 2026, CyberNewswire The OWASP Smart Contract Security Project has released the OWASP Smart Contract Top 10 2026, a risk prioritization framewor

• Study Uncovers 25 Password Recovery Attacks in Major Cloud Password Managers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBPbskdafjFepjzUnEOcPNFvk1UceqE9lVwhurVxvrqJ31VhbKg-XcZjTrVpt2aqkuv6Sodg9NMcoTvkVEeoAhNUU9X0ltI9oHpnTIA-a28iDGnudnxJkl

• Dior, Louis Vuitton, Tiffany Fined $25 Million in South Korea After Data Breaches

  South Korea’s Personal Information Protection Commission (PIPC) announced last week that it has issued significant fines to several major luxury brands over a recent hacker attack

• QR Codes Used to Spread Phishing Attacks and Malicious Apps Across Mobile Devices

  QR codes have become a normal way to open links, pay bills, and sign in, but that same speed lets attackers push victims from the physical world into a risky web page or app action

• Infostealer Steals OpenClaw AI Agent Configuration Files and Gateway Tokens

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeWsmjwrJY11WFbrvqG71cU065qr7gt-yAQRQv18KoDqnPG5x-HWXkFR1wwAmGNT2ujE6p0mlp1VsqvuDBnEokfqkSFtQX0bVdqdOxiZMZ2WXmqqVc1wrP

• How CISOs Can Prevent Incidents with the Right Threat Intelligence

  At this very moment, a threat actor is probing the external attack surface of an organization that believes its defenses are sufficient. The company has deployed perimeter firewall

• Password Managers Vulnerable to Vault Compromise Under Malicious Server

  A team of security researchers from ETH Zurich in Switzerland has analyzed popular password managers and identified ways in which threat actors could compromise users’ vaults and a

• Apple Tests End-to-End Encrypted RCS Messaging in iOS 26.4 Developer Beta

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPpYwVMP8UedNu9MRj7UCji7JQ8xfTP29sqz2wXhr5sFnGWNTCMKOIPJnzD9rNqQjp5O08Oe2LNpns6GYVkQOyjYxQIadGQ4Z5cEclR1Nl40D1Dr5p8A0s

• Malware in the Wild as Malicious Fork of Legitimate Triton App Surfaces on GitHub

  A malicious fork of the legitimate macOS application Triton has surfaced on GitHub, exploiting open-source repositories to distribute malware. The fraudulent repository, created un

• 3 Threat Groups Started Targeting ICS/OT in 2025: Dragos 

  Three new threat groups started targeting industrial control systems (ICS) and other operational technology (OT) in 2025, according to a new report from cybersecurity company Drago

• Microsoft Finds “Summarize with AI” Prompts Manipulating Chatbot Recommendations

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjh0FV5y7nlXl9cJspXtL5CZNMf2-ftHbx-kv0fjJ54M7A5FWTCUgzmscihQebjqcp3c9VXNPK784ZocV5sG5eizK2Kp1FeCbVvKuOlpi0vVOMUCUiSUCkd

• DigitStealer Gains Attention as macOS-Targeting Infostealer Exposes Key Infrastructure Weaknesses

  DigitStealer, a sophisticated information-stealing malware targeting macOS systems, has recently surged in activity, drawing significant attention from the cybersecurity community.

• Man Linked to Phobos Ransomware Arrested in Poland

  A 47-year-old man arrested by police in Poland for allegedly being involved in cybercriminal activities has been linked to the Phobos ransomware operation. According to Poland’s Ce

• My Day Getting My Hands Dirty with an NDR System

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNtu8YGAogyismJs9M9YdnRhGbjScyVHZkNmeiwAafRQFLjFy4FzEajb1HcQsiPSO6jEbkgBNdsxL3lrRaK05f8qY32TIUmkz67ue-LShVtui5dKxwGG78

• Credit Card Fraud Emerges with a New Sophisticated Carding-as-a-Service Marketplaces

  Credit card fraud has persisted despite global mitigation efforts, evolving from scattered illegal trades into a highly organized Carding-as-a-Service (CaaS) economy. This undergro

• Cyber Insights 2026: The Ongoing Fight to Secure Industrial Control Systems

  | SecurityWeek’s Cyber Insights 2026 examines expert opinions on the expected evolution of more than a dozen areas of cybersecurity interest over the next 12 months. We spoke to hu

• SmartLoader Attack Uses Trojanized Oura MCP Server to Deploy StealC Infostealer

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTqbI3siPxMUClWM1mAlNmZ1XoIGvcrs7qE8slqSkSFCyPIU50Ml0XsqsxGAnsMt1Ys4v9Z2MYWapLXIB9bvkvXw7pPt8NvS05UotSaichBUZjw-WaoUwI

• Threat Actors Advertising New ‘ClickFix’ Payload That Stores Malware within Browser Cache

  Cybersecurity researchers have uncovered a new iteration of the ‘ClickFix’ social engineering campaign, which now employs a sophisticated technique to evade detection by storing ma

• API Threats Grow in Scale as AI Expands the Blast Radius

  Application Programming Interfaces (APIs) remain an attacker-favored exploit route. Aggressors continuously target common failures in identity, access control and exposed interface

• Keenadu Firmware Backdoor Infects Android Tablets via Signed OTA Updates

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8WzaQsQzhfPQCPUG6GYFEMc6xpel-E8wWXPSZlSeSLIHLRkxcgj-XxdItkZjBJSg7CW26jOr0gtstF5MjAeAumhISRoOJatq0Bss2rNv4f35PVZcwrrxl

• Matanbuchus 3.0 Returns with ClickFix Social Engineering and Silent MSI Installations to Deploy AstarionRAT

  Matanbuchus, a premium Malware-as-a-Service loader, has resurfaced in February 2026 following a nearly year-long hiatus. This latest iteration, version 3.0, features a complete cod

• Hackers Offer to Sell Millions of Eurail User Records

  European rail pass provider Eurail has confirmed that customer data stolen recently by hackers has been offered for sale. The Netherlands-based company disclosed a data breach in m

• Researchers Show Copilot and Grok Can Be Abused as Malware C2 Proxies

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzYX37QWNtfn6KjpvO-G2qEj3mARN3yOl6MgQKaMMAAAwEUE2ozASrY9uGyYZhUXJbSY6n3nmo-hXvpBHnG7LL6Qm4KJi0GUv8eoRlSSqLQAQVUpbSp6Fz

• Dell 0-Day Vulnerability Exploited by Chinese Hackers since mid-2024 to Deploy Malware

  A critical zero-day exploitation campaign targeting Dell RecoverPoint for Virtual Machines. The vulnerability, tracked as CVE-2026-22769, carries a maximum CVSSv3.1 score of 10.0 a

• Webinar: How Modern SOC Teams Use AI and Context to Investigate Cloud Breaches Faster

  [](https://thehacker.news/forensics-reimagined?source=article) Cloud attacks move fast — faster than most incident response teams. In data centers, investigations had time. Teams c

• VulnCheck Raises $25 Million in Series B Funding to Scale Vulnerability Intelligence

  Vulnerability intelligence company VulnCheck announced on Tuesday that it has raised $25 million to meet demand for its solutions. The Series B funding round, which brings the tota

• Cybercriminals Leverage Atlassian Cloud for Spam Campaigns Redirecting Targets to Fraudulent Investment Schemes

  Cybercriminals have launched a sophisticated spam campaign leveraging the trusted infrastructure of Atlassian Cloud. By abusing legitimate features within the platform, attackers a

• Cisco Patches Zero-Day RCE Exploited by China-Linked APT in Secure Email Gateways

  Cisco Patches Zero-Day RCE Cisco on Thursday released security updates for a maximum-severity security flaw impacting Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisc

• China-Linked APT Exploited Sitecore Zero-Day in Critical Infrastructure Intrusion

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9UdFF7GIb9sKuDwjd5b2PQvzSOUTH-7rbAWmB4O8ZeJsfzqM3EsxfsXQ23jfQQL8rT7FbClxATKW87Z04pIeW04H-FEX0JQkFLmTZCABSpKwvd26jSWc9

• LOTUSLITE Backdoor Targets U.S. Policy Entities Using Venezuela-Themed Spear Phishing

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVK3A2yZNeTmDZQnzYo5bTA8R87lnRUIqYSSxOoyKUkAqFH97mjhNJ2LiAT64bsC9ExwqhQnDHhAfs5RJUIUbPGPp5E7h-L3efaT-216BWjYgGsZfZbe46

• Your Digital Footprint Can Lead Right to Your Front Door

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi20kAAwaCZD2Lh6-cSZ4bMJ5QJq16p3GRg-tw994MYxsXjW6EikJ7cJbFhb-I6H3hZQRN0blLVlYzd1993WBJixaFKtO0eXeskqu6HKzE25lZWtfHQckAb

• Five Malicious Chrome Extensions Impersonate Workday and NetSuite to Hijack Accounts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7kvgFz8ELXceV5LsBgcodkjSM6meRhVnuxiijpgc12XcMb9Gh660H5HEknLGskzkx9L81bbOM651BUVAzu2u6bf36gf5r2x3ndhltKVFZAforGzT-dQhn

• GootLoader Malware Uses 500–1,000 Concatenated ZIP Archives to Evade Detection

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9KFkvTcZPkWZffX2HE8olvWbZAOrsco48R3JqZQsB4hUc2GGS7xh9a6suu7IeIe4NU8M5sjecperqY7v7V4nSuAffVy024xnlN38Ig-LPae-RiwXXxMUn

• OpenAI to Show Ads in ChatGPT for Logged-In U.S. Adults on Free and Go Plans

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSamhve9k7iL2Jd0BpqUkreaa3K7itkI4XIHJVBxqZ6l07U24t76eNbuhKMnRtu7eJ66TmiqgVQbAATH-pHha8jEcBz2PePIWaQDrWPky4mT6KFKVxjxe0

• Black Basta Ransomware Leader Added to EU Most Wanted and INTERPOL Red Notice

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3VY2I87McGcsRT2S52vO2sa1A9ZvLoH6YYLk5sCypOvjoX1H4Ee9QkvAiFJIvy0qW0dvgidb78HgDvWHJKW9Fkaf5sLOt-RA2sP8fooQrHtv0qFf6Cazo

• Security Bug in StealC Malware Panel Let Researchers Spy on Threat Actor Operations

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWgXm3VbZRhqFOmPi88AiXeiRLKHkASKs6cVSYmMLmlZiGyP3Xqdd8X1J5qkppk2zMYcKK5-rkza0xId4pky69xHymWs7aX3DXRaMGmDZm0WgtfPRjw3Oy

• CrashFix Chrome Extension Delivers ModeloRAT Using ClickFix-Style Browser Crash Lures

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHk6v6YRLFG3a9vVJQ5OLdPuN9cBdDklQzJHf91XqJUjDiKB8IT7VEmxB7VyKcSXbahTKXr-seTEvP3hdRWT2ws4xUteRY4tfouGxjDrH22aIxauonv9sb

• New StackWarp Hardware Flaw Breaks AMD SEV-SNP Protections on Zen 1–5 CPUs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjvBKIwExgNlDEHvCub5W4y4uhPhsKYtGX8oPCDrwzV5Wl5iQPN2oEgBoSHBAAbsurdEryR3O56kclGi5uN38Y50ftQUAPzj1Y-r0bAS3rQlqRm88M4umT

• DevOps & SaaS Downtime: The High (and Hidden) Costs for Cloud-First Businesses

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-NFsj68xaf2p3zjA44oQOJv4NBoDt21KPCna8vnSvswE0hTcKyO7ExzxpSXPadfPFzlnA2bQ2gNpsMDNKqwITRlj5GgtssnvnSfnbHCgJl4hH7u4XNRhf

• ⚡ Weekly Recap: Fortinet Exploits, RedLine Clipjack, NTLM Crack, Copilot Attack & More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfn1SBAkKZzvUvFxUuVea4KYXozKlXG-6dDyXBZDwvcb3-rDxdmhyphenhyphen1BVrjoSsCReCbC28V3ta7Wo00qmg6zk3cuiezDIp3g8Noqbx4sEbmDl

• Google Gemini Prompt Injection Flaw Exposed Private Calendar Data via Malicious Invites

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRoKH8kODtvGyUQmuWC8vWW2D9wJIlBhYnl2hlvLUojFSV7sVmZJ3nqnxDHHMhIqzIpXmcFyx6GOxTYsrvTa9lJw4tE0vPvx8OPrRV7bmpBpz7babFHy88

• Tudou Guarantee Marketplace Halts Telegram Transactions After Processing Over $12 Billion

  Tudou Guarantee Marketplace A Telegram-based guarantee marketplace known for advertising a broad range of illicit services appears to be winding down its operations, according to n

• Why Secrets in JavaScript Bundles are Still Being Missed

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieV5wPGUwZgsm79ntLb9Sz6xAPAV54CQ1SztbNfpLe-ovKEkTrCsLBRsD52c87yFiByHZGandN1pYNNBn1OLUpc5iEFJnGP0YRnWWeWod1xxQUNhjlD1vF

• Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFMNWyLouRnOIXsad4n8lgA97dY7GEYeVjCrVWqYokwEg-es4kDCyjPCwEKZq0LCOCjcufDbeBu-OaJIuKYu6IY2g9ZMoMMxhkYgCWlsjeIA0ByqwBVJX-

• Evelyn Stealer Malware Abuses VS Code Extensions to Steal Developer Credentials and Crypto

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXd0cDqljLdjUTKJVODHzhlibAZe2-m53DWQpXWjKLY2pZyxDivUWJFky8KJbZ48kAKDTbwuh7FtNGmI9JKsaNivp5Xr-HrK803vlk0PsfbSYX2cxkTQoO

• The Hidden Risk of Orphan Accounts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-z9xF6QsTXxdgaSXZJQKDVTmBJGusdJ30GBYqWZ4w29KDo3yRA3HGE8BsxyQoctkOWtsv-b90dH698y-H015umuI0oOCHaPApTLj3UMcaMV9aYIqAOel0

• Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

  LinkedIn Messages to Spread RAT Malware Cybersecurity researchers have uncovered a new phishing campaign that exploits social media private messages to propagate malicious payloads

• Three Flaws in Anthropic MCP Git Server Enable File Access and Code Execution

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-pw9mrLvu7G4cYmZabAPduOBzVremxpnTTBjAnpvt95Kdt-kVFdO1GuHAnFwKZ0MNOAB86u6PacmrUDnAT0tcXghadZTRaEQTFiCXUTcoQksHFc4FKIpW

• North Korea-Linked Hackers Target Developers via Malicious VS Code Projects

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0h2bAZNzwVEuQKgQlWm86TvDCUL308-g1xrbV2ZuCKJdiuCxebUL3w04zPuBIafTaSB4SkyqbdIb0KpqnjCUQMB8j9s-amDohBq4Lw-Q9G0ZVIkmKIIP5

• CERT/CC Warns binary-parser Bug Allows Node.js Privilege-Level Code Execution

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidgbhveMnZAVV1RKf0coJN00ixwRd8lYIUz58lpP4qC-LhuOGvgZ7IG87XxkhQaR6bnvCYSl5yQ2yQyArV9oVZ9eCHWpOszGUOLyKWkygMpSyxAs0H7Zlu

• LastPass Warns of Fake Maintenance Messages Targeting Users’ Master Passwords

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgARX8var88XnuiwAzTQxw-Iu0AEnvMqDZoQMHUxnEUzuJ6yqPLLbij2G1PFEMHWToqT8hjNEvYxr-S4WCy5psHYCQw76jRiwGaFavY2Qe1jUvT7t-uUXn7

• VoidLink Linux Malware Framework Built with AI Assistance Reaches 88,000 Lines of Code

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4Wwnorzi4IOE-M6KTtD-M3NkFDUouUmfnwteDny1m-6-slwsXN8LGxzhX2jmXH9qIk1YWGqUJYdOiAWkouZYPcakwcnoA9GjLWcjdbPnnxYgJy5aPQpO1

• Chainlit AI Framework Flaws Enable Data Theft via File Read and SSRF Bugs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOQfYQeWdwmviN0kYk0o1lwduXDGiv53wwizZeyajke-6SGNlGc1wdSk5yUWZBt4-yQrihJrMohBqDcsqStLjmdJYfRZ2vM27oKy4LVviBgbJHP71E2MWR

• Exposure Assessment Platforms Signal a Shift in Focus

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQmSU5s0ahHNbO6TnXm0i8cw93oK40sAl5By7cIbChjHl5xUqt424bcXtVXugQG4zcGbsmtbZz-QTvhOyWRhyxuYPB6nmaY65vANZFcuBHeqSuELPN7JbG

• Webinar: How Smart MSSPs Using AI to Boost Margins with Half the Staff

  [](https://thehacker.news/ai-security-management?source=article) Every managed security provider is chasing the same problem in 2026 — too many alerts, too few analysts, and client

• Zoom and GitLab Release Security Updates Fixing RCE, DoS, and 2FA Bypass Flaws

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiwPQt59QKpm9rpNLriqoUsKPzbWcBj9P-u1ZdIn5xhxR6hgRztxdSAXN5bgEnDvd4uEEBgW4Imrg-YN0NY3-vLavEuYIwRzlrnRF3s0Vz8wDb937XfoxDb

• North Korean PurpleBravo Campaign Targeted 3,136 IP Addresses via Fake Job Interviews

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrrIdMGRCKi6umFOuh-RXZ-VygDIwLtr18W0bnicPF1AYj5jLZVM3x76V96YjaTJmFlzW1RftmJvZoWxBBcGkcN4DzIfSCw7XQO5Omyf8st-ezm8mYdzyG

• Cisco Fixes Actively Exploited Zero-Day CVE-2026-20045 in Unified CM and Webex

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHOCMXq3WVtmcL9apl3XWrlOoAeRxJ2kZf37YNtvg2oaO5wVX4zD-vOckg8TzcAeNUDKe0CpwaIvMz9RQ0Lx-2sD5Jdz4rF7TxN74zZdq6lWOzfF3PdsYv

• Automated FortiGate Attacks Exploit FortiCloud SSO to Alter Firewall Configurations

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6O1FUjFHFlfeetaainBwBLAivJlaoFZZYZ-M9gJCGGmmNW1QEmHtFOlYhtYbuM5fXV8-ySVyNrPVocMA2GBV1TQdqLS3yZkU5ThvGuQ6AfuN20gtMsBa-

• SmarterMail Auth Bypass Exploited in the Wild Two Days After Patch Release

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfzCM1c0lJOZ7pXEcdXTXGEeNzq845Kr3uoQe6p2pY1l062KKPqAvTiQmrHDY-3IVIsFlQHtm1YYOWCAEPeuDJeY2N7qYX3C02Qh4dfd56mUj20ChkMEAG

• Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux Hosts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWCefYaSp9ssGTQkdK58gL2QbQurY3rXLBGBTEC2hXq1qGh88LxThrqrtejW9sVCnoXsrwoAZQwlbdrwOl-O0fEz509vXrbK235fZ0tl9iPWgiKBJt49Pq

• Filling the Most Common Gaps in Google Workspace Security

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjppNAJYCOHh4mqdL3GuJ4elABk4wn-ciw9V6oYuZ8Sdb0LllySYRl6YXX-IeaMDcVG8Zt9X42HbFVlmEb0umu4D4nelT-qOpG7ZtYSz0t-wbngKFalwdDH

• ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxksXhijxqjYwcb5PYwnxnKJNyjVua9KXaVRMA0sM5ZHkPM3mJ7S8PrniWhDhPQxjS1IL-okMbEHzBHFXApE0fGUYdOSBYGbXoD6mDeg2YLOyjqZthPPwY

• Critical GNU InetUtils telnetd Flaw Lets Attackers Bypass Login and Gain Root Access

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgswkkor42PbpMA2JvEugzRBOp1L3DrLlZ8GqcxlJchqNGqZZT7ndgNE51CVPI5YEhi1js3MsyDOYVmA19EKWA330OszynMa9IJpHJzDXtZ3iET5VPrCkCZ

• New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYzbCMSUAN1p1M0CnYPBeFVA3mYmKz-XYLo2R-0OUmaSxvarUieSUkbxkOexloc74koPBcfuIcHXj2taolqWDe8nhE4Uo8maYrioqDFiWgi9OWuQseJ5VL

• Microsoft Flags Multi-Stage AitM Phishing and BEC Attacks Targeting Energy Firms

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBbSlIXcDChwJf0Cmq4j01QoZOUqnaRGaciqD9J0XKMk-2Fnzge5qv44fs4xzO3OORbk0kiYFOHlocsuJBdVDxC86k-GMG-21LAJ-62F15I6XyUVobMKwV

• Fortinet Confirms FortiCloud SSO Exploitation Against Patched Devices

  Fortinet on Thursday confirmed that recent attacks are bypassing FortiCloud single sign-on (SSO) login authentication on devices fully patched against recent vulnerabilities. Lever

• Phishing Attack Uses Stolen Credentials to Install LogMeIn RMM for Persistent Access

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicydHIzxQzKCM6IJLuGPOYTskBFZhVxh6XYXItKSN91mAqv0xzZfIRmI1XXeyGE8yJ-gORNbdNwXBdCSJ9uEV9CnSE814erkLz4HKjN-eYPERE-7CWfE-U

• Nike Probing Potential Security Incident as Hackers Threaten to Leak Data

  Nike has launched an investigation after a cybercrime group claimed to have stolen data from its systems. The athletic footwear and apparel giant was listed as a victim on the Tor-

• TikTok Forms U.S. Joint Venture to Continue Operations Under 2025 Executive Order

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHNw6vrF55MzjLtt48WKN8aD1UJIcbMEZFqOFPqIIhWiscHTkS9gLPdIMgbLi-OliN8MtGpf03YJ8AwAFG8pemtYFo-wtHqKqvg7Iw81r8pXZSnmPjcVgX

• 2024 VMware Flaw Now in Attackers’ Crosshairs

  Threat actors have exploited a critical-severity VMware vCenter Server vulnerability disclosed in 2024, according to fresh warnings from CISA and Broadcom. Tracked as CVE-2024-3707

• Microsoft Releases Out-of-Band Update KB5078127 to Fix Windows 11 File System and Outlook Freezes

  An out-of-band (OOB) cumulative update, KB5078127, to address critical file system compatibility issues affecting Windows 11 users. The update resolves widespread problems introduc

• Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWq72oFKp6biq3Hftsdl9xZeVhxIBGzBaKfw1DiMD2ldey-KGb8qk27HJH9rt-pys9Ga94wnpRZfAYUdFW9g5-ncNfIBaYtzsHD-GpGk0LtMaSZ0yD83Pq

• Apache Hadoop Vulnerability Exposes Systems Potential Crashes or Data Corruption

  A moderate-severity vulnerability in the Hadoop Distributed File System (HDFS) native client could allow attackers to trigger system crashes or corrupt critical data through malici

• Russian Sandworm Hackers Blamed for Cyberattack on Polish Power Grid

  The Russian state-sponsored APT named Sandworm was behind the December 2025 cyberattack targeting Poland’s power grid, cybersecurity firm ESET reports. Poland’s energy infrastructu

• CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhfzkSnP6sxVF7yvf0PInrv1BOfApvDuKFwOcutnIngSLkUJQltRqdFGjdFWnYJ8H4zHyADNqiELIsFuGEc0X9DxSwjbdy118pus7cNpytqoSyrrfuf7EC

• ‘SyncFuture’ Campaign Weaponizing Legitimate Enterprise Security Software to Deploy Malware

  In December 2025, threat researchers uncovered an alarming espionage operation targeting residents of India through sophisticated phishing campaigns. The attack, dubbed SyncFuture,

• CISA Adds Actively Exploited VMware vCenter Flaw CVE-2024-37079 to KEV Catalog

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAS4r1YmdF-kqL3YwcAZAYsspwp0KB3XNknsYwmjR5YrXgNy956NSjgc3-RacAnCgT56dkPCBNRZfrbw18N2JfGMkd2ZFTRIqVxdjsNe2P5akQ56kpc5np

• TikTok Finalizes a Deal to Form a New American Entity

  TikTok has finalized a deal to create a new American entity, avoiding the looming threat of a ban in the United States that has been in discussion for years on the platform now use

• New DPRK Interview Campaign Leverages Fake Fonts to Deploy Malware

  North Korea’s Lazarus Group has launched a sophisticated supply chain attack targeting software developers through a campaign called “Fake Font.” The threat actors are using fake j

• Who Approved This Agent? Rethinking Access, Accountability, and Risk in the Age of AI Agents

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiW0YdKx3Mn8l9PzpwwxmdeBP5kgWuc5R4LevYs6tP-J1z5nSZcdE16En4Z9Ad89VIFRf3qxeM-vMtgvfOTPxyoZV8H5Dcaj4WlXB2tmh9NG6vGLY7jfD7C

• ‘Stanley’ Malware Toolkit Enables Phishing via Website Spoofing

  A new malware toolkit offered on an underground cybercrime forum can keep the browser’s address bar unmodified while serving phishing pages, Varonis reports. Dubbed Stanley, the ma

• MITRE Releases New Cybersecurity Framework to Protect the Embedded Systems

  A new Embedded Systems Threat Matrix™ (ESTM) framework was introduced to help secure embedded systems used in critical infrastructure and defense technologies across the U.S. Devel

• New DynoWiper Malware Used in Attempted Sandworm Attack on Polish Power Sector

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnjp5lsaWHKXcLJl4fjk6nW0R-oXfuin3AicaKqzCuMbG95h-qptbJ2ZnnR6L2eMfHJLpu3K6fhX2ZThB3P6nThiinK6BBb7TPjGNe5-cBpSoVOeHaZfjS

• Cyber Insights 2026: Threat Hunting in an Age of Automation and AI

  | SecurityWeek’s Cyber Insights 2026 examines expert opinions on the expected evolution of more than a dozen areas of cybersecurity interest over the next 12 months. We spoke to hu

• Lazarus Hackers Actively Attacking European Drone Manufacturing Companies

  Lazarus, a sophisticated North Korean-aligned hacking group also known as HIDDEN COBRA, has launched a new wave of targeted attacks against European drone manufacturers and defense

• Multi-Stage Phishing Campaign Targets Russia with Amnesia RAT and Ransomware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipVK-eTPu0vfv8p-slHnoh8LJka5l-zmd82fTCO2rB8yxGFPRArabSzbI5LWzMskPr6UWf79uQ9fiHvVzY7eDB0Kj0cQIFZQEVSYJv-2nhqZJeNdnlZTpI

• New Malware Toolkit Sends Users to Malicious Websites While the URL Stays the Same

  Browser attacks have become far more dangerous and organized than before. A new threat called Stanley, discovered in January 2026, shows just how serious the problem has become. Th

• Crunchbase Confirms Data Breach After Hacking Claims

  Market intelligence firm Crunchbase has confirmed a data breach after hackers published files allegedly stolen from its systems. The notorious ShinyHunters cybercrime group claims

• Konni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain Developers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZjxGlZLamF04EJ6k6LroDiJijKDR-um0kxbhfPls3rVFqj3SNIZweWeNbS0WqzDo5EwSfg6iTiVddPJJg48dQKaUkw2RYxMeYVC-NcfGDxMbGHR79V6nS

• Curl to End Bug Bounty Following Low-Quality AI-Generated Vulnerability Reports

  The curl project ended its bug bounty program in January 2026 because it received too many low-quality and useless bug reports. The decision reflects growing frustration within the

• Upwind Raises $250 Million at $1.5 Billion Valuation

  Cloud security company Upwind today announced raising $250 million in a Series B funding round that brings the total raised by the company to $430 million and its valuation to $1.5

• Winning Against AI-Based Attacks Requires a Combined Defensive Approach

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSTncIdUsnHK3Kps8gH8NtlxG7T5vp-JlCp6eWy56PFPvRgzGtsuG6PHp41yrm8pYLApQwGsTiFLBztGalMQyItjKb0GZFx3RlY6cg1AGzVMWlChqjOUVp

• 800K+ GNU InetUtils telnetd Instances Exposed to RCE Attacks – PoC Released

  A critical authentication bypass vulnerability in the telnetd component of GNU Inetutils has exposed approximately 800,000 internet-accessible Telnet instances to unauthenticated r

• Access System Flaws Enabled Hackers to Unlock Doors at Major European Firms

  Vulnerabilities discovered by researchers in Dormakaba physical access control systems could have allowed hackers to remotely open doors at major organizations. The security holes

• Nova Ransomware Allegedly Claiming Breach of KPMG Netherlands

  A major accounting firm in the Netherlands has reportedly become the latest victim of Nova, an active ransomware operation. The breach was discovered and indexed by ransomware live

• ⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcilIguxvzDODT4rcvO6MxiCqaxrO-efMroo0PnuIHh189dVEamSzAvGqVGDycJAHQjMq1wlskwsKomv4UIwShUlyl6wlOuyXxWp4sqeNWK-xn3cwrTpXY

• Warning: WinRAR Vulnerability CVE-2025-6218 Under Active Attack by Multiple Threat Groups

  WinRAR Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a security flaw impacting the WinRAR file archiver and compression utility to

• Three PCIe Encryption Weaknesses Expose PCIe 5.0+ Systems to Faulty Data Handling

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhy3f-oOC7MmSz2Ku0x9-ljdPbuoYceSrPAAqvibbB1WV5spRUhQDjoXmn5mL8TzgQj7GP6CzMRtG0Tm8OJW1qhylFL1uafxAMcmJG3n9n3kgC00yhRIsdm

• .NET SOAPwn Flaw Opens Door for File Writes and Remote Code Execution via Rogue WSDL

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinnS9vb2LFKF6s5fAoVyttBrJ95yYGilrXcgWROlH3mnc3beTVNzu1Km1jBS92RliRTTah0jkHemQXiksFryQVbwuifWpzWqz1uN4JFrqiEEKM3kB2xdKh

• React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple Sectors

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgY81AEgJ3ys1RMRunP7NBgyQpMKIzdUIbHOklJNtO27j45TCOaOxwkZsUKIgHOmE1M4jQnzFy4C8Z3Lb-z1KNGhdgmUunavK91bX3Ep4YTRRuPVgqrMb7C

• Active Attacks Exploit Gladinet's Hard-Coded Keys for Unauthorized Access and Code Execution

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvEmCUTZR13OKl6vXoeTWYwDRRUGP8q1UrkZB0zRzaRSgcOuQptkjkU2XOxvXMN1dCR3Y7JAxl2I78flCDM42KwDKyLqkpHH9kOlvaH9DJ0-mvVVQ8j8No

• Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High-Severity Flaw

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNd3BqdqJgn7flH6fG1M3tV5v9R11ajUrmoh0iY1DOpD7PDvDhrCjFJCBrChqzUbKF7U0isWGqBx63SqQDpYlqMI2pyGX7VF36gIltrjYF9k6InQTES7GL

• Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6OJVsDspcCdye7M8PSggWU392C8E30egOw45keJjhGPAv-Auu34ejTw7mT307EGecNF77LcAz2Kzw6Mhyphenhyphenhjl956WA2poNcT3kP3eIhMKjv3

• WIRTE Leverages AshenLoader Sideloading to Install the AshTag Espionage Backdoor

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSr-PT3dj-KXpKptjdRmfwueMOhO5kNQWOHyylqmUj0nCT9BOb9UM7svBOwdWmnJipRU9vjO2l7WjVGJZc-U9jXCPpolj-GYZsBrP3x5AB4fInWxKVtZOY

• The Impact of Robotic Process Automation (RPA) on Identity and Access Management

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkHaZsEZyIsKJkBKWhgZBt2Oo3VGKY5ZeOaoO74VTbabWN-GlLYtOPjpjnqS63ufmXSWt2jnwRglhgFqzJTGGHqOO04K3wn6V3lN6IJdsNupy7M1V9yKe5

• NANOREMOTE Malware Uses Google Drive API for Hidden Control on Windows Systems

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsKOtWgjKbDTJbQIFriTn7SS-6j1OkejHAL8qQ8rAg03gXgLRrv0-qYN2WQQI8BqUBcmOxNFqni0N9fU5QpzCQdVFPybji0uX397JNRP1BeefHSJr5Z5Lc

• ThreatsDay Bulletin: Spyware Alerts, Mirai Strikes, Docker Leaks, ValleyRAT Rootkit — and 20 More Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcBEIOMDHFHbMxpqG8wwxxLRZJ4TavL-Z4AoU09ldjKg8LpfxabEBKPBfWUHK8GClxPJ2r3BRs078HZ8KwPrMHVHS1m5ZcCdPNR9mtUD5SZfz6WE3FLp6K

• CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBN5buANAAdi4AundLfRH7dgLMFWvHQosALn-UulNEQC0ZZxUmTJUHQyS3meXA8rVRya72n3Wl-DsJRMM6VluFoSZSdm4Ha5SijPW09wRzOE2rpQmfh0JW

• React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhnftk0pTnAA0gVIW1pPi9QlZ5qU92WBv8wfMA9644HkYIF5DMGYcdZjGyDmHPm9WA5IoE1uLal-fqzhvX96S5gLUNTS38ggHySqo50T-brLivYF2HW2dD

• New React RSC Vulnerabilities Enable DoS and Source Code Exposure

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQz6FV9qkD3ZQ34-te7LAvOtZNopi3bQRTQq3TCojcBmPoef7tp-tgxFhffuFYyC5kvbdfEJMIBjwMn-rPElYlnpKG9kj89lPIAde8hlYZRKq6a4mfiH6V

• Securing GenAI in the Browser: Policy, Isolation, and Data Controls That Actually Work

  Securing GenAI in the Browser The browser has become the main interface to GenAI for most enterprises: from web-based LLMs and copilots, to GenAI‑powered extensions and agentic bro

• New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4a8r1ltQRVAHGAuHpS5vuzkIAKVgEgZQt0hinLCDg6akixRXUC2sswGCHs8tFV2oLmaZd-YAwL-Yu09qMZMC64PZ2EQNycGfpxLzqwqGXaf1mPfKRZtx4

• Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYgcFxpYG91gBqImBj80xopP9yPiTuHXJwTeIXOS92Fsj6dtv4A2LK3aQxVQGKfA6sJ7T5WfeX5CEFBFrPNNH96PY7qjHCbyb7yDH5WrATaFflCN3YgQxQ

• Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSwTglRfB0k1FqqL7L502b4j1rqLa9StbW7akfVevnbqc0QsQHryjXRBajtpcOdiOOSUX119hpFSCGkZFuqxXH85aKyUMN2DwE0fKVDojo7uhXkZfEmf80

• CISA Adds Actively Exploited Sierra Wireless Router Flaw Enabling RCE Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEge8ZMStOlyoSh88jViO8HEQmAAac6HNtoVoR-ufVglteBHxv-YilKP9B3sA-BJRw19HBflza7JA59RvM0gq34FzgFeagwBFQeuh5OfQqBbXzRbP5cXA4NR

• VolkLocker Ransomware Exposed by Hard-Coded Master Key Allowing Free Decryption

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZP3WUgrypoDpL5dUk1TlTjzyLAHKMjawrIv9xe9Aq6K1u7ikP5Y7ehR-VuYhvQkb5ZHaKrz2WHuXqmB5YaQmt4byXd8uFCIMAqYcx15Zog3Wwt4JLdtlv

• Phantom Stealer Spread by ISO Phishing Emails Hitting Russian Finance Sector

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglC802fHbjYDV11Y3NmxnCVUJfKSNEDRXAtOM722x09s0GmNQF11fP-r7betDJE1NOMAXe9DcIyEGYlWLMFf8S2B3pMRcLtLuGqqYovFNSGfnruQbydlAz

• A Browser Extension Risk Guide After the ShadyPanda Campaign

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAAYMfLInHfns5nX7hk3SOBwCvMca-7usfovrOLFewfHgZtx0972jWlVx8u1MVE0WqJCnczK6ZFXTZ-ir-grtXiWZcXJw6eGWzTX7supbbmuFOPY2fxfgd

• ⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4BtIjueYhEXgOy1tcq1Lj5PMU8k7riwHK60xURQet4OGQewoPHZzG0F8ImGWDlbidb5KkjTrJFlLbYf4HZAfQcvHcSFOM8uQkOdgzypwcAGxlbba9hRrX

• FreePBX Patches Critical SQLi, File-Upload, and AUTHTYPE Bypass Flaws Enabling RCE

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgv01p712eomGjpG3imw4Fow3CgFqZq2RwuHvosDk7WWN08kcB3sVc9ZCeOyic9zqqYml63fAppF-DF0gDBXnwMBbtFE7mr81Trn8IQVOmCn4Msnx5pL87X

• Featured Chrome Browser Extension Caught Intercepting Millions of Users' AI Chats

  Featured Chrome Browser Extension A Google Chrome extension with a "Featured" badge and six million users has been observed silently gathering every prompt entered by users into ar

• Google to Shut Down Dark Web Monitoring Tool in February 2026

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaxSi6VCX3WC9AjpLsvCFSakbkppzzCdUxTD4mLbyuC3Bo9ru4rNrN9oh8gEOjf5ePq4506p7I-P8J5oKnHQnF9cOIVSSSjEJVC5llgbgHJXRbdD1qu91g

• React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqg2tvd82cFFoP9fNpNuDszfardhiBBzcifDtDUTi9drL-KsIC4EbSpgVNLI4HSZX6ZVfWVFzLybe34ZDzRwAnz7YSDhmr8YshApqbBV3pJhLGr2EhW-2y

• Fortinet FortiGate Under Active Attack Through SAML SSO Authentication Bypass

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQJqq1hYIZDr0BJrkSi2LLidWTwFd6Hulhty9DbaKd-4PuGyZcmRDQDMyMfHj0dsS87KDoQba3ZEo7ohgSpjNCziDz5NasZQ-qleWrf5lZduSbw8PtjxuX

• Why Data Security and Privacy Need to Start in Code

  Data Security and Privacy AI-assisted coding and AI app generation platforms have created an unprecedented surge in software development. Companies are now facing rapid growth in b

• Amazon Exposes Years-Long GRU Cyber Campaign Targeting Energy and Cloud Infrastructure

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmP5wc4kQfstR7DVyxpp7nwoP36IRuDO6oBSyghPEx9VCjLCy2LPOoIYBHvfUELKpnhUQTWFtfCW8RiceJj5qgDVJpptVCfGNA9eeOi0vvbPCX9FFxF-kc

• Rogue NuGet Package Poses as Tracer.Fody, Steals Cryptocurrency Wallet Data

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEia6FxrdzMepgwKkHbdQyn-9xpiZ9an3eTxENAvy8AZ8sKO43S3KW5Lum4lXXo9PU8NbrVcoTYI4pEoX6MCEJjHPgh4qk5N7wjclH8IrYh2mByqU7H-e8Gs

• Compromised IAM Credentials Power a Large AWS Crypto Mining Campaign

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidILz5c0w2u5MowpqpDcKaSi80yphNWTH5E6d3P9RbsKmrW49tTXLVGax2PmBg1tqbV05pKchUWn15gqUmKNvzGPFUTa8QpmLO5zAAdT91Gcs0SbpZlMLP

• GhostPoster Malware Found in 17 Firefox Add-ons with 50,000+ Downloads

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSvPHdkrpjZsxg3pztc2gN7T9O0W5B1C3B6v7G-ep4OPWtLats1XsDkFfgorwPpwIwHAanQiLirNnsFMYVh0BrLu8Yc6LjGbTHefFNAHFgDJ9hM-Iv7LI8

• China-Linked Ink Dragon Hacks Governments Using ShadowPad and FINALDRAFT Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBqWp3MxMTIJGzJ80yzXzhZCQcohjdhk1BJaVaIWvIQgGba88XraFRs2FH4JFse3UIBgw9gtP0TinJmcYKJJmgol3V0OVgNCiJc61rCvRfcLDXv0RFp9h8

• Fix SOC Blind Spots: See Threats to Your Industry & Country in Real Time

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiglAo-MBBYaWayNY0Hzg8QFcOCwylI8JM8RcOED0buLBNU32LMftRfErS9VknflDViF5hMZsAI4jzWvAemNsTcL71ICA1dAneg-gBrrb3j98XsCSyuLFFC

• New ForumTroll Phishing Attacks Target Russian Scholars Using Fake eLibrary Emails

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiov02Hir3n9ONPKRPyGJ5wYYyqS6kxqhe2VXSqr3ygQOj5xZn8llZI9YbUgM1ups321geaVj2vlJ6wolU0byZi5XzE1E38f8x42ZjzlcRfLsixdFin2PVW

• APT28 Targets Ukrainian UKR-net Users in Long-Running Credential Phishing Campaign

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQLzd6YnWyQ56XbtHlhI75xek4Jz48-N00eU2I6DGqA6KBmlo-vE932Zz6ASRHE9KetD1kl8j45BoGhhYRNWFFyamUMFWugIxQ9YIAx1ZLsXqqqYz7-tiA

• Kimwolf Botnet Hijacks 1.8 Million Android TVs, Launches Large-Scale DDoS Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6-q5Xa6KgWXYqaEGb7hCK-lfm5MRlkicK1xFVL8HwS5-jHv0MAY5YYAyTmuRfITo4hEjKmhAnfXMpWLSpqS5jQkSMFVw2DSPnuCvTCpwTrFBUwNwWoPF8

• SonicWall Fixes Actively Exploited CVE-2025-40602 in SMA 100 Appliances

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOyrg8g1G4OnVQ36TFxAz4aVSNLSYRl241I2Ai7LGLTf0mkviQL2ZhBpoQRKS-lb3lRuwQJKKEeAfNVzzujNLnZzQEseWLaeoiSmUfbmUCdhaw6w4tJXr2

• Cisco Warns of Active Attacks Exploiting Unpatched 0-Day in AsyncOS Email Security Appliances

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpjMjZETJCJzsn3zNMvhFcueq4Jg-O7GD4cD5JoRzRRlP5TeeoxTkjVNrFJsNM1AGDrsTu6cTS21FhA5IeCIFA8lv1T7T2tzKp7gax2Iqkuw2NQ62cIdls

• CISA Warns of Exploited Flaw in Asus Update Tool

  The US cybersecurity agency CISA on Wednesday warned that hackers have been exploiting a critical vulnerability in the now-discontinued Asus Live Update utility. The exploited flaw

• CISA Flags Critical ASUS Live Update Flaw After Evidence of Active Exploitation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEictGhjT9OZJTuEYOqE7telpBLN4MwLPN-JQ47nzM7kRB30tNAxJZTj9G4et941pBqOhHYsMelUkkFuHr4YpaSePmF2yI9HlFtjucfPOrUBLygp2yn9Si1R

• North Korean Hackers Make History with $2 Billion Crypto Heist in 2025

  North Korean hackers reached a dangerous milestone in 2025, stealing a record-breaking $2.02 billion in cryptocurrency throughout the year. This represents a 51% increase from 2024

• HPE Patches Critical Flaw in IT Infrastructure Management Software

  Hewlett Packard Enterprise (HPE) this week announced patches for a critical-severity remote code execution vulnerability in its OneView IT infrastructure management software. Track

• Kimsuky Spreads DocSwap Android Malware via QR Phishing Posing as Delivery App

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXfvLiKFsryuDZrfr2qiAYePwlVAsyejJM2t1ZkDfiC3UESmR-QuVtIsdDQxuak0MBFgJg6k5RVzWmR5nBCJ3RSuqfCB1XgWie0qQow6mg3DhBx5E5sjd9

• Roundcube Vulnerabilities Allow Attackers to Execute Malicious Scripts

  Roundcube Webmail has released critical security updates addressing two significant vulnerabilities affecting versions 1.6 and 1.5 LTS. The flaws could enable attackers to execute

• UEFI Vulnerability in Major Motherboards Enables Early-Boot Attacks

  Motherboards from several major vendors are affected by a vulnerability that can allow a threat actor to conduct early-boot attacks. According to an advisory published on Wednesday

• The Case for Dynamic AI-SaaS Security as Copilots Scale

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRAVPr4nxCDAf4euDWVcFXtlRMe6lkY8T4OCHznoMF2p0khf6nxtvCRd6ucmLfQ1mNk4DbL1AFBWwtJLyAKTtBrHGq7klKPhXr34anEfsJI54GfilYo01u

• Microsoft Released Out-of-band Update to Fix MSMQ Bug that Impacts IIS Sites

  Microsoft has deployed an emergency out-of-band update to address a significant issue with Message Queuing (MSMQ) functionality that emerged following the December 9 security patch

• North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 Fake IT Workers

  North Korea has dramatically scaled digital operations to fund its sanctioned regime, according to data from Amazon and blockchain analysis firm Chainalysis. A new report from Chai

• North Korea-Linked Hackers Steal $2.02 Billion in 2025, Leading Global Crypto Theft

  North Korea-Linked Hackers Threat actors with ties to the Democratic People's Republic of Korea (DPRK or North Korea) have been instrumental in driving a surge in global cryptocurr

• New Tool Released to Detect Cisco Secure Email Gateway 0-Day Vulnerability Exploited in the Wild

  A lightweight Python script to help organizations quickly identify exposure to CVE-2025-20393, a critical zero-day vulnerability in Cisco Secure Email Gateway (SEG) and Secure Malw

• ‘Kimwolf’ Android Botnet Ensnares 1.8 Million Devices

  A newly identified Android botnet has infected over 1.8 million devices and can launch massive distributed denial-of-service (DDoS) attacks, Chinese cybersecurity firm XLab warns.

• ThreatsDay Bulletin: WhatsApp Hijacks, MCP Leaks, AI Recon, React2Shell Exploit and 15 More Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNeJtuRy-gjytNj0MAXAb1xvnGYRgQ0DDQnZzdAo5jaT8C8zPIYpYrEBrJykOsYixevHoF4rfux8jhSgmKdO0URETDCJwbVdLzdyj2tsOVobmrROO8OUZb

• Hackers Using PuTTY for Both Lateral Movement and Data Exfiltration

  Hackers are increasingly abusing the popular PuTTY SSH client for stealthy lateral movement and data exfiltration in compromised networks, leaving subtle forensic traces that inves

• University of Sydney Data Breach Affects 27,000 Individuals 

  The University of Sydney on Thursday announced that hackers stole personal information pertaining to roughly 27,500 people from one of its online code libraries. The compromised li

• HPE OneView Flaw Rated CVSS 10.0 Allows Unauthenticated Remote Code Execution

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhH806nHTdXt51O7PVip7PNV2XCDB4KCOygYB69A4vwOOjVyK1B3cNesAvljNSzuj-lAmCe8AgIgrwQtK7fuOckkB4hj1QQ-tYq4OI8lrvsz30cNzfjrOF8

• Ransomware Attack 2025 Recap – From Critical Data Extortion to Operational Disruption

  The ransomware landscape in 2025 has reached new heights, evolving from a cybersecurity issue into a strategic threat to national security and global economic stability. This year

• US Shuts Down Crypto Exchange E-Note, Charges Russian Administrator

  US authorities this week announced the takedown of E-Note, a cryptocurrency exchange allegedly involved in laundering money for ransomware groups and other cybercriminal organizati

• China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJfevEjiw45l8FjqjN4eMMwYTeqYN2gxYbOh-KfWdfb01nRTY2z1Qa0FQkQr6wLEeHJIvzIeqTKjynV1U01qxNNV3XhJbxkMYJnQflKTRgkdFsRezoOlVq

• Hackers Targeting HubSpot Users in Targeted Phishing Attack

  An active phishing campaign is currently targeting HubSpot users through a sophisticated combination of social engineering and infrastructure compromise. The attack leverages busin

• Docker Makes 1,000 Hardened Images Free and Open Source

  Docker announced this week that it has made more than 1,000 secure images free and open source for developers. In May, the company announced the release of Docker Hardened Images (

• New UEFI Flaw Enables Early-Boot DMA Attacks on ASRock, ASUS, GIGABYTE, MSI Motherboards

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgMb3AWaGGzuDhZZM0WBkeEwbCg8zBxsM7-vESRDoizM7NngGTmZZuGjnligGzqAlVZVJF5r4bJH-1B7zQwrjKnSZuTPW0xsebT3djygVTpS3aFfEwBKVh0

• Scripted Sparrow Uses Automation to Generate and Send their Attack Messages

  Scripted Sparrow is a newly identified Business Email Compromise (BEC) group operating across three continents. Their operations are vast, leveraging significant automation to gene

• Chinese APT ‘LongNosedGoblin’ Targeting Asian Governments

  A newly identified advanced persistent threat (APT) actor operating out of China has been targeting government entities across Southeast Asia and Japan, ESET reports. Active since

• Nigeria Arrests RaccoonO365 Phishing Developer Linked to Microsoft 365 Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi81CadfhaxxTeFQDfM8un9wrg4Vx3saV5ZZ5-L3l1FN8aB1RtNMctdkOzKQaTD4ZnfXrzUtTCY7Hhc2TB9Z3wafJ0JbTFRt0rxUPQwRaQjLt68qmzjDlEg

• Iranian Nation-State APT Targeting Networks and Critical Infrastructure Organizations

  Iranian state-sponsored threat actors, commonly tracked as “Prince of Persia,” have resurfaced with a sophisticated cyberespionage campaign targeting global critical infrastructure

• Denmark Blames Russia for Cyberattacks Ahead of Elections and on Water Utility

  Danish authorities say in a new assessment published this week that Russia carried out cyberattacks against infrastructure and websites in Denmark in 2024 and 2025, describing new

• Cloud Atlas Hacker Group Exploiting Office Vulnerabilities to Execute Malicious Code

  The Cloud Atlas advanced persistent threat group has continued its sophisticated campaign targeting organizations across Eastern Europe and Central Asia during the first half of 20

• WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLwTg7kTeuQORUcnenRd81FBUZhq23jpa3MWAlljTHtPVTIRdA7VHw-j7xnc1nOqq5c2Zvz2sr8bO7rrhaUsXAxTAJKudyNugxcmD0oDX3buOXTDb2apFV

• TamperedChef Malware Spreads via Fake Software Installers in Ongoing Global Campaign

  TamperedChef Malware Threat actors are leveraging bogus installers masquerading as popular software to trick users into installing malware as part of a global malvertising campaign

• Iran-Linked Hackers Mapped Ship AIS Data Days Before Real-World Missile Strike Attempt

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVj8J2nS9lYGZyFEqx7TaQVA9AtDdRKj5kb7gKdT1MipdOYmYLn3fcggw2zKHTxKKMvicuO3N7UFEj-QVsoDO-rcOe8JpfJwSCTjX9LcYQNA9iGxHTvQy3

• New Sturnus Android Trojan Quietly Captures Encrypted Chats and Hijacks Devices

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8I7UV4u8O03jdgw6jptITLXyqrcwoVLRUr84vWKRe9ctYFLOAhKGvO7poJq5YZwb7-3a2NzF0smKc5U0KOj6dgRmw5o0jWI0xEtZMjZTZ8KByylPoes-8

• CTM360 Exposes a Global WhatsApp Hijacking Campaign: HackOnChat

  [](https://www.ctm360.com/reports/hackonchat-unmasking-the-whatsapp-hacking-scam) CTM360 has identified a rapidly expanding WhatsApp account-hacking campaign targeting users worldw

• ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware Waves

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDHftpu1bcFinhNlKIe66O-YOhqR69P1D1ZpFlYfjlxgf3VjuOBQwN0d1nhn7OmTTmSi0RhtBpxPPD2pmU9a-t4FAadKhz38Ex4Ix3Lu9XBQMSqEwj6xhb

• Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWCzFuJ27zRdLiXDJLbzAKsXq1B21v769VXyN0N9wjg3aQQPMHqsiaxXi3V6LM1xbQCB0ecsOjlEEORaSeRnnFVBjK3OtrxcTSoSQiadmLSZNDow8eeIB5

• ShadowRay 2.0 Exploits Unpatched Ray Flaw to Build Self-Spreading GPU Cryptomining Botnet

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjT14rn9vNidJuASiqy00Z9vRhL2TJTbX0JWycjYzO4IMjRmjIUXYYKPWF9caqm4qWn0bA9iY9h9LN8ZaKhPI-IeWf2vpei5sHpskrH2L6OW-g5GpmbomdG

• Salesforce Flags Unauthorized Data Access via Gainsight-Linked OAuth Activity

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHdytMLXEXAyU2NJK6I9fULfbh35LHXiwqUiFrPD9dP1oEttB2sIbilhx2JTfRV70qGw9NTB4a4C3iqkAfnoR5m4lLxxKBNBWTI6DVQYP3wwHPQHFBkAec

• SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbMvEKpOcEVwv6IjWSNiYkkN2wWOKLs16pD5v61b2ZqbuN2cadR1ZxO02SgX2XnVdKURTQwnC24frHCV28jknGGC2hpjotuJIQB7ow6wCvsB-kguy5YJyr

• APT24 Deploys BADAUDIO in Years-Long Espionage Hitting Taiwan and 1,000+ Domains

  Years-Long Espionage Hitting Taiwan A China-nexus threat actor known as APT24 has been observed using a previously undocumented malware dubbed BADAUDIO to establish persistent remo

• Why IT Admins Choose Samsung for Mobile Security

  Samsung for Mobile Security Ever wonder how some IT teams keep corporate data safe without slowing down employees? Of course you have. Mobile devices are essential for modern work—

• Google Brings AirDrop Compatibility to Android’s Quick Share Using Rust-Hardened Security

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiId5Cf7YMovzRkPOI6S1tm4fgDKNLcFvdg3ASml-f-mWCwj0rtSAZJ-P4jmORklaJoflcXdYLEVkEjwXMqcoy7e0c-fAPSpE8R5Nvt5cc4VTxf-D1Nh-8q

• Grafana Patches CVSS 10.0 SCIM Flaw Enabling Impersonation and Privilege Escalation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSd96MdjXbbJYSzwIs4CNhCrhOSN5Avm0c3kgMEQVlWBzUPXLbXKsKyjkLhSeKQLjJRbzxyl7SCv62tvd2GEHySWOOCf5h2u-5md5Nycx87WmNUx0CSZ7F

• CISA Warns of Actively Exploited Critical Oracle Identity Manager Zero-Day Vulnerability

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXwWMS8EhgUJUcX0Z5k9X0VxrwBazuqCRLmma6R5vf1LTby5HJtMpB6eWFTwwh3klO-Hv0fTmp9cCoupTckKOzv4giyXIgamc63-ILAbZOMsQI3Y7AkO0A

• Matrix Push C2 Uses Browser Notifications for Fileless, Cross-Platform Phishing Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8zV9hPvOUBQV7bQvL21L0QPcaCbKUW3y1D4puHbsR7Ig3KTf8W7V52Gs4drcN6P7Ss49eYUSYcC13N10xBKUzA8Pr1cmBpzbUbO5t31wLs9b-Vk1XAxdO

• China-Linked APT31 Launches Stealthy Cyberattacks on Russian IT Using Cloud Services

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0ApbbGy1VeM3uMCY8dVuTIzKS2QJ1wsy4n57G1cLRnEfWcZ2UIsRx8AhTUv8lqBkZb3CQPhalZOTRXo1E8A8LR8EHjecR51E7dgfDImHhTYmYulkhNmv8

• ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access

  WSUS Vulnerability ShadowPad Malware A recently patched security flaw in Microsoft Windows Server Update Services (WSUS) has been exploited by threat actors to distribute a malware

• Chinese DeepSeek-R1 AI Generates Insecure Code When Prompts Mention Tibet or Uyghurs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEjQ9rfA8Zp1EdwbbQFYvDatH7IMcqNuAoSBVo1iQqGJydHnGv87nJSCjLWDtnfr9-dkGA8qAP4GmcKUP5PcbXorNWwQu9LInQuVansUCmGFVBRD8wkpAp

• ⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhaY0D1uryoUbPxaE9MLeUqyN7bBUQFTLeQwTbbjA8qRoi5wp1EAeBRo-M8-hW7bQSlh3BdniZRoqYTwzBs59qMIUoPIOHmmRAVuN7ZvBE-NDljn39K9rfe

• Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMa-67ZZISIwWgUdgRgW3UYZPITPvhdIAgvmlweAyX7XXpWIIJm316uRaadc2qlxaBlvplLhueff-sQ1SUYE1hOZTsumdMnCvwzioWb1S7pfZ6ks9sFRLX

• New Fluent Bit Flaws Expose Cloud to RCE and Stealthy Infrastructure Intrusions

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglthAM8BOOHnPV1FD-cS4ytxy6NAV-36uBknDThxhfkbb4DdfzRkVt03DWxFsmD3Q9xTBCvTJa2FhE47zrbVeSIWaopvPq4LhNcz6kSjVhJahBpgn4SdUU

• CISA Warns of Active Spyware Campaigns Hijacking High-Value Signal and WhatsApp Users

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyjmpd6o7-HWK7FLfSLWXDI1Y5FeB1NBpBd4vIIkCddP-RhMTbVUynU6YynC6tMw-A36Q47s4bAyb7rgYsf-V4M8gFCerUIDc4IO4tFHdyLWEMvvaaUguv

• Hackers Hijack Blender 3D Assets to Deploy StealC V2 Data-Stealing Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRFdtqg4iFeVtSsDgOcgCshEKe9l9m9hw0uYroyMbfEttzophIslNnF67eArn2aTCcTuZ1YBnusZyDtK43EeOftKRYLU06weYnQqUufkUJzANaVuFQqzct

• 3 SOC Challenges You Need to Solve Before 2026

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiO5j2evccdjHPPJ5xyuSjPeQIWjxX3nPprgbbjNMMJqK9mMzxniqf9v2GGOLZQ7lkUtpJo8SO4pe72S2wtOV7XVjE5g02BJxapakZclQ79TmSN-OjtBVou

• ToddyCat’s New Hacking Tools Steal Outlook Emails and Microsoft 365 Access Tokens

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNpga80w98u9OErGtSp29H9OnZOEqxJ6f5M0tMxrFaWffBBWGE4K8AS6vy1-WEB5f0L-lUaQGvYb4YVdEq9fukFedxw18lq0C8p2IsM9-cZ51Jk4fP0hyp

• JackFix Uses Fake Windows Update Pop-Ups on Adult Sites to Deliver Multiple Stealers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgpwmpMC2coSECbndEHIVrYYNz9k16YYM0KkZjT69eMkozDT-LMxy920BF8Hxw34C-VyFCTwhZUSJQqQOzgp8UlcEBdb90C5iGVfM67fJ2gP9KNx0H0tJsJ

• Years of JSONFormatter and CodeBeautify Leaks Expose Thousands of Passwords and API Keys

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMOKzumRIbT28KmhxEYK7XbBCh9DFCNL3o9nhJynO8qEPufvtFSaUZ410fDSym6bQyAxTbStDCFnOjDG4QwashtUee4Cclcfu6MQpcWkcjFhnlzNyMDFLL

• FBI Reports $262M in ATO Fraud as Researchers Cite Growing AI Phishing and Holiday Scams

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifp-5U7-OH3RwkfuYRMV7dZ0xBPbvmwprx6SOtovCc17OUYWlzXcUP-uZwhh6C03vWoNO8X48RWVDCVMChYy27HUwcRJ3x4em7PQveUxr2Jt4BOTgHBCjE

• RomCom Uses SocGholish Fake Update Attacks to Deliver Mythic Agent Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmBSFa4FVI0KsN6x79w1ISJPMe3RexBvzAM-vy-bmltD5bSNQYb4nZxHqKLVlugTTgkVXDdIPqM2G23NT4hCLTqYA3wfm46xAHjsnHiwc-tXsOR7QrTz6Q

• Chrome Extension Caught Injecting Hidden Solana Transfer Fees Into Raydium Swaps

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh07kZL9gPVO6CAgydSwgWaGQyaeOYAfysQ-YnUzeYR05B9sOlvBzVUPcu4OK-idfpgitAZpvjmqWBSijJ-z0-k8SFvWBB1w9-dX5YP-B7q2R3uNB81yYMK

• When Your $2M Security Detection Fails: Can your SOC Save You?

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkw0MmcqqKZNxhyucPZCx6y1I2RgOoB3X4reu6qVkLYeMWCdU4jfxolQTdLLwRFdA2bVjxw0F-QyR0XXpAV-v-commkh3NcxuOr3QOEtD0zkc-fvTavnhG

• Qilin Ransomware Turns South Korean MSP Breach Into 28-Victim 'Korean Leaks' Data Heist

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZLFjSSfGkqSN0JR2Bn3chbdA6ZWeRT-TPvVWvosbR8gqrvxxpndEARBl7kUES8N1hVSuPYweHiF2E3FOCb6VgM5rCmBkzWQTvFABAgr4EaFZ99Z6R9uDz

• Shai-Hulud v2 Spreads From npm to Maven, as Campaign Exposes Thousands of Secrets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghgyXKKmEGWfIkqMuka-PLw6JrlbPx6Ptub1wNLhbJpyZDfQbTvmYfoV1wzIKc6af7Axp-KlbkHDgadFI6P1iWAe0g8xbyEmKAZazSUZ1aleKTfRgxF7DO

• Bloody Wolf Expands Java-based NetSupport RAT Attacks in Kyrgyzstan and Uzbekistan

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjF1NjcNl0amY7zxe4zJ58EcQQ7cm-HPNA2F3qrnTLAeF1lyBNGx1SvEnmz0Ok5DUV8ZRiOZP0fDBftP0LIZRcShjLexQJ6nbXiQsFaBEXc8bSHuTmGjKGs

• MS Teams Guest Access Can Remove Defender Protection When Users Join External Tenants

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgMd0lsjItddYFH1gCm6LZYxVDobM4ZWOweikeQFAT0yZNSYS8WKfg61LxSRjc49watAPtqESgvWx0UwppGQuw9FU8OMQDf9EOi1fWnVXFH8L7QNOplD1-v

• Why Organizations Are Turning to RPAM

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhusj8mwC5L9YXaH6bYVNnFLp4wM8q6RJloaKi4WKGtv4v1ysSUlcI-q69rWXZCwhwDBdG6Uuy-2eb1sbK27TtKqlx37mNgxYB3kZ1lnwN9uMKnHVsrDMiE

• North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbHywoT-t7dx-yFp5L6Kj6AHPWvHYFoziGtqauAQGWvY55xCGgiw80AKaK962SgdMmomBf9EMT9cPAGPxx5GTi4lFqckm1Cjk3hGtRo1AnWVEjZkd89HlS

• Hackers Registered 2,000+ Fake Holiday-Themed Online Stores to Steal User Payments

  With the holiday shopping season kicking into high gear, a massive cybersecurity threat has emerged, putting online shoppers at significant risk. A coordinated campaign has been di

• Legacy Python Bootstrap Scripts Create Domain-Takeover Risk in Multiple PyPI Packages

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMdVHqK8sA27WWR3ySGxson4kuqmBaXHQlFm3PSmRaHV6IGdnkzK0tUvgrFyKepL2COnnmyiIBdTy-ho7pFKSPQP7cCxkOugoV0s2k3dUBYC0FI5BkY2tm

• Operation Hanoi Thief Attacking IT Professionals with Pseudo-Polyglot Payload to Hide Malware

  A sophisticated cyberespionage campaign dubbed “Operation Hanoi Thief” has surfaced, specifically targeting IT professionals and recruitment teams in Vietnam. Discovered on Novembe

• CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgDyMqGZH8Rp4Y4Nt38tsox7FPdyDY1hpVLBuBDSX4Zfz3FlXPCzUR5TIOcLse3Q37fkYRyC7M-pdCEOmvqhLxWBvynMu8XUeVjaZzdUX5UlW4rqqGs504

• KimJongRAT Attacking Windows Users via Weaponized .hta Files to Steal Logins

  A new remote access trojan dubbed KimJongRAT has surfaced, posing a severe threat to Windows users. This sophisticated malware is believed to be orchestrated by the Kimsuky group,

• In Other News: HashJack AI Browser Attack, Charming Kitten Leak, Hacker Unmasked

  SecurityWeek’s cybersecurity news roundup provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a valuable summary of stories tha

• Tomiris Shifts to Public-Service Implants for Stealthier C2 in Attacks on Government Targets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0Lxoj-jT0lWvAbKZzQ8tBsiD8CE76EWRKAfGTID9mVbmf8BoJx5N1fR3ztKD6Yb3B8bRlGyMEArCKaW939VXvJT1G-z2iIxJrjkl0NBONbMDU3NL8LvqD

• Chinese Front Companies Providing Advanced Steganography Solutions for APT Operations

  Advanced steganography techniques are becoming increasingly central to state-sponsored cyber operations. Recent analysis has exposed two Chinese technology companies, BIETA and CII

• French Soccer Federation Hit by Cyberattack, Member Data Stolen

  The French soccer federation has been hit by a cyber-attack that resulted in the theft of data relating to members, it said on Thursday. The FFF said the software used by clubs for

• New Albiriox MaaS Malware Targets 400+ Apps for On-Device Fraud and Screen Control

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6xz7mWkJclIA4imdNn5zjZkxiRArjemiRQSUONKAKk1aC52C-R6DMyKI09PjF6iBtWNy0OvYZjOqovn3RTGYpPyiIlQtKp292GbxH8dfCDSt9HU3m37iI

• Malicious VS Code Extension as Icon Theme Attacking Windows and macOS Users

  A malicious Visual Studio Code extension posing as the popular “Material Icon Theme” has been used to attack Windows and macOS users, turning the add-on into a hidden backdoor. The

• Australian Man Sentenced to Prison for Wi-Fi Attacks at Airports and on Flights

  An Australian man has been sentenced to prison after he was caught launching Wi-Fi attacks at airports and on flights, the Australian Federal Police (AFP) announced. The police’s p

• Webinar: The "Agentic" Trojan Horse: Why the New AI Browsers War is a Nightmare for Security Teams

  [](https://layerx.easywebinar.live/webinar-ai-browser-security-playbook?utmcampaign=THN) The AI browser wars are coming to a desktop near you, and you need to start worrying about

• India Mandates ‘Undeletable’ Government Cybersecurity App for All Smartphones

  India’s Department of Telecommunications (DoT) has ordered smartphone manufacturers to preload a government-backed cybersecurity app, “Sanchar Saathi,” on all new devices sold in t

• CISA Warns of ScadaBR Vulnerability After Hacktivist ICS Attack

  The cybersecurity agency CISA has expanded its Known Exploited Vulnerabilities (KEV) catalog with an old ‘OpenPLC ScadaBR’ flaw that was recently leveraged by hackers to deface wha

• ⚡ Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcq3E5v51c0rVzjd3B8VALjRAmWr8iM2Uy8icWvBKtPm85iW1D9oPIgVyRoNMU51ycVecBo6UBEsmOveLErPzL96cTiC-AvjllbVpTLKqRHD6zSrim61Bu

• OpenVPN Vulnerabilities Let Hackers Triggers Dos Attack and Bypass Security Checks

  OpenVPN has released critical security updates for its 2.6 stable and 2.7 development branches, addressing three vulnerabilities that could lead to local denial-of-service (DoS), s

• New Albiriox Android Malware Developed by Russian Cybercriminals

  A new Android malware named Albiriox is being offered on cybercrime forums by Russian-speaking threat actors, according to online fraud management company Cleafy. Albiriox is a ban

• ShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into Spyware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKcr0fKdcaAiLI2df3VuAO4N-LNwwcm7EwlF6FcNhrdtc3rxujMv18inGk8B5PwclHeM7APWwFpdHYkm1RoKFuL9PnFsR2Evmm80od17LBp3S6-veUG0R0

• 4.3 Million Chrome and Edge Users Hacked in 7-Year ShadyPanda Malware Campaign

  A sophisticated threat group operating under the name ShadyPanda has successfully compromised millions of browser users through a methodical seven-year campaign targeting popular C

• $29 Million Worth of Bitcoin Seized in Cryptomixer Takedown

  The cryptocurrency mixer Cryptomixer has been shut down by law enforcement agencies in Europe for facilitating cybercrime and money laundering, Europol announced on Monday. Accessi

• India Orders Phone Makers to Pre-Install Government App to Tackle Telecom Fraud

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhA7sPiutSMvrqIMK5SFFM4l-nBy7iKHGTuStvLuI7A31pMoQocvyQDRqoruAs2pj8twBB4dlbzAdVgBgvF-Whwp2SgpoKaCvTX4mMKQR8NkuXcNReYPCdN

• Google Patches Android 0-Day Vulnerabilities Exploited in the Wild

  Google has released critical security updates to address multiple zero-day vulnerabilities affecting Android devices worldwide. The December 2025 security bulletin reveals that thr

• Facial Recognition’s Trust Problem

  Facial recognition is used for public surveillance and business access control. The two are very different; but both functions suffer from a major drawback. People do not trust fac

• Google Patches 107 Android Flaws, Including Two Framework Bugs Exploited in the Wild

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjL-2eGLpT-dW3-PbjBoWaQtkVc-dEwO5RtxY532IOybzHPHQWo4lkSaf6fkpNyDhWyoWtlmgfweLMyDEkBGEyr160z28tTVHoo6hRKfUh4yywZ9yMKq5hW

• Sonesta International Hotels Implements Industry-Leading Cloud Security Through AccuKnox Collaboration

  Travel and hospitality industry leader Sonesta International Hotels partners with AccuKnox to deploy Zero Trust Integrated Application and Cloud Security \[ASPM and CNAPP (Cloud Na

• Gainsight Expands Impacted Customer List Following Salesforce Security Alert

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLmTJUwBQylR2JxQKyRPwiaWc6Ia-71wvno8Z5H4N6-8KX7WBGjZLU2ONRBc4Qd7vpIOcWXWkcrekIsNcFhS75LB7IwPMOvGMQPY3xe2yl0qPlgoly1tEd

• ThreatsDay Bulletin: AI Malware, Voice Bot Flaws, Crypto Laundering, IoT Attacks — and 20 More Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEht6UhaJKO8B5nl8PUBMTiIxKgF2ZG2IyUHemsnutwdvUzAoD9LKGyJje58Z40uNuSorotRXHqJPcfW40M1TIoUn9Ncv1wRhCIq5s3jpjvJcCOs-4LHwbUM

• Russian Hackers Target US Engineering Firm Because of Work Done for Ukrainian Sister City

  Hackers working for Russian intelligence attacked an American engineering company this fall, investigators at a U.S. cybersecurity company said Tuesday — seemingly because that fir

• Dartmouth College Confirms Data Theft in Oracle Hack

  Dartmouth College on Tuesday confirmed suffering a data breach after cybercriminals targeted its Oracle E-Business Suite (EBS) instance. The Ivy League research university said it

• Opti Raises $20 Million for Identity Security Platform

  Israeli cybersecurity startup Opti this week emerged from stealth mode with $20 million in seed funding. Founded in 2023 by veteran cybersecurity experts, Opti has built an AI-nati

• Angular HTTP Client Vulnerability Exposes XSRF Token to an Attacker-Controlled Domain

  A critical security vulnerability has been discovered in the Angular framework that could allow attackers to steal sensitive user security tokens. The vulnerability, tracked as CVE

• Ransomware Attack Disrupts Local Emergency Alert System Across US

  A ransomware attack targeting a third-party emergency alert system used across the United States has resulted in a data breach and significant disruptions. Cities, counties, and la

• Malicious Chrome Extension Silently Steal and Injects Hidden SOL Fees Into Solana Swaps

  A new threat has emerged in the Solana trading community. Security researchers have discovered a malicious Chrome extension named Crypto Copilot that appears to offer convenient tr

• Cybersecurity Is Now a Core Business Discipline

  Cyber risk has become the background noise of modern business. We’re seeing nearly two thousand attacks per organization per week in the first quarter of 2025—a 47% rise year-on-ye

• Hackers Actively Exploiting IoT Vulnerabilities to Deploy New ShadowV2 Malware

  During late October 2025, a new malware campaign dubbed ShadowV2 emerged, coinciding with a global AWS disruption. This sophisticated threat actively exploits vulnerabilities in Io

• Thousands of Secrets Leaked on Code Formatting Platforms

  Users of code formatting platforms are exposing thousands of secrets and other types of sensitive information, attack surface management provider WatchTowr warns. GitHub found roug

• Gitlab Patches Multiple Vulnerabilities that Enable Authentication Bypass and DoS Attacks

  GitLab has released critical security updates for its Community Edition (CE) and Enterprise Edition (EE) to address multiple high-severity vulnerabilities. The patches, rolled out

• Account Takeover Fraud Caused $262 Million in Losses in 2025: FBI

  Cybercriminals engaging in account takeover (ATO) fraud schemes have caused over $262 million in losses since January 2025, the FBI reports. The threat actors were seen impersonati

• North Korean Hackers Exploiting npm, GitHub, and Vercel to Deliver OtterCookie Malware

  A major security threat has emerged targeting software developers worldwide. North Korean state-sponsored threat actors, operating under the “Contagious Interview” campaign, are sy

• Clover Security Raises $36 Million to Secure Software by Design

  Cybersecurity startup Clover Security on Tuesday emerged from stealth mode with $36 million in seed and Series A funding from Notable Capital, Team8, and SVCI. Founded in 2024, the

• KawaiiGPT – Free WormGPT Variant Leveraging DeepSeek, Gemini, and Kimi-K2 AI Models

  KawaiiGPT emerges as an accessible, open-source tool that mimics the controversial WormGPT, providing unrestricted AI assistance via jailbroken large language models. Hosted on Git

• NVIDIA DGX Spark Vulnerabilities Let Attackers Execute Malicious Code and DoS Attacks

  An urgent security update for its DGX Spark AI workstation after discovering 14 vulnerabilities in the system’s firmware that could allow attackers to execute malicious code and la

• OpenAI User Data Exposed in Mixpanel Hack

  OpenAI is informing some users that they may be impacted by a recent data breach at product analytics and event-tracking solutions provider Mixpanel. Mixpanel disclosed the securit

• Dead Man’s Switch – Widespread npm Supply Chain Attack Driving Malware Attacks

  GitLab’s Vulnerability Research team has uncovered a large-scale supply chain attack spreading a destructive malware variant through the npm ecosystem. The malware, an evolved vers

• Webinar: Learn to Spot Risks and Patch Safely with Community-Maintained Tools

  [](https://thehacker.news/resilient-patching?source=article) If you're using community tools like Chocolatey or Winget to keep systems updated, you're not alone. These platforms ar

• Asahi Data Breach Impacts 2 Million Individuals

  Japanese beer giant Asahi on Thursday announced that hackers stole the personal information of roughly 2 million individuals in a disruptive ransomware attack in September. Asahi d

• Qilin RaaS Exposed 1 Million Files and 2 TB of Data Linked to Korean MSP Breach

  The “Korean Leaks” campaign has emerged as one of the most sophisticated supply chain attacks targeting South Korea’s financial sector in recent memory. This operation combined the

• Shai Hulud v2 Exploits GitHub Actions Workflows as Attack Vector to Steal Secrets

  The software supply chain is under siege from “Shai Hulud v2,” a sophisticated malware campaign that has compromised 834 packages across the npm and Maven ecosystems. This new wave

• Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP Update

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggbHBZ4IWtK9XUQJlVKlYU-KRFB6bMqJMGZUr640ws6tiDaAcew4Pf9SCMc3aUrTo52vkVQ2OGUXwZ1y9M0jRb0mywWeYspEWQ2QyjaRfWz1Z8jTDn1Hzs

• Amazon Uncovers Attacks Exploited Cisco ISE and Citrix NetScaler as Zero-Day Flaws

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsh7XL7mszgdfrNOOBzjEXspnLIuY2VVyB1VWyIj36nuDhnUiEWJPiy2C7PaZ7Zdqb2DSmG1NtIRRLpvNRFiPjUZDNKrQmYL9CjNsGZPPCfCK9NgsQiPrv

• Google Sues China-Based Hackers Behind $1 Billion Lighthouse Phishing Platform

  Lighthouse Phishing Platform Google has filed a civil lawsuit in the U.S. District Court for the Southern District of New York (SDNY) against China-based hackers who are behind a m

• Over 67,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYS26azmd2hhOZvimLT0xZHe62lE9WVPNiqVvatrXANuYx-pkBp8n1veAPLoq4FmVbgv3ACPPlFkBpqpGAVQ8X-yMGCWcuZjYocPiYlpJDhw6ITx-CXQzd

• CISA Flags Critical WatchGuard Fireware Flaw Exposing 54,000 Fireboxes to No-Login Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPj6dtQtZKcXl4TjnJfg2t7WniTYLkQ1NLwaQzVB6A-EXj3b3kn6ZGSrAi4AkjkI2HcbdmEGePORP5d1Z7b2awdGjIQD9TCCOPr0YLUUjU4Bazi9LsKY3f

• ThreatsDay Bulletin: Cisco 0-Days, AI Bug Bounties, Crypto Heists, State-Linked Leaks and 20 More Stories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjcN5gUiUl1dr7wmK15gRPjL2FiB6JcudmfA1-b8FM8m4MeOGl1jiAXwihlPQrYa1nbrs6eupd6Lk5h-XiGIybMkphWiNvv3uBC1eVewDUxQ-Z2WANldO9

• Operation Endgame Dismantles Rhadamanthys, Venom RAT, and Elysium Botnet in Global Crackdown

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjY00oEG13hfnasBGraI20sE4zXVScyf9TwtpMtBdvk4uOOeWIaCeiUXi-e-rBOypRqVbQP4ydMp9a95qu7LQiUv4Xt-mmGd5eJIWIFp9JGJaDGVyGbMxZ8

• When Attacks Come Faster Than Patches: Why 2026 Will be the Year of Machine-Speed Security

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifXsGMzSUW1AUV08r1UPZTqpZXXvAv6Th97yAF1ja5P66mnLefkfQZapkXuvk0LIjdD312TqcZ3DXZSnMRjA3FbJSUKNSH1CcjhoGJqfwe7q6ImqOiSTKv

• Fake Chrome Extension “Safery” Steals Ethereum Wallet Seed Phrases Using Sui Blockchain

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhS-Kf6dnTbbnxktKjoq7yOuQcEZ5eAObBOOXkT5cPRRCUZGyfDnQOrZA8yiAE-fn6mXRgzOiWxB7uFr2ofyOnoUIWRW9geQttVX95HTIeAiU2sS4osiKQi

• Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests' Payment Data

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNhnnFN1YzknlukZNSETlpsGEWJunJd8RntQwlE18t1lnZfUv4tbHeCJkkLPVlZsRTU3mz2Tfc1hsiCwmm2o-WcAz5zlXQqjatPqI9l8xz7MZDJC3rqW17

• Now-Patched Fortinet FortiWeb Flaw Exploited in Attacks to Create Admin Accounts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9W9UTKHr6MEohKLcpKi93cht-Dh-uEOu4ga5ezZqlce29RSPo1X2cnCAUQijihCPVHaENo8Gz4jfDjcxHd3Gqe6kqOt3Ff3-GikPzHA6pL-yJFxlmuMxn

• Chinese Hackers Use Anthropic's AI to Launch Automated Cyber Espionage Campaign

  Automated Cyber Espionage Campaign State-sponsored threat actors from China used artificial intelligence (AI) technology developed by Anthropic to orchestrate automated cyber attac

• Ransomware's Fragmentation Reaches a Breaking Point While LockBit Returns

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3uOnzefv5B2kTQp6TWvGzdYVbKeSKfysAsFwHYZwrX14JYItv8p8x1NQwG5wOyRqJT0oaAWfGM0VWHZrsRa0ULtSxxfEAFoMkbd4hFmx7X7KnWXbF6XaK

• Iranian Hackers Launch ‘SpearSpecter’ Spy Operation on Defense & Government Targets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZy2HLaE1qe-Ab4Bld4GiRpAYh0uVDVr3zCE1p400nKomsAs0MdvK9oCnNrJALSYPVvJud59Ik0Ax90X12KX93i97AwzbnUHm262vSL-nelhZHwRQR6WIF

• Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference Frameworks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvXUzfhBmTMQepFWxeCqGiCA1jeHDUVl22obOgD7DCdE-UtUwkmZVN7j1TuQAv0P0yRwKviM36m4hNCyORyL2-NegjDYQ3QcRYa1DeWD9Txp3RoZfKHn4l

• North Korean Hackers Turn JSON Services into Covert Malware Delivery Channels

  Malware Delivery Channels The North Korean threat actors behind the Contagious Interview campaign have once again tweaked their tactics by using JSON storage services to stage mali

• Five Plead Guilty in U.S. for Helping North Korean IT Workers Infiltrate 136 Companies

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjiZLSJZYH44phyXKQDmoGmkWealYMHJc95Ee6EYNEGqEKPn249Xacy2yylC7XobIDqYHHJNGtBy5zTs2RXCq6Y0kKqlfYOk4rUrMR99N1NdsOcB1prH8KE

• RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

  XWiki Servers The botnet malware known as RondoDox has been observed targeting unpatched XWiki instances against a critical security flaw that could allow attackers to achieve arbi

• Rust Adoption Drives Android Memory Safety Bugs Below 20% for First Time

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqGZvQDuR4AG6uEiMhGDHMsSkL1TLRNfW1kBylVrG6oiDRdisUMsnMb2vjfad2IywwPHoJsNNX4kuhs1UPn07KCLntz7C0AdmNTfDNKApwOAKnjDtuNuPR

• The Top 100 U.S. Cybersecurity Leaders Shaping a Safer Digital Future

  To recognize the individuals driving the transformation of cybersecurity in the United States, The Cyber Express, in collaboration with Suraksha Catalyst, proudly presents the Top

• Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9NSUrEcfHdyrM8wzo21DFLFtDBZPlKPLyFLYRfQWYCS8wyhxYLj35JrSqYNFT9739fS9yXd3HSwlcTw4k3j-v96987CW9AWYoaC-BcCCnmTUJ09p7mk07

• Iranian Hackers Target Defense and Government Officials in Ongoing Campaign

  The Iranian state-sponsored hacking group APT42 has been targeting senior defense and government officials in an ongoing, sophisticated espionage campaign, the Israel National Digi

• Washington Post Confirms Data Breach as CL0P Claims Over 40 Oracle Victims

  The Washington Post has confirmed that it was breached by a threat campaign targeting Oracle E-Business Suite vulnerabilities. The Washington Post data breach is one of more than 4

• 5 Reasons Why Attackers Are Phishing Over LinkedIn

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHSBFtlHKrVs9-Dj5zayONnKJJ7pxOH6p61JdLoA-MxIckL6ZKGIgAbOHty49BGJzpxEfzt74eWhHxrE3FH4YEOojboABz-KCAVTBA6BNM0yJ8OptrXIv6

• Chrome 142 Update Patches Exploited Zero-Day

  Google on Monday rolled out an emergency Chrome 142 update to address a vulnerability exploited in the wild as a zero-day. Tracked as CVE-2025-13223 (CVSS score of 8.8), the exploi

• UNC1549 Hackers with Custom Tools Attacking Aerospace and Defense Systems to Steal Logins

  Since mid-2024, a sophisticated Iranian-backed threat group known as UNC1549 has been conducting targeted campaigns against aerospace, aviation, and defense organizations across th

• 127 Groups Oppose Changes to GDPR, EU Data Protection Laws

  A coalition of 127 civil society organizations and trade unions have banded together to oppose proposed changes that they warn could severely weaken EU data protection and privacy

• ⚡ Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYrIvih8v801iuwvKwFIn6XEv3AU6PqcVoR14uIenh52wn8RhXB3g2BodktfErZTD-xDHChvyqlxw6dfYcjNShEgDdjBrDXTkoU6zR0uB7iWBPVp8ERzmO

• Everest Ransomware Group Allegedly Exposes 343 GB of Sensitive Data in Major Under Armour Breach

  The notorious Everest ransomware group has claimed responsibility for a major cyber breach against Under Armour, the global sportswear giant, alleging the theft of 343 GB of intern

• Data Stolen in Eurofiber France Hack

  European fiber optic network operator Eurofiber over the weekend announced that a threat actor has compromised its ticket management platform and the ATE customer portal. The incid

• U.S. Announces Five Guilty Pleas and $15M Seizure in Cybercrime Case

  The Justice Department has announced major developments in its ongoing efforts to disrupt illicit financing operations linked to North Korea. Five defendants have pleaded guilty in

• New EVALUSION ClickFix Campaign Delivers Amatera Stealer and NetSupport RAT

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjThsbRJlhgrHOpVNJwYWI0Xc25nNa8uJ5J41VrEz8dv-B5UVNQcMoYyddfmhabnnHzrfrkgJbC8KYvOSwyfgbPRuCo08qaxLraEFbe-F2KQG2YoVjpYae0

• Imunify AI-Bolit Vulnerability Let Execute Arbitrary Code and Escalate Privileges to Root

  A serious security flaw was discovered in the AI-Bolit component of Imunify products. This vulnerability allows attackers to run arbitrary code and even become root on a server. Im

• Princeton University Data Breach Impacts Alumni, Students, Employees

  Princeton University over the weekend disclosed a data breach impacting alumni, donors, faculty, students, parents, and other members of its community. On November 10, the universi

• Eurofiber France Confirms Data Exfiltration After System Breach

  A cybersecurity incident at Eurofiber France was officially confirmed after the company identified unauthorized activity on November 13, 2025. The incident involved a software vuln

• Google Issues Security Fix for Actively Exploited Chrome V8 Zero-Day Vulnerability

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhCEgNFzAj-mvy7UDCWYkUmxoSHSYIJy6THFdmON12TKz7oNgmQSAi4lNK-5NI1tG8106ieRb4dnWK8CNK2mOlkzK0HuyltjU237ZoNH0sOJa1ZAUHlXQmz

• W3 Total Cache Command Injection Vulnerability Exposes 1 Million WordPress Sites to RCE Attacks

  A critical command injection vulnerability has been discovered in the W3 Total Cache plugin, one of WordPress’s most popular caching solutions used by approximately 1 million websi

• Pennsylvania Attorney General Confirms Data Breach After Ransomware Attack

  The Pennsylvania Office of the Attorney General (OAG) has confirmed suffering a data breach after it was targeted in a ransomware attack earlier this year. The attack on the Pennsy

• Microsoft Mitigates Record 15.72 Tbps DDoS Attack Driven by AISURU Botnet

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2dO5PMH9gIwAVDF-XFgn5ydvp3uKTXTcpVHUMVoYtn02VkUCLM3d43lZH2KJMaoDkE2jZeroOAmDeoUnbTPV7nONKGdkOGG5SlK4VBzY90xNuwT4IUv44

• Logitech Confirms Data Breach Following CL0P Victim Claims

  Logitech International S.A. has confirmed that it was hit by a data breach, the company said in an SEC filing late last week. Logitech’s 8-K filing released on Nov. 14 was short on

• Lazarus APT Group New ScoringMathTea RAT Enables Remote Command Execution Among Other Capabilities

  The Lazarus APT Group has unveiled a new Remote Access Trojan called ScoringMathTea, representing a significant advancement in their cyberattack capabilities. This C++ based malwar

• Nudge Security Raises $22.5 Million in Series A Funding

  Workforce AI and SaaS security and governance startup Nudge Security today announced raising $22.5 million in Series A funding. To date, the company has raised close to $30 million

• Seven npm Packages Use Adspect Cloaking to Trick Victims Into Crypto Scam Pages

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrQ7iCz7VpBJXNQKdG7MzL3-W7RzL9PSlbgktyxA2fZYJGJ8lVtKsoJeFD9LgconGlK9MhuRrWUN26eMkd44zv3ro7VmulplS0L9BxtQCCC1d4HnmwnWjM

• Remcos RAT C2 Activity Mapped Along with The Ports Used for Communications

  Remcos, a commercial remote access tool distributed by Breaking-Security and marketed as administrative software, has become a serious threat in the cybersecurity landscape. Develo

• IBM AIX Hit by Three Critical Vulnerabilities, One a Perfect 10. Patch Now!

  Vulnerabilities in the IBM AIX operating system for Power servers could allow remote attackers to execute arbitrary commands, obtain Network Installation Manager (NIM) private keys

• Apono Raises $34 Million for Cloud Identity Management Platform

  Cloud identity management startup Apono on Tuesday announced raising $34 million in a Series B funding round that brings the total raised by the company to over $54 million. The in

• Beyond IAM Silos: Why the Identity Security Fabric is Essential for Securing AI and Non-Human Identities

  Securing AI and Non-Human Identities Identity security fabric (ISF) is a unified architectural framework that brings together disparate identity capabilities. Through ISF, identity

• Authorities Seized Thousands of Servers from Rogue Hosting Company Used to Fuel Cyberattacks

  In a major law enforcement operation conducted on November 12, 2025, the East Netherlands cybercrime team successfully dismantled a significant criminal infrastructure. Authorities

• Massive Cyberattack Hits Kenyan Ministries, Sites Replaced With Racist Messages

  The Government of Kenya cyberattack on Monday morning left several ministry websites defaced with racist and white supremacist messages, disrupting access for hours and prompting a

• Webinar Today: Protecting What WAFs and Gateways Can’t See – Register

  API Security Webinar API Security Webinar: Protecting What WAFs and Gateways Can’t See – Register As organizations scale their API portfolios, attackers are bypassing WAFs and API

• WhatsApp Screen-Sharing Scam Let Attackers Trick Users into Revealing Sensitive Data

  A dangerous scam targeting WhatsApp users has emerged as one of the fastest-growing threats across messaging platforms worldwide. The scheme exploits WhatsApp’s screen-sharing feat

• Iranian Hackers Use DEEPROOT and TWOSTROKE Malware in Aerospace and Defense Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgANn6HS89nO5bbMqMw7uLG3adyrOqaceztN7QFT7PAalBP3sITkB3y9z36naCvTv5YRhgusQx6tXEB9nSmQAru0EV5LNLyj2FWdZwcD55V4ODtEJtB4KOi

• 5 Things CISOs, CTOs & CFOs Must Learn From Anthropic’s Autonomous AI Cyberattack Findings

  The revelation that a Chinese state-sponsored group (GTG-1002) used Claude Code to execute a large-scale autonomous AI cyberattack marks a turning point for every leadership role t

• Meta Paid Out $4 Million via Bug Bounty Program in 2025

  Meta has paid out $4 million through its bug bounty program in 2025, which brings the total awarded by the social media giant since the creation of the program to more than $25 mil

• Cloudflare Global Outage Breaks Internet – Major Platforms on the Internet Go Down

  A widespread outage at Cloudflare, a critical internet infrastructure provider, disrupted access to numerous high-profile websites and services on November 18, 2025, causing interm

• Researchers Detail Tuoni C2's Role in an Attempted 2025 Real-Estate Cyber Intrusion

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0fEPwtke4h6m4SAYqYOUAQSTCvVaghxz5SGIgAKzQlXlriWAB02H4u9ueIs8oX7vH4a3Xx46gIt-0qCeEECEMdyBADDmMnoNvbNM-5wIwkVPSo0f88Sy2

• MI5 Warns Lawmakers That Chinese Spies Are Trying to Reach Them via LinkedIn

  Britain’s domestic intelligence agency on Tuesday warned lawmakers that Chinese spies were actively reaching out to “recruit and cultivate” them via headhunters or cover companies.

• India Outlines Its Global Digital Future and Cybersecurity Vision at WTDC-25

  At the High-Level Segment of the World Telecommunication Development Conference (WTDC-25), India presented a vision for a sustainable and inclusive global digital future, noting co

• Princeton University Data Breach – Database with Donor Info Compromised

  Princeton University faced a security incident on November 10, 2025, when outside attackers gained unauthorized access to a database managed by the University Advancement departmen

• Learn How Leading Companies Secure Cloud Workloads and Infrastructure at Scale

  Secure Cloud Workloads and Infrastructure at Scale You've probably already moved some of your business to the cloud—or you're planning to. That's a smart move. It helps you work fa

• GlassWorm Malware Discovered in Three VS Code Extensions with Thousands of Installs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEib9KHcsG95CDCZyquDxpW0r7mwKqS02FDVPKQJBLIZO-XgsakCkjpdc3QI4i0oIU0IH9uZXTLmFqVzhUPsouw4BHMzdVsBu26TIdddQNNTx0tHeXh4xWNa

• Large-Scale ClickFix Phishing Attacks Target Hotel Systems with PureRAT Malware

  ClickFix Phishing Attacks Cybersecurity researchers have called attention to a massive phishing campaign targeting the hospitality industry that lures hotel managers to ClickFix-st

• New Browser Security Report Reveals Emerging Threats for Enterprises

  [](https://go.layerxsecurity.com/browser-security-report-2025?utmsource=THN&utmcampaign=Browsersecurityreport2025) According to the new Browser Security Report 2025, security leade

• ⚡ Weekly Recap: Hyper-V Malware, Malicious AI Bots, RDP Exploits, WhatsApp Lockdown and More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihDn-ouAjSamS6qppMqJQp0muEjFRy3-Rs2m4u6iNunhDZUPSbi9CQMC1Ub8r7CFkHVo7B98nwiZbsLlbg2XqIm67d6GvqaEaq3ZILZfZVhYafqJydsDCg

• Europe Hosts First In-Orbit Satellite Cybersecurity Competition

  D-Orbit and the ethical hacking collective mhackeroni have concluded CTRLSpace CTF, the first in-orbit satellite cybersecurity competition ever held in Europe. The event, organized

• Konni Hackers Turn Google’s Find Hub into a Remote Data-Wiping Weapon

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIpCQ5f-ly7CHt6FDz9ULaJDLRDxJIrT9-GScn1vGk8jXp6zSXDDAMGMMZ-LY2bolu8-7HPoW0BNzFEyouKuyHNukvjbtUF16MiYtoWUV9Ve3x7ZJZYoE0

• New Firefox Protections Halve the Number of Trackable Users

  Mozilla has announced improved browser fingerprinting protections in Firefox 145 to make user tracking more difficult. The new effort builds on an initiative launched over half a d

• Illuminate Education Fined $5.1 Million for Failing to Protect Student Data

  The Attorneys General of California, Connecticut, and New York have announced a $5.1 million settlement with Illuminate Education, Inc., an educational technology company, for fail

• Hackers Exploiting Triofox Flaw to Install Remote Access Tools via Antivirus Feature

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8M2fayypp4tc7l9XXHjTnXQnhElB2WNkkdqTieUwFXlwEx60oLFnbxhHJQDW3kk7TrkYf5s3WrZEjoaRhTEfVhkehsPEgFQQTIsKH9FgqGPozimhhEazG

• Critical Triofox Vulnerability Exploited in the Wild

  A threat actor has exploited a critical vulnerability in Triofox to obtain remote access to a vulnerable server and then achieve code execution, Google warns. Designed to ease remo

• Chrome Patches High-severity Implementation Vulnerability in V8 JavaScript engine

  Google has released Chrome version 142.0.7444.162/.163 to address a high-severity security vulnerability in the V8 JavaScript engine. The stable channel update is now rolling out a

• Asahi Cyberattack Brings Japan’s Top Brewer to Its Knees During Peak Beer Season

  As Japan enters its busiest beer-drinking period, the nation’s biggest brewer, Asahi Group Holdings Ltd., continues to face the brunt of the Asahi cyberattack that has crippled its

• Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrnztvfc0MS4mXpDjarAdBNhWyKUYkHkdNF-kNrP6lLQ5-IlH3aQx6xwLDyyx7qKhcry5c5t3qUNEsAgE4Qp5yxBKVVmgZWtg8F0RX6bU29uCFoqTw1gdw

• Tenzai Raises $75 Million in Seed Funding to Build AI-Powered Pentesting Platform

  Cybersecurity startup Tenzai has emerged from stealth with $75 million in seed funding, one of the largest early-stage rounds reported in the sector. Tel Aviv, Israel based Tenzai

• SecureVibes – AI Tool Scans for Vulnerabilities in 11 Languages with Claude AI Agents

  In the fast-paced world of “vibecoding,” where developers use AI to build applications rapidly, a new open-source tool is stepping up to tackle security risks. SecureVibes, created

• Researchers Uncover Critical runC Bugs Allowing Full Container Escape

  Security researchers have revealed three serious vulnerabilities in runC, the Open Container Initiative (OCI)-compliant runtime that powers platforms such as Docker and Kubernetes,

• Npm Package Targeting GitHub-Owned Repositories Flagged as Red Team Exercise

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCsz1QgtB3DAorATUJtM4NKEDKSftFK-LplwEwazMvy2CJl8Ua-TnRLa6hpR968DBP4cjFK1rhd70vBYdgx4s24AQepRSFpjXkFezP9hKo2lrYQm-WgcHB

• Microsoft Patches Actively Exploited Windows Kernel Zero-Day

  Microsoft’s latest Patch Tuesday updates address more than 60 vulnerabilities, including a Windows kernel zero-day that has been exploited in unspecified attacks. The zero-day is t

• Windows Remote Desktop Services Vulnerability Let Attackers Escalate Privileges

  Microsoft has disclosed a significant vulnerability in Windows Remote Desktop Services (RDS) that could allow authorized attackers to escalate their privileges on affected systems.

• CISO's Expert Guide To AI Supply Chain Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi237aSL-o6st-xtfun1CAuoHCY2XPJAUUHpQY18pfeww9bVAJ8M1Dtu1gEtk25UoLyeCOHz6k-TFkgBB2FSpY3VHQAYwpJNlBy48ffsfJQgA42Jvg1kNdR

• New York’s First-of-Its-Kind Algorithmic Pricing Law Goes Into Effect

  In a major step toward transparency in digital commerce, New York’s Algorithmic Pricing Disclosure Act officially took effect on November 10, 2025, requiring businesses to disclose

• Adobe Patches 29 Vulnerabilities

  Adobe’s latest round of Patch Tuesday updates addresses 29 vulnerabilities across the company’s InDesign, InCopy, Photoshop, Illustrator, Pass, Substance 3D Stager, and Format Plug

• New Phishing Attack Targeting Meta Business Suite Users to Steal Login Credentials

  A large-scale phishing campaign has emerged, exploiting Meta’s Business Suite to compromise credentials across thousands of small and medium-sized businesses worldwide. Check Point

• GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsgIwNxs0iD5Xi-iqyG6SM6-T-HGSrhisOTbsdIXIbBPhNqqQPaY-m9xeuPvh2V2CCA5qvNL2UrMZqu-LrredR1PXMg71aYeMjoMtpTQ3jExATxGIcP08c

• Cyble Detects Phishing Campaign Using Telegram Bots to Siphon Corporate Credentials

  Cybersecurity researchers at Cyble have uncovered an extensive phishing campaign that represents a significant evolution in credential theft tactics. The operation, which targets o

• ICS Patch Tuesday: Vulnerabilities Addressed by Siemens, Rockwell, Aveva, Schneider

  Industrial giants Siemens, Schneider Electric, Rockwell Automation, and Aveva have released Patch Tuesday advisories informing customers about vulnerabilities in their ICS/OT produ

• New KomeX Android RAT Advertised on Hacker Forums with Multiple Subscription Options

  A newly identified Android remote access trojan (RAT) dubbed KomeX has surfaced on underground hacker forums, generating widespread concern within the cybersecurity community. Mark

• WhatsApp Malware 'Maverick' Hijacks Browser Sessions to Target Brazil's Biggest Banks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrlz0Rd5WFx1WGLM50k8zciZgatvSSCACZehOgO5Kb-v0WP-PffiCulnIsUbwnvjPYtT15mAXR20xitSNUp9DlsPaN28keaeKCc1mybORUEBINDq5ptqGr

• ChatGPT Hacked Using Custom GPTs Exploiting SSRF Vulnerability to Expose Secrets

  A Server-Side Request Forgery (SSRF) vulnerability in OpenAI’s ChatGPT. The flaw, lurking in the Custom GPT “Actions” feature, allowed attackers to trick the system into accessing

• Chipmaker Patch Tuesday: Over 60 Vulnerabilities Patched by Intel

  Intel, AMD, and Nvidia have published security advisories describing vulnerabilities found recently in their products. Intel, which typically publishes advisories on a quarterly sc

• Global GRC Platform Market Set to Reach USD 127.7 Billion by 2033

  The GRC platform market is witnessing strong growth as organizations across the globe focus on strengthening governance, mitigating risks, and meeting evolving compliance demands.

• Google Launches 'Private AI Compute' — Secure AI Processing with On-Device-Level Privacy

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7u0YyGlwQEZFWpce5m9bHa4DibuFf1-votoLyZ6m1wkceOdtkkpGLrjkM9tyYHVQJVZSz5KQvJ9FxxCcr7KFlWmd9DKdDx84iYRRp7J7rQHYRlAMdhF65

• Authentication Coercion Attack Tricks Windows Machines into Revealing Credentials to Attack-controlled Servers

  Authentication coercion represents a sophisticated and evolving threat targeting Windows and Active Directory environments across organizations globally. This attack method exploit

• Google Paid Out $458,000 at Live Hacking Event

  Google handed out $458,000 in bug bounty rewards at this year’s bugSWAT hacking event, held during the ESCAL8 conference. During the event, 38 top bug hunters participated in train

• UK Tightens Cyber Laws as Attacks Threaten Hospitals, Energy, and Transport

  The UK government has unveiled the Cyber Security and Resilience Bill, a landmark move to strengthen UK cyber defences across essential public services, including healthcare, trans

• Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero-Day Under Active Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUYsGcLHyKkqDIY7BFmCJ4AE9H52XJOIWUJqYcOSdx0Zd3mSRUt1Z0obn3VXzWTbrZGysPwxK7Hte4CKCobzIee0kXOVOfhyphenhyphenKZhfI-jiDssR

• Tor Browser 15.0.1 Released With Fix for Multiple Security Vulnerabilities

  Tor Browser 15.0.1 is now available for download, bringing essential security patches and bug fixes to users across all platforms. The latest release includes critical security upd

• High-Severity Vulnerabilities Patched by Ivanti and Zoom

  Enterprise software providers Ivanti and Zoom on Tuesday announced patches for multiple vulnerabilities in their products, including high-severity issues that could lead to arbitra

• Microsoft Patch Tuesday November 2025: Fixes 63 Security Flaws and One Zero-Day Exploit

  Microsoft’s November Patch Tuesday release for 2025 has delivered fixes for 63 security flaws across its software portfolio, including one zero-day vulnerability already being expl

• Active Directory Under Siege: Why Critical Infrastructure Needs Stronger Security

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzohgVmJwL0IMF6xUDk-7UKhnswaBtnht8YAdjmMgnPeftdPwFL5ZFvm9zfOpKg-RkmHgwEM9Uyj6lr5GnUBY4IM2oDsroi0pC1yYS6-zdbpiGX-gIlpFQ

• Hackers Weaponize AppleScript to Creatively Deliver macOS Malware Mimic as Zoom/Teams Updates

  Threat actors continue to evolve their techniques for bypassing macOS security controls, shifting away from traditional attack vectors that Apple has systematically patched. Follow

• Google Sues Chinese Cybercriminals Behind ‘Lighthouse’ Phishing Kit

  Google on Tuesday announced that it has filed a lawsuit against a cybercrime group believed to be operating out of China. The group, known as Smishing Triad, has been active since

• China Cyberattack Accusation Alleges U.S. Role in $13B Bitcoin Theft

  China has leveled a cyberattack accusation against the United States, claiming Washington orchestrated the 2020 hack of the LuBian mining pool and later seized 127,000 Bitcoin—wort

• [Webinar] Learn How Leading Security Teams Reduce Attack Surface Exposure with DASR

  [](https://thehacker.news/attack-surface-reduction?source=article) Every day, security teams face the same problem—too many risks, too many alerts, and not enough time. You fix one

• Microsoft Investigating Teams Issue that Disables Users from Opening Apps

  Microsoft has confirmed it is investigating a significant issue affecting Microsoft Teams for Education, which is particularly impacting users’ ability to access critical features

• Software Supply Chain Attacks Set Records in October

  Software supply chain attacks hit levels in October that were more than 30% higher than any previous month. Threat actors on dark web data leak sites claimed 41 supply chain attack

• 18 Arrested in Crackdown on Credit Card Fraud Rings

  Law enforcement agencies in Europe arrested 18 individuals for their suspected roles in three major credit card fraud and money laundering networks that caused losses of over €300

• India and Israel Sign MoU to Strengthen Defense and Cybersecurity Cooperation

  India and Israel have taken a decisive step toward deepening their strategic partnership with the signing of a Memorandum of Understanding (MoU) on Defense and Cybersecurity Cooper

• Destructive Russian Cyberattacks on Ukraine Expand to Grain Sector

  Russian state-sponsored groups continue their cyber assaults on Ukraine and are now aiming their destructive wipers at more industries, including the grain sector, ESET’s latest AP

• New Analysis Uncovers LockBit 5.0 Key Capabilities and Two-Stage Execution Model

  LockBit 5.0 made its debut in late September 2025, marking a significant upgrade for one of the most notorious ransomware-as-a-service (RaaS) groups. With roots tracing back to the

• Balancer Hack Exposes $116 Million Smart Contract Vulnerability

  Balancer V2, one of the most prominent automated market makers (AMMs), has suffered a large-scale security incident. The Balancer data breach exposed a critical Balancer vulnerabil

• Hackers Can Attack Active Directory Sites to Escalate Privileges and Domain Compromise

  Active Directory sites are designed to optimize network performance across geographically separated organizations by managing replication and authentication across multiple locatio

• Chrome 142 Update Patches High-Severity Flaws

  Shortly after promoting Chrome 142 to the stable channel, Google pushed out an update to address five vulnerabilities in the browser, including three high-severity flaws. The first

• Iran-linked Threat Group Claims Breach of Israeli Defense Contractor’s Security Cameras

  An Iran-linked threat group claims to have accessed the security cameras of an Israeli defense contractor and leaked videos of internal meetings and employees working on defense sy

• Herodotus Android Banking Malware Takes Full Control Of Device Evading Antivirus

  A sophisticated banking trojan named Herodotus has emerged as a significant threat to Android users worldwide. Operating as Malware-as-a-Service, this malicious application disguis

• The Congressional Budget Office Was Hacked. It Says It Has Implemented New Security Measures

  The Congressional Budget Office on Thursday confirmed it had been hacked, potentially disclosing important government data to malicious actors. The small government office, with so

• Vibe-Coded Malicious VS Code Extension Found with Built-In Ransomware Capabilities

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2Dcu9T1Afix71Yt-8QCNjFUC8eCH-PwqBYQbkqtmzclCd1DmtyV89McDlT1wJxv4qRnRmxQiEFsnpzw1a0k3EMPCBIpxwJysacU-wUGg6-tCUrTKFlPVt

• Marks And Spencer Reports Steep Profit Drop Amid Cyberattack Fallout, Despite Strong Sales Growth

  Marks And Spencer Group Plc (M&S) has reported a dramatic decline in its first-half profit, largely from the financial impact arising from a recent cyberattack. The company, disclo

• ClickFix Attacks Evolved With Weaponized Videos That Tricks Users via Self-infection Process

  ClickFix attacks have experienced a dramatic surge over the past year, establishing themselves as a cornerstone of modern social engineering tactics. These sophisticated attacks ma

• DOJ Antitrust Review Clears Google’s $32 Billion Acquisition of Wiz

  Google and Wiz said the antitrust review initiated by the United States Department of Justice into their planned $32 billion acquisition has been cleared. The companies announced r

• Google Launches New Maps Feature to Help Businesses Report Review-Based Extortion Attempts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOkWkPtJDt7NMpDyyxu0Dk8yD4cQupOSEtWa8Ph06Klxkm05DGxVyJqHeTD-4jReaEKMuUp7tqz4QVLk0ZBk6cqAtTMm3idDSrunWqxh8mtFcm2kHp3Fnz

• German ISP Aurologic GmbH has Become a Central Nexus for Hosting Malicious Infrastructure

  German hosting provider aurologic GmbH has emerged as a central facilitator within the global malicious infrastructure ecosystem, providing upstream transit and data center service

• Google Issues Emergency Chrome 142 Update to Fix Multiple High-Risk Vulnerabilities

  Google has rolled out an emergency update for its Chrome browser, version 142, to address a series of serious remote code execution (RCE) vulnerabilities that could allow attackers

• ClickFix Attacks Against macOS Users Evolving

  ClickFix attacks continue to evolve and the technique appears to be increasingly used against macOS users, with lures becoming ever more convincing. ClickFix has been widely adopte

• Enterprise Credentials at Risk – Same Old, Same Old?

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgd2Yv8UnFMT4Cdqiokt06WlgBfY7dC-Pni1OsXd0sK8uXMitu2HZzwAQ0Q9obp1fCJ6AobPf3pvcROa1ldIKGs8xHPNe8KDlaLI1RLlstkQ3F2-IXQJ-my

• Threat Actors Leveraging RDP Credentials to Deploy Cephalus Ransomware

  A newly identified ransomware group, Cephalus, has emerged as a significant threat to organizations worldwide, exploiting stolen Remote Desktop Protocol (RDP) credentials to gain a

• Critical CVE-2025-12779 Vulnerability Exposes Amazon WorkSpaces for Linux Users to Token Theft

  A newly disclosed security flaw in the Amazon WorkSpaces client for Linux has raised serious concerns across organizations relying on AWS virtual desktop infrastructure. The vulner

• Data Exposure Vulnerability Found in Deep Learning Tool Keras

  A vulnerability in the open source library Keras could allow attackers to load arbitrary local files or conduct server-side request forgery (SSRF) attacks. Providing a Python inter

• Hidden Logic Bombs in Malware-Laced NuGet Packages Set to Detonate Years After Installation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgO8rdEXn4OiPHiiJnsEymue5DlWPMj7u6ZfFy77r6qHntR6yOsA-4dEQXLqdkPUJNs9TwgPJO4TeBDDz5nsX3QZkIiI1Be45AXRqgDkEuMuu8-pvYj0sAQ

• Hackers Hijack Samsung Galaxy Phones via 0-Day Exploit Using a Single WhatsApp Image

  A sophisticated spyware operation targeting Samsung Galaxy devices, dubbed LANDFALL, which exploited a zero-day vulnerability to infiltrate phones through seemingly innocuous image

• University of Pennsylvania Confirms Cyberattack and Data Theft Following Social Engineering Breach

  The University of Pennsylvania has confirmed that a hacker stole sensitive university data during a recent cyberattack. The breach, first detected on October 31, 2025, resulted in

• Radical Empowerment From Your Leadership: Understood by Few, Essential for All

  What does it mean to possess radical empowerment? And what goes wrong when it’s defined and measured incorrectly top-down? These are the topics I am exploring today in terms of bot

• From Log4j to IIS, China’s Hackers Turn Legacy Bugs into Global Espionage Tools

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghZqCg2FCyFs0KtendNTgM4kewxtAD-fYM5tkn2HDgCT7zqWB-FhYCeJWfm7eeYgQ0ip9aM7jsB1Ix3uGJqIeuJ8R96V4N7fGEOmKsPADGIyBY5t-PdMmt

• Google Maps Adds Feature for Businesses to Report Ransom Demands Over Reviews

  Scammers are targeting businesses with a new extortion scheme, and Google Maps is fighting back with a dedicated reporting tool. Google has introduced a feature that allows busines

• Landfall Android Spyware Targeted Samsung Phones via Zero-Day

  A recently discovered Android spyware has been delivered to Samsung device owners through the exploitation of a zero-day vulnerability, Palo Alto Networks reported on Friday. The s

• Cisco Issues Critical Warning Over New Unified Contact Center Express Vulnerabilities

  Cisco has issued an urgent security advisory detailing two critical vulnerabilities affecting its Unified Contact Center Express (Unified CCX) platform. The flaws, identified as CV

• Samsung Mobile Flaw Exploited as Zero-Day to Deploy LANDFALL Android Spyware

  Zero-Day to Deploy LANDFALL Android Spyware A now-patched security flaw in Samsung Galaxy Android devices was exploited as a zero-day to deliver a "commercial-grade" Android spywar

• Seven QNAP Zero-Day Vulnerabilities Exploited at Pwn2Own 2025 Now Patched

  QNAP has addressed seven critical zero-day vulnerabilities in its network-attached storage (NAS) operating systems, following their successful exploitation by security researchers

• In Other News: Controversial Ransomware Report, Gootloader Returns, More AN0M Arrests

  SecurityWeek’s cybersecurity news roundup provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a valuable summary of stories tha

• AI Malware Detected in the Wild as Threats Evolve

  AI malware may be in the early stages of development, but it’s already being detected in cyberattacks, according to new research published this week. Google researchers looked at f

• Microsoft Uncovers 'Whisper Leak' Attack That Identifies AI Chat Topics in Encrypted Traffic

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhpBHsVc7cesyV98XY3PW3Ag8I1NBsboj592iw07Rlmy2xCs3QTpBUcZf59rmLBCo4JppU4HFF9GU8H7iADzqyvOIxWj3GZWoVkzsh4GRWHyD1LSPWZgUEi

• New Whisper Leak Toolkit Exposes User Prompts to Popular AI Agents within Encrypted Traffic

  A sophisticated side-channel attack that exposes the topics of conversations with AI chatbots, even when traffic is protected by end-to-end encryption. Dubbed “Whisper Leak,” this

• Malicious VSX Extension "SleepyDuck" Uses Ethereum to Keep Its Command Server Alive

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsNAYBUN0RQ2z5BWnN5wrHTjB-XMx0nYPvJ5PMwCjxNk6CVExZCv401jXvaktwnLz8B3owRjupOCNIH7s2lbATDXkpMWwounrKb1OaiINgihVNcpMc17Wt

• Microsoft Detects "SesameOp" Backdoor Using OpenAI's API as a Stealth Command Channel

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyW72-Rg4bg2ntYrHhAcMLWcUMdg-0COcApiiLP4LsguHFgDgBVZmEh0EigMblA-TZm9wKArXWY58AqupvM2vpr3anQXEGkmmAtw204WOO4qVL8ykulVPa

• U.S. Prosecutors Indict Cybersecurity Insiders Accused of BlackCat Ransomware Attacks

  BlackCat Ransomware Attacks Federal prosecutors in the U.S. have accused a trio of allegedly hacking the networks of five U.S. companies with BlackCat (aka ALPHV) ransomware betwee

• Google’s AI ‘Big Sleep’ Finds 5 New Vulnerabilities in Apple’s Safari WebKit

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgO90ZGqS1o8oXuQSYe44zmCBkNPE4eZDZy-NJhnRyFZePcN4Tv-OOIuBKoi5Dnp0bNHpCcxpAgMNYs6t0rCntWspx1JNRJSBbMsvzxDnSXewOvLDls6VU4

• Operation SkyCloak Deploys Tor-Enabled OpenSSH Backdoor Targeting Defense Sectors

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6ok6aAygeqft712J7YEdaBpjlL3SNlIraKZ2za1SW5EEy9HaK6k9fvrr-9WQVO3mbummfoqwbXUg-gbcXAYakGZTCjG3B1q6ur-9JEDP-krL8iq2nv53H

• Ransomware Defense Using the Wazuh Open Source Platform

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdzDGtHe9Q6eOawv8H4Le3i69OhWMTiJwqvdjqsp8o8oZ8gpy7R6cbsTzjncXVNJjI59pr2NENW0IycFhahD92mziRlVuhQhAeVo4mtyyz3iwUzD-e5UH6

• Microsoft Teams Bugs Let Attackers Impersonate Colleagues and Edit Messages Unnoticed

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPxhWGZawWeHzNGIbomWP8Nbdh5Dd6tcZRBCwh1fzvzwLRHHrOAdfio4nT7DL5Lq7v0S8mDZ5JcWhLB75AVaO8pYvvxHr5UbkNOaALx-O3Xj2msk9pV1vH

• Critical React Native CLI Flaw Exposed Millions of Developers to Remote Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfNjN6vslUOG4CduAbYSiA-CSV2SWczVdx8dOAdaWXrulZW9P3iJ6fkO1bNPlrN1g7pExIbB5QdeO9h7yNQE2yVdSzg2OfbL1N6K-bNhsguE9GHUilLuEu

• European Authorities Dismantle €600 Million Crypto Fraud Network in Global Sweep

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWKwScZjfCjIxjAGc2zRp5CurUdQrWfIyggSAeiGwqm0lISlnUZcukvjR3paESZ4ksOr99jBcbTxgnZmmlkbfAomK9uRWH5cWfZ1yMHpuTwe2MyrQRAJTq

• A Cybercrime Merger Like No Other — Scattered Spider, LAPSUS$, and ShinyHunters Join Forces

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihGoqSoqWGCpoOD7hmLTjkWzWhFLusgvTr3g3RaGZWrSsj4LAGbruNNztuHBQy5D835G8qsA6p2Go0Mw-aSoiHC7eY4-tGNEgXffrQPOIuEiEm0-n6gZHe

• CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence

  CISA Adds Gladinet and CWP Flaws The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting Gladinet and Control Web Panel (CWP)

• Why SOC Burnout Can Be Avoided: Practical Steps

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2Typv0FhA4kzN6hRhuRsYCb7CNG7u5iId8CNKCFj3ZCliQ0deQbIUQpJYkupf0dtKZulkLGCahDh0hfY9Ofs3PM5YCMyAnYmQH7ctyr79puTU3l6eOj6B

• U.S. Sanctions 10 North Korean Entities for Laundering $12.7M in Crypto and IT Fraud

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXIMlJnqx7E3-6UYncVkGW3LUD3e8ePPnKZ2nWmTSdjlvSMeVGwCwVaJQCYk6KCKcvnmiu1UjheqgtEJ3JYO2-FVzKTcDFiw5wmXacWEMwFhc3VtV8ZTen

• Mysterious 'SmudgedSerpent' Hackers Target U.S. Policy Experts Amid Iran–Israel Tensions

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmp-SI1cgUsmlMG3lE9zYqMARsZ452j97kJNlUeE0cqUX6QHXfPp6-pMHEQZuKlr8mzJI004vOCYTQVaygW0V7Mlcd2hmwk599TNk-85utedJE9cPyZOez

• Webinar Today: Scattered Spider Exposed – Critical Takeaways for Cyber Defenders

  [](https://event.on24.com/wcc/r/5107306/9C93F3F8739747A233C99A51DDDB2213?partnerref=post) Inside the Scattered Spider Playbook – Register Now In recent months, headlines have been

• Securing the Open Android Ecosystem with Samsung Knox

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPd1GerA19wNhABt5LKN6GfthI5rzfkRTbigEYmdoaxBlhczavPQemf3AG5HSmjAYK3cot1kYKQuceJ90bhNnju1ZD9yAnwuU4cPawlBGIJtjtlIO7WnP8

• Malware Now Uses AI During Execution to Mutate and Collect Data, Google Warns

  Google’s Threat Intelligence Group (GTIG) has seen several new and interesting ways in which malware has been leveraging artificial intelligence, going beyond its use for productiv

• Clop Ransomware Actors Exploiting the Latest 0-Day Exploits in the Wild

  Cl0p, a prominent ransomware group operating since early 2019, has emerged as one of the most dangerous threats in the cybersecurity landscape. With over 1,025 confirmed victims an

• Researchers Find ChatGPT Vulnerabilities That Let Attackers Trick AI Into Leaking Data

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjc9u8ifBTtqcucAGtnB5BSuB4Zu2PTcSopIDhD1mxnUeFmAtb1KWyJuU3Yb8JAnJ-nQ4jltxhO5YCFzfd-VhbghvU9B8DewcX9kDZ4Wv65q-3Sqnj-tyAt

• State-Sponsored Hackers Stole SonicWall Cloud Backups in Recent Attack

  SonicWall this week revealed that a state-sponsored threat actor was behind the September hack in which firewall configuration files were stolen from its cloud backup service. The

• Cisco Warns of Hackers Actively Exploiting ASA and FTD 0-day RCE Vulnerability in the Wild

  Cisco has confirmed that threat actors are actively exploiting a critical remote code execution (RCE) flaw in its Secure Firewall Adaptive Security Appliance (ASA) and Threat Defen

• Google Uncovers PROMPTFLUX Malware That Uses Gemini AI to Rewrite Its Code Hourly

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiv38bGYR4EsJddvrYIBdRlGLM4tSJFssQPifDWhLZFtuM0QGkNOR0HbuqK-3IkkBjlJhR0vhrxGOGMIqZYbT790fs70gtCQnNhDI5bwiozuLoj8-onQQro

• Authorities Dismanteled Major Credit Card Fraud Operation Impacting 4.3 Million Cardholders

  International law enforcement agencies have taken down three sophisticated fraud and money laundering networks in a coordinated operation that uncovered one of the largest credit c

• Cisco Patches Critical Vulnerabilities in Contact Center Appliance

  Cisco on Wednesday announced patches for nearly a dozen vulnerabilities, including two critical flaws leading to remote code execution. The critical bugs, tracked as CVE-2025-20354

• SonicWall Confirms State-Sponsored Hackers Behind September Cloud Backup Breach

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCctUHc2OwM5F5Go-oWrnOzWRy5rrZrPA9uOmYGFNNdrNxWTlUsNxHk134jH39G9AHzVVg7R7XBXc-T4uGSZQBDiZMsIgC9M5aE3-JER0ftfAvAot8TRt4

• Multiple Django Vulnerabilities Enable SQL injection and DoS Attack

  Django, one of the most popular Python web development frameworks, has disclosed two critical security vulnerabilities that could allow attackers to execute SQL injection attacks a

• Automotive IT Firm Hyundai AutoEver Discloses Data Breach

  The North American arm of South Korea-based automotive IT services firm Hyundai AutoEver has disclosed a data breach resulting from a hacker attack that targeted the company earlie

• Hackers Weaponize Windows Hyper-V to Hide Linux VM and Evade EDR Detection

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGBz7Fh35GCGnvq75iKz59PN9dxPcO-sdZAGTMvQPVJ9tzq2wM8w5LzPxk1ZR8TITolw6e66VvmGhhE4Mu66MyW71fGIK1jVGkZU0TTOP01chaZWdcGzVY

• Cisco Unified Contact Center Express Vulnerabilities Let Remote Attacker Execute Malicious Code

  Cisco has disclosed multiple critical vulnerabilities in Unified Contact Center Express (CCX) that allow unauthenticated remote attackers to execute malicious code and escalate pri

• Nevada Ransomware Attack Started Months Before It Was Discovered, Per Report

  State workers were put on paid administrative leave. Nevada residents couldn’t receive their driver’s licenses. Employers were unable to conduct background checks on new hires. The

• Bitdefender Named a Representative Vendor in the 2025 Gartner® Market Guide for Managed Detection and Response

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnzufju5hrHLeUm1wJnO0Wac-XCbY35dncwtip0-mnLrcGP85GngoccqDhicfNyF9AKCyeKXM3DlKj9nyvmC8X-Zxx6A8ctmsiOguoZ7XjewL1btiT0ydW

• Checkpoint Details on How Attackers Drained $128M from Balancer Pools Within 30 Minutes

  On November 3, 2025, blockchain security monitoring systems detected a sophisticated exploit targeting Balancer V2’s ComposableStablePool contracts. An attacker executed a precisio

• DeFi Protocol Balancer Starts Recovering Funds Stolen in $128 Million Heist

  Hackers on Monday drained more than $120 million in cryptocurrency from the decentralized finance (DeFi) protocol Balancer by exploiting a rounding function and performing batch sw

• ThreatsDay Bulletin: AI Tools in Malware, Botnets, GDI Flaws, Election Attacks & More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvyQ0PFVFVKeK3ifBAYFp8mGPq2I3Qp4ofpoaDKvrYyNeNwRk0O9XarwKrKOns6jD1WTYqQsgzxiJ0PynmKe3sx6cUbyR29d8ERCzuPjm0LjxPimsPr2fZ

• Critical RCE Vulnerabilities in Claude Desktop Let Attackers Execute Malicious Code

  A critical remote code execution (RCE) flaw in three official extensions for Anthropic’s Claude Desktop. These vulnerabilities, affecting the Chrome, iMessage, and Apple Notes conn

• Follow Pragmatic Interventions to Keep Agentic AI in Check

  Agentic AI shifts the conversation about AI from passive tools to autonomous systems that can plan, act and coordinate across services. Where large language models (LLMs) have exce

• From Tabletop to Turnkey: Building Cyber Resilience in Financial Services

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiaJEM1FidoLhzNIrYBATCN7L9TeVdHj9VIprFLqsgTxUHmiQChfyBlaCMZmoGonBSd1lHzUuVLOOY-tp25Ys8SdCPzD86hBTHEOv7LQijqkKpwRUr7AzQ

• SonicWall Confirms State-Sponsored Hackers Behind the Massive Firewall Backup Breach

  SonicWall, a global cybersecurity company, confirmed that state-sponsored hackers were behind a recent incident involving unauthorized access to firewall backup files. The breach b

• Truffle Security Raises $25 Million for Secret Scanning Engine

  Secrets scanning provider Truffle Security today announced raising $25 million in a Series B funding round that brings the total raised by the company to over $40 million. The inve

• Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362

  Cisco Warns of New Firewall Attack Cisco on Wednesday disclosed that it became aware of a new attack variant that's designed to target devices running Cisco Secure Firewall Adaptiv

• Gootloader is Back with New ZIP File Trickery that Decive the Malicious Payload

  The Gootloader malware campaign has resurfaced with sophisticated evasion techniques that allow it to bypass automated security analysis. This persistent threat has been targeting

• Researchers Hack ChatGPT Memories and Web Search Features

  Tenable researchers recently discovered seven new ChatGPT vulnerabilities and attack techniques that can be exploited for data theft and other malicious purposes. The attack method

• Trojanized ESET Installers Drop Kalambur Backdoor in Phishing Attacks on Ukraine

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJgTnRaxG26x8DH7Ls4GJHR837IVsXDgmZVGVAFPSaUr0X4T1L4SW86A1IiQ5xQpq4V6K3UGzTyCMT-YsMndBRtpkPCnNJJRiT00Md8zO0SFFuaRbQjaJV

• New EndClient RAT Attacking Users by Leveraging Stolen Code-Signing to Bypass AV Detections

  A sophisticated Remote Access Trojan labeled EndClient RAT has emerged as a significant threat targeting human rights defenders in North Korea, marking another escalation in advanc

• Cybersecurity News Weekly Newsletter – EY Data Leak, Bind 9, Chrome Vulnerability, and Aardvar ChatGPT Agent

  This week’s cybersecurity roundup highlights escalating threats from misconfigurations, software flaws, and advanced malware. Key incidents demand immediate attention from IT teams

• New BOF Tool Exploits Microsoft Teams’ Cookie Encryption Allowing Attackers to Access User Chats

  A specialized Beacon Object File (BOF) designed to extract authentication cookies from Microsoft Teams without disrupting the application. This development builds on recent finding

• Windows Graphics Vulnerabilities Allow Remote Attackers to Execute Arbitrary Code

  Multiple vulnerabilities in Microsoft’s Graphics Device Interface (GDI), a core component of the Windows operating system responsible for rendering graphics. These flaws, discovere

• New Operation SkyCloak Uses Powershell Tools and Hidden SSH Service to Unblock Traffic

  A sophisticated campaign targeting military personnel across Russia and Belarus has emerged, deploying a complex multi-stage infection chain that establishes covert remote access t

• Google Pays $100,000 in Rewards for Two Chrome Vulnerabilities

  Google has released Chrome 142 to the stable channel with patches for 20 vulnerabilities, including seven high-, eight medium-, and five low-severity flaws. Four of the high-severi

• Windows 11 24H2/25H2 Update Causes Task Manager to be Active After Closure

  Microsoft has released a non-security update for Windows 11 versions 24H2 and 25H2 that introduces an unusual bug affecting one of the operating system’s most essential utilities.

• Chinese APT Uses ‘Airstalk’ Malware in Supply Chain Attacks

  A suspected Chinese state-sponsored threat actor has been deploying an AirWatch API-abusing malware family in supply chain attacks, Palo Alto Networks reports. The APT, tracked as

• New HttpTroy Backdoor Poses as VPN Invoice in Targeted Cyberattack on South Korea

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuEYAYmymffrJslyjZDJpRu1vE-IbqbiurB5-rldIfgwDRWEeV8EpVqbWpZrVsKjw-LBAblb6Ao-TviGJigU85u3F8JI5kARLR9Vt4TL2QpJZolmnhlv5K

• U.S.-based Sling TV to Pay $530,000 Settlement for Violating California Privacy Law

  California Attorney General Rob Bonta has announced a $530,000 Sling TV privacy fine against Sling TV LLC and Dish Media Sales LLC, marking the first enforcement action from the De

• Proton Exposes 300 Million Stolen Credentials Available for Sale on Dark Web Cybercrime Markets

  Proton has launched a new initiative called the Data Breach Observatory. This program reveals serious problems that exist on the internet. The cybersecurity company revealed that o

• Cybersecurity M&A Roundup: 45 Deals Announced in October 2025

  Forty-five cybersecurity merger and acquisition (M&A) deals were announced in October 2025. Out of the 45 deals, roughly a quarter had publicly reported financial terms. A majority

• Researchers Uncover BankBot-YNRK and DeliveryRAT Android Trojans Stealing Financial Data

  Android Cybersecurity researchers have shed light on two different Android trojans called BankBot-YNRK and DeliveryRAT that are capable of harvesting sensitive data from compromise

• Cyble Detects Advanced Backdoor Targeting Defense Systems via Belarus Military Lure

  Cyble Research and Intelligence Labs (CRIL) have uncovered a cyber-espionage operation that used a weaponized ZIP archive to infiltrate defense-sector systems. The malicious file—d

• Hackers Deliver SSH-Tor Backdoor Via Weaponized Military Documents in ZIP Files

  In October 2025, threat researchers at Cyble Research and Intelligence Labs uncovered a sophisticated cyber attack leveraging weaponized military documents to distribute an advance

• Claude AI APIs Can Be Abused for Data Exfiltration

  Attackers can use indirect prompt injections to trick Anthropic’s Claude into exfiltrating data the AI model’s users have access to, a security researcher has discovered. The attac

• The Evolution of SOC Operations: How Continuous Exposure Management Transforms Security Operations

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUJ9mDhJ4SDGuA35c4k39ETwA8rFT03x3IsKZM37FHB4-uzqMA4n2BfzZk8UqkBuL-wA6NWx3i3f3CGin1cIF2JJI6n3xbX1TFAeMJqkHJXoPVl4OqVgvQ

• Conti Group Member Responsible for Deploying Ransomware Extradited to USA

  A Ukrainian national accused of playing a key role in the notorious Conti ransomware operation has been extradited from Ireland to face federal charges in the United States. Oleksi

• Ongoing Ransomware Attacks Exploit Critical Linux Kernel Vulnerability (CVE-2024-1086)

  The Cybersecurity and Infrastructure Security Agency (CISA) has issued a serious warning after confirming that a critical flaw in the Linux Kernel, tracked as CVE-2024-1086, is bei

• CISO Burnout – Epidemic, Endemic, or Simply Inevitable?

  CISO burnout is increasing. Are we simply more aware of the condition? Or have demands on the CISO grown and burnout is now the inevitable result? In 2019, burnout was defined by t

• ⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDmxVKba9Dgqm0Z67Kl0gXQXbPMhTCbvxnNMtnrhn5s0I5wZm8o0I3Dk60ddk0MoEngtBfkLe12knwd9jV8AV7YaVP6fYcy60zKhCu3PomuZ7ZJttgXYf4

• New Business Email Protection Technique Blocks the Phishing Email Behind NPM Breach

  Supply chain attacks targeting the JavaScript ecosystem have evolved into sophisticated operations combining domain manipulation with social engineering. On September 8, 2025, thre

• PNP Strengthens Cybersecurity Ahead of Possible DDoS Attacks

  The Philippine National Police (PNP) stated on Monday that it is actively monitoring its online platforms and reinforcing defense against potential cyberattacks. The announcement f

• Who is Zico Kolter? A Professor Leads OpenAI Safety Panel With Power to Halt Unsafe AI Releases

  If you believe artificial intelligence poses grave risks to humanity, then a professor at Carnegie Mellon University has one of the most important roles in the tech industry right

• Cybercriminals Exploit Remote Monitoring Tools to Infiltrate Logistics and Freight Networks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLbX8J00T47YXAz7Dd3-oMDVE4jIN0KXLb0QHkdJOWEk1wS2tdrwCXtpfTtDW1YHXbqE2HMyNm4L6QZc3cEKQDnDGBAtiZL6CUlj0G1rGy3-9MFgpov7t3

• Beware of New Phishing Attack that Abuses Cloudflare and ZenDesk Pages to Steal Logins

  A sophisticated phishing campaign has emerged, exploiting the trust placed in legitimate cloud hosting services. Threat actors are leveraging Cloudflare Pages and ZenDesk platforms

• OpenAI’s New Aardvark GPT-5 Agent that Detects and Fixes Vulnerabilities Automatically

  OpenAI has unveiled Aardvark, an autonomous AI agent powered by its cutting-edge GPT-5 model, designed to detect software vulnerabilities and automatically propose fixes. This tool

• ASD Warns of Ongoing BADCANDY Attacks Exploiting Cisco IOS XE Vulnerability

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivjJxC82aGCds7xQg0mAqxFwkMrJCO3JdIyu5ShCl2QYOrnrJpOdBSnJdlnN1euQiL6blI-sBypwPP-nCcWSrkvxZkNGsH1yb9zE7bgLKXOpwFvit66JlE

• New EDR-Redir V2 Blinds Windows Defender on Windows 11 With Fake Program Files

  An upgraded release of tool EDR-Redir V2, designed to evade Endpoint Detection and Response (EDR) systems by exploiting Windows bind link technology in a novel way. According to th

• Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEha5q6jnY8Y6xACyBZyiUAcIQ3IXuRd2uOKF9t1FjjllTiuuy4SaqnXGddolrXgpRO92TcXIHvsu5uoB4HRSXsxIUos3HUpgjQ2-K4odObODu18xROyGjzf

• Ukraine Aid Groups Targeted Through Fake Zoom Meetings and Weaponized PDF Files

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjASSD00b23d8ZYC2Uva9Cuh74SiVXvG5mFbW4H2oU3LuWOyS7EkLRQxmJLZBmae0uaOZYVIwPT7RBF1yp3KHzgLnhrra3xmwjRGb7CZ3yLNryv6V15BxrJ

• Iran-Linked MuddyWater Targets 100+ Organisations in Global Espionage Campaign

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcGdFphQeU55XMUNKLN5TMSnSR8UrMx41Obgu6kcLVXhebPi1uBmiqkY4Mj0s3MUAY4Rg6xyY23rKGz2hbAzJ-Ao7yn6pQFnmANejg1rKEVFLI6Xo1Sm5O

• Critical Lanscope Endpoint Manager Bug Exploited in Ongoing Cyberattacks, CISA Confirms

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjF0anh2D7u1BXDzmTHk1Z2oVOcQvyBSs2KFS9qG34RBu7u3glGB3KzZ4gy3kR9wDSf1BVBM8W2t9Nc3qUMHdlO7tWrZFaOKQQFitA0OuquBHYMqSeIGOEW

• Over 250 Magento Stores Hit Overnight as Hackers Exploit New Adobe Commerce Flaw

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgr6q4VXCW0imh0YjZL7pmH95MM5h-ikE4R8DsRsjoPlAro1YZYsP9B9tnjsje5vW5-Ng-Hmeb8uetlCJy0L6PUAOm0TG4ubjIwsUGxH2jPUoG9YSwpNbR2

• 'Jingle Thief' Hackers Exploit Cloud Infrastructure to Steal Millions in Gift Cards

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKxmcih1vSk9zV3rxmSlJbG10cSql0qeyBPbcbVx9spXIsuoJ7Fy-WZPMUNrR4lPhCYwjqW7ViGz6j4IIYpeNzVyS9IjYTdKxORB0ggHC-hxh0k9Tx9wvJ

• Why Organizations Are Abandoning Static Secrets for Managed Identities

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWQXR3hJJeyu725GU64q2P5FS-DdQ0tHPYl3PQ1dCsQSc0mth8d5AZI7OMRrluhhS6WXIWRkVhGwtuA4KJoEv16v7m2v1SqGmByyRUMIzoB2H0VNri0x4T

• ThreatsDay Bulletin: $176M Crypto Fine, Hacking Formula 1, Chromium Vulns, AI Hijack & More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBGI55yfOIk2ah8f4huRsruWz2X2BQM5tPxTX7pHHQJe06G9VVpwiP25wvxTQzFoYBn0i45sZCG2U269mLKWfOvYg-ng2pXAgDixytL0uZNz1TzmYdsCrc

• Secure AI at Scale and Speed — Learn the Framework in this Free Webinar

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhGHe6ecCCrv5YeciYpjLs8cTVWBfIwqtIhubmEGeOf3aQxopS2A9usHvEDovFsKOPn21Mb6TbOgK2LtlzZFRksJaAdTMk6Ew8Y8WGLnom3CmVOqyDRHZvx

• North Korean Hackers Lure Defense Engineers With Fake Jobs to Steal Drone Secrets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiK0FPtpkvxFxGAd0hh2wsJHxGCIA0PCJbURwlsS5x936Ak68WSe2rbdXj4xRMu5DddZcKeqoTD-VDuHCY9eNqF2IcnjDwm8OAbQs7rgZsTTq-uY9UfNurt

• Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain Attack

  Supply Chain Attack Cybersecurity researchers have discovered a self-propagating worm that spreads via Visual Studio Code (VS Code) extensions on the Open VSX Registry and the Micr

• 3,000 YouTube Videos Exposed as Malware Traps in Massive Ghost Network Operation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhh8EaTq-s91jlucVVZYpqJYdk5xQXEy0ylAf-poP2YIxboYThJyShnGQwhh-OORfMy6LnRQlwQfzHP2bf8Ao0JyihddLTI6G4fcLdnxktdgM8vE02iM1LF

• The Cybersecurity Perception Gap: Why Executives and Practitioners See Risk Differently

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQVzcsr-XqhPEurqyN5PP7oW8LrIPQ8ry9ijkZAGE-YdWZRsYhhcP52iWxJ1buNw0vzuaCSDTTfgJO-lAX3YIhKL0abx2Szo9WprfdIFCIu0Hy1dvtpnfu

• APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign

  DeskRAT Malware Campaign A Pakistan-nexus threat actor has been observed targeting Indian government entities as part of spear-phishing attacks designed to deliver a Golang-based m

• Newly Patched Critical Microsoft WSUS Flaw Comes Under Active Exploitation

  Critical WSUS Vulnerability Microsoft on Thursday released out-of-band security updates to patch a critical-severity Windows Server Update Services (WSUS) vulnerability with a proo

• Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgc4DINO1jh6PECfBBxgyROybG6I1e1BUQLpwGYP1rSiZL7JqX2S2IxzWGs0NvDDI1AKJIHp6Lr6oX7YCt0Sfz-scRv2Y4TNJ7091ffHmKdj5aMcIldD-X8

• ChatGPT Atlas Browser Can Be Tricked by Fake URLs into Executing Hidden Commands

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJNBu2Kv7ZWCpDqMMBmHWghQSmsUC5dH4E-CGxu7Gv-G1IUDSx8RnR5wGnHO6FyjD3WoV1i1BTRpmqS6GJBhbHuj0M0VRCjbVHvoK3P2a8t69U4PgUf-dR

• Qilin Ransomware Combines Linux Payload With BYOVD Exploit in Hybrid Attack

  Qilin Ransomware The ransomware group known as Qilin (aka Agenda, Gold Feather, and Water Galura) has claimed more than 40 victims every month since the start of 2025, barring Janu

• ⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach Widens

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiD2q6euKywSmaEnRcHkwDW0flTn3K1gG307F71NC88dB79TWO64M7pzPZ4Fkf5NtpizatYaN1f2mLWHXbwUnU0IZrq7gJpvsiPuQ4Fs1c8AuGLgdf6F0qF

• New ChatGPT Atlas Browser Exploit Lets Attackers Plant Persistent Hidden Commands

  New ChatGPT Atlas Browser Cybersecurity researchers have discovered a new vulnerability in OpenAI's ChatGPT Atlas web browser that could allow malicious actors to inject nefarious

• X Warns Users With Security Keys to Re-Enroll Before November 10 to Avoid Lockouts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOI99OQs-se9ygpm5v5mTH7oNupseTZd2gJxEcCpVcQhEZDUqmnQK6TYa5RepYRUv5RuFhlGGefZlazteLlFIkVYDlpLIzbPot9PmqcnIi-DqqqfR3bzDi

• SideWinder Adopts New ClickOnce-Based Attack Chain Targeting South Asian Diplomats

  ClickOnce-Based Attack Chain A European embassy located in the Indian capital of New Delhi, as well as multiple organizations in Sri Lanka, Pakistan, and Bangladesh, have emerged a

• Chrome Zero-Day Exploited to Deliver Italian Memento Labs' LeetAgent Spyware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlit13ZALqbP4pKEZd8NpHuedHwYPa9HXncHsIbMJNBzjSN1JsbaFNhyphenhyphen6Ev8hKB2a4lmJjj-fBhgClb7MDjW6tAmiADb8Cd5JN4S3-fwI1dL

• Is Your Google Workspace as Secure as You Think it is?

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyefAwMxLJ3Su0-Eqr3MGmfs-wjuOGIjuyyR3Adh4daM2ho6h6VZVGAVSON8AzQQbskUSrJuBavVYRyKBYFC6AhdHQRqgwpAhebsB179jetDhl-MJl8ZUu

• Why Early Threat Detection Is a Must for Long-Term Business Growth

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjahIAFVAlDP3Fg0ZEiWhBxiZNiuovhyYDTY1yaKWFxZ3inBHxDKuycmzTZMkvJvOKVrIYlsh6rR-kK1VY2bR5V-E7Nw5QWvXm3UTFCUdUJyPyBo6hS5XUE

• Researchers Expose GhostCall and GhostHire: BlueNoroff's New Malware Chains

  GhostCall and GhostHire Threat actors tied to North Korea have been observed targeting the Web3 and blockchain sectors as part of twin campaigns tracked as GhostCall and GhostHire.

• New Android Trojan 'Herodotus' Outsmarts Anti-Fraud Systems by Typing Like a Human

  Android Trojan Cybersecurity researchers have disclosed details of a new Android banking trojan called Herodotus that has been observed in active campaigns targeting Italy and Braz

• New TEE.Fail Side-Channel Attack Extracts Secrets from Intel and AMD DDR5 Secure Enclaves

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7WEENR9AjQZ-WdyQPD5itMbQHGgQu79Ykq0IYfq-vThOrYHX14akPBXDW39gvSaT8qQpGHJ9Xb73eCO18CfNSPLOHmnp40IAZ3HDHeCmgMLxaB7sGt8w3

• Active Exploits Hit Dassault and XWiki — CISA Confirms Critical Flaws Under Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijMgE8RpqcNAqAa9qfKbwHkmy-9REaXva31VDPCO8YNMfV9W6CsD23kAevGhqEmVzZ5a7RJABDQpfMWftbT729ZF7hoi5rJQfnQUPyEOSOQXQPXJnwwcG3

• 10 npm Packages Caught Stealing Developer Credentials on Windows, macOS, and Linux

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUpZVfLPbWlZD8KMyaBn9nC53lUdBTLrXPQYMZoh4b9XiWsIyOlJYzRFzR4UTvcMBZFqSQE2H3f7GBoYIPiBxp2jZgVYLyN11PnZ2pDY6l3DaNGeRV3mLW

• Russian Hackers Target Ukrainian Organizations Using Stealthy Living-Off-the-Land Tactics

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjX53AJ2ZRF76XuNCIbv1Eoj3ugawtHgL9MA-KgpYweY8I98juyR1U7bzj5XDPBNbdMncN3EN3G2-gML7KAoHjWqskTslBDNg2k4Aj6hPOzv597krzz8nge

• Preparing for the Digital Battlefield of 2026: Ghost Identities, Poisoned Accounts, & AI Agent Havoc

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhCY5j9CHM4fw-VLiMK0NbjKBVaIcQB7pI10g5LZolL46Qj-l3JB9iY9BZx3YHwJubG7AQGBctFTv4YvoRFnGEEZl0nfr1uNLmFYS3NLH-hlCiulSTG4Abz

• Discover Practical AI Tactics for GRC — Join the Free Expert Webinar

  Practical AI Tactics for GRC Artificial Intelligence (AI) is rapidly transforming Governance, Risk, and Compliance (GRC). It's no longer a future concept—it's here, and it's alread

• New AI-Targeted Cloaking Attack Tricks AI Crawlers Into Citing Fake Info as Verified Facts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7Zf17lOXRZ03iHmWhBUjSexeLn117N0KiHTTh8NCcDhuLDju5f6EpPZDtp1uPqHTV-h6-ebxTdZOoRuYRglmJVPig9BfOx-O0k8Yz0ms1Ghk4r8k9ZVC3

• Experts Reports Sharp Increase in Automated Botnet Attacks Targeting PHP Servers and IoT Devices

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivAUs8CWZuMjytXCzRiRr1Njj-R-Sv2PglgPmqZCLMHd71SMJyPl8hh9RPTqhzeZm7OJ7BdDEOO0b5bODPEvOl6uOB4cA1Hobq1jO6uIsuFSqDMp-lyswH

• PhantomRaven Malware Found in 126 npm Packages Stealing GitHub Tokens From Devs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj31UtIt0Lur5O3mf05d1BdnLD2HsKoFcIVaw9588BLmRnbIc-KOZw0fu3zEOBPjuPruB5dQl5meERoueSccVtu6jjX9KegwbeE9Or4tfMxksfhb66Ae8eE

• ThreatsDay Bulletin: DNS Poisoning Flaw, Supply-Chain Heist, Rust Malware Trick and New RATs Rising

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgFjzmzkNrkKADylrwEMbXfJunGKEjaABUl6du-8jHmRjLcCttz7ppiq6xeoln6n2HiAd84y27XQD1LtPPlGSMbqVOk0S3xfdWlTa9ng7reAU4iAapmmJl

• The Death of the Security Checkbox: BAS Is the Power Behind Real Defense

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQqrUTE7JwhaT1l8F6HjBwdP01VDLqXByApkmlLZGEhMZolJcDB0G5PH8FIAxFMRQvv3uZmLSL5yT1tFzPR4Bz3eqiJRmM-mbVPigm7VKum6Fi2Ja1likl

• New "Brash" Exploit Crashes Chromium Browsers Instantly with a Single Malicious URL

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNPzPbEzMX4dgK-yQVcBTZXkH8V42XYSGCEGgQzI6P0g0Mm4ozB-fC14LrYJw5mZfhA0swpNl5ZAs86tjzY7ayJGrewr7fH0S8rFsua8J-C8ImR-04v88S

• False Reports of Gmail Data Breach Alarm Internet

  Breathless news stories about a Gmail data breach began to appear online after media outlets misinterpreted a report about Gmail passwords stolen by infostealers. Urgent headlines

• Russian Ransomware Gangs Weaponize Open-Source AdaptixC2 for Advanced Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHAemb8q0dPL4UJx7V6h0octnu9dSgvaV0KNS8ctKdDRlcrt51uM9BXud3jaJ7Gkc-NGMJfTfTmShpq9ehcNjW2nh-ncTHD37MRt9iY7ThMZKxpULdweMD

• 10 Million Impacted by Conduent Data Breach

  Business services provider Conduent is notifying more than 10 million people that their personal information was stolen in a January 2025 data breach. The incident was disclosed pu

• Former Security Company Official Pleads Guilty to Stealing Trade Secrets to Sell to Russian Buyer

  A former cybersecurity company official charged with stealing trade secrets to sell them to a Russian buyer pleaded guilty to two counts of theft of trade secrets in U.S. District

• Google's Built-In AI Defenses on Android Now Block 10 Billion Scam Messages a Month

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLzNvcgKF1dzPvi41-IVyFcKKds42WP88xnqZjnxYUBHHdDLsJCHd26MwwUHs8NOi4I3-8c90rzegdXeQ283lfQiwGgy3vRZumlIEjZXf8CaVGYTgoBcAw

• Reflectiz Raises $22 Million for Website Security Solution

  Web exposure management firm Reflectiz has announced raising $22 million in a Series B funding round that brings the total raised by the company to $28 million. The new investment

• Progress Patches MOVEit Transfer Uncontrolled Resource Consumption Vulnerability

  Progress Software has released critical security patches addressing a high-severity vulnerability affecting MOVEit Transfer, a widely used enterprise file transfer solution. The vu

• Why “Secure Login” Isn’t Enough to Protect Your Mobile App Anymore

  Manish Mimani, founder and CEO of Protectt.ai For years, static passwords, dynamic One-time Passwords (OTPs), and Multi-factor Authentication (MFA) have been the foundation of mobi

• A New Security Layer for macOS Takes Aim at Admin Errors Before Hackers Do

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHpAYTsxkWCgKoj4IbW-z4a9m9r8KWH6oc0a5N7B68vil9GiBeKNPIHE3HcJY3VZOqcGA1tLpTkDvB2sMsNMazRRyBT0bxqAQHoojAyY5btgMibphXUZ8G

• Spektrum Labs Emerges From Stealth to Help Companies Prove Resilience

  Spektrum Labs emerged from stealth mode on Thursday with a platform designed to enable organizations to prove their cyber resilience. Spektrum Labs, which has raised $10 million in

• Google Unveils new AI-Protection for Android to Keep You Safe From Mobile Scams

  Google is strengthening its defense against mobile scams with advanced AI-powered protections built directly into Android devices. As cybercriminals become more sophisticated, usin

• CISA Flags VMware Zero-Day Exploited by China-Linked Hackers in Active Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgI9b0-qhv23XfDSOcojqy0VRkWHB99nqdbwTnEfuC2Osi-aKm2iRqK7rip6h8Gh4C4hP6ySCTTmOoKVpLRIzNJBPcsoQlVjry-zfmX71nhF4-84Gd4D7XC

• Vinomofo Failed to Protect Customer Data, Australian Privacy Commissioner Rules

  Australia’s Privacy Commissioner Carly Kind has issued a determination against online wine wholesaler Vinomofo Pty Ltd, finding the company interfered with the privacy of almost on

• Threat Actors Exploit LANSCOPE Endpoint Manager Zero-Day Vulnerability to Steal Confidential Data

  In mid-2025, researchers discovered a sophisticated campaign orchestrated by the Chinese state-sponsored threat group BRONZE BUTLER (also known as Tick) targeting organizations rel

• Japan Issues OT Security Guidance for Semiconductor Factories

  Japan’s Ministry of Economy, Trade and Industry has published new operational technology (OT) security guidance for semiconductor factories. The 130-page document is available in b

• Eclipse Foundation Revokes Leaked Open VSX Tokens Following Wiz Discovery

  Open VSX Tokens Eclipse Foundation, which maintains the open-source Open VSX project, said it has taken steps to revoke a small number of tokens that were leaked within Visual Stud

• Hacktivist ICS Attacks Target Canadian Critical Infrastructure

  Canadian cybersecurity officials are warning that hacktivists are increasingly targeting critical infrastructure in the country. In an October 29 alert, the Canadian Centre for Cyb

• Beware of Malicious ChatGPT Apps That Records Users Action and Steals Sensitive Data

  The explosive growth of artificial intelligence has created an unexpected security threat as cybercriminals exploit ChatGPT’s popularity through counterfeit mobile applications. Re

• Chinese APT Exploits Unpatched Windows Flaw in Recent Attacks

  A Chinese threat actor has been exploiting an unpatched Windows shortcut vulnerability in fresh attacks targeting the diplomatic community in Europe, Arctic Wolf reports. The explo

• CISA and NSA Issue Urgent Guidance to Secure WSUS and Microsoft Exchange Servers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjA0I1Jx6uIEdkIQQM9RnxL2Ki39vb2gH7eog9Bm7oLXHB3Ia60PLtDJsEuqlPrOsZLL9UJZ3YnnlRxxQv0zGBpNQcpQvDlxnFR1c6iN-NzNkRMt3sW38md

• Defense Contractor Manager Pleads Guilty for Selling Cyber Exploits to Russian Broker

  Peter Williams, a 39-year-old Australian national and former general manager at a U.S. defense contractor, pleaded guilty to theft of trade secrets charges after selling sensitive

• Stolen Credentials and Valid Account Abuse Fuel the Financially Motivated Attacks

  Throughout the first half of 2025, financially motivated threat actors have shifted their approach to intrusions, abandoning traditional implant-heavy methods in favor of a more co

• Jamf to Go Private Following $2.2 Billion Acquisition by Francisco Partners

  Private equity firm Francisco Partners has entered into a definitive agreement to acquire Apple device management and security firm Jamf in a $2.2 billion deal. Jamf provides a pla

• The MSP Cybersecurity Readiness Guide: Turning Security into Growth

  MSP Cybersecurity Readiness Guide MSPs are facing rising client expectations for strong cybersecurity and compliance outcomes, while threats grow more complex and regulatory demand

• Hackers Exploiting Windows Server Update Services Flaw to Steal Sensitive Data from Organizations

  Windows Server Update Services (WSUS) vulnerability is actively exploited in the wild. Criminals are using this vulnerability to steal sensitive data from organizations in various

• Middle East Cybersecurity Market to Double by 2030, Fueled by AI and Cloud Adoption

  The Middle East Cybersecurity Market is experiencing unprecedented momentum, driven by rapid digital transformation, a surge in cyberattacks, and strong government-led security ini

• CISA Adds Exploited XWiki, VMware Flaws to KEV Catalog

  The US cybersecurity agency CISA on Thursday expanded its Known Exploited Vulnerabilities (KEV) catalog with two security defects impacting XWiki and VMware products. The XWiki fla

• China-Linked Tick Group Exploits Lanscope Zero-Day to Hijack Corporate Systems

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZykRt-Qg6PRjnYyI3lt6G0Ygf-Pp1Ww03EXTB5nUqaXMBaS1x4f5BxGKAnizBh7wk8gGff5SgLd0j70vJ0-bOdH60rmTctKnWfppbSTWOrdIkTIhga2CR

• Hackers Exploiting Cisco IOS XE Vulnerability in the Wild to Deploy BADCANDY Web Shell

  Cybercriminals and state-sponsored actors are ramping up attacks on unpatched Cisco IOS XE devices across Australia, deploying a persistent Lua-based web shell known as BADCANDY to

• India’s Cyber Security Skyrockets to $20 Billion, Fueled by 400+ Startups: CERT-In DG

  India’s cybersecurity landscape is witnessing rapid growth, with the Indian Computer Emergency Response Team (CERT-In) playing a central role in driving this transformation. Accord

• Open VSX Downplays Impact From GlassWorm Campaign

  The GlassWorm campaign that infected VS Code extensions in the Open VSX marketplace has been fully contained, the Open VSX team says. Maintained by the Eclipse Foundation, the Open

• China-Linked Hackers Exploit Windows Shortcut Flaw to Target European Diplomats

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuCnrmqvnmeQpjFHXNewBANRdjg6GRkj6K7cEMmTmw-qmLNdssAgQ-6Lll7hmLZ4lX7R2mUneq6t0fpl-SOfUT-WKd7PdL9wmSrhsZngchMDjYc2E8jlWO

• CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert about a critical use-after-free vulnerability in the Linux kernel, tracked as CVE-2024-1

• Hundreds of Australian Devices Compromised with BadCandy Implant

  Australian cyber agency has issued a critical advisory warning that over 150 devices in Australia remain compromised with the BadCandy implant as of late October 2025—two years aft

• Ukrainian Man Extradited From Ireland to US Over Conti Ransomware Charges

  A Ukrainian national who fled to Ireland following the Russian invasion has been extradited to the United States to face charges related to his alleged involvement in Conti ransomw

• Nation-State Hackers Deploy New Airstalk Malware in Suspected Supply Chain Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsKxzaqZgRJLRPcNqwG7WhPAKXXPkKpEOo3KCEyJxJAGr4jvJCJYu7f5MKXFMBZEAYHyDeNoDbQMuA-f4OOSp74F9iEax0USQCQ0oyFWnJTn4IJc-wiXox

• Akira Ransomware Allegedly Claims Theft of 23GB in Apache OpenOffice Breach

  The notorious Akira ransomware group announced on October 29, 2025, that it successfully breached the systems of Apache OpenOffice, exfiltrating a staggering 23 gigabytes of sensit

• In Other News: WhatsApp Passkey-Encrypted Backups, Russia Targets Meduza Malware, New Mastercard Solution

  SecurityWeek’s cybersecurity news roundup provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a valuable summary of stories tha

• FCC Set to Reverse Course on Telecom Cybersecurity Mandate

  The Federal Communications Commission will vote next month to rescind a controversial January 2025 Declaratory Ruling that attempted to impose sweeping cybersecurity requirements o

• OpenAI Unveils Aardvark: GPT-5 Agent That Finds and Fixes Code Flaws Automatically

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1qKVY4KhOkzIkeCDV1BiboPN3n7qh-ElZ2YzQyfHE2ctgVFmcv7KPDcx1Chvc3KxNeMuirmxfoFRlObYAPkCds2Pw9H0dOPmrJPFfmGFglSXLIM6Ycu0n

• Agent Session Smuggling: How Malicious AI Hijacks Victim Agents

  Security researchers have uncovered a sophisticated attack technique that exploits the trust relationships built into AI agent communication systems. The attack, termed agent sessi

• Capita Ransomware Fine: ICO Hits UK Outsourcing Giant with Record £14 Million Penaltyc

  Capita has been handed a record ransomware fine of £14 million by the Information Commissioner’s Office (ICO) after a 2023 cyberattack exposed the personal data of 6.6 million peop

• Mango Data Breach Exposes Limited Customer Details After Third-Party Cyberattack

  Spanish fashion retailer Mango has confirmed a data breach after one of its external marketing service providers suffered unauthorized access to limited customer information. The c

• Microsoft Disrupts Vanilla Tempest Campaign Using Fraudulent Code-Signing Certificates

  Microsoft said it disrupted a high-volume campaign in October after discovering a coordinated effort by the ransomware group known as Vanilla Tempest to weaponize fraudulently sign

• From Spreadsheets to Strategic Defense: Andrew Morton Walks Us Through TPRM Transformation

  When Andrew Morton, Head of IT GRC & Assurance at CW Retail (Chemist Warehouse), walked into the office, third-party risk management (TPRM) was a bit all over the place—spreadsheet

• AISLE Emerges From Stealth With AI-Based Reasoning System to Remediate Vulnerabilities on the Fly

  AISLE has emerged from stealth with a new AI-based cyber reasoning system (CRS). The term CRS originates from DARPA’s Cyber Grand Challenge, held in 2016 and designed for research

• Unencrypted Satellite IP Traffic is a Widespread Problem: Researchers

  Satellite links contain a surprising amount of unencrypted traffic – and perhaps even more surprising is the fact that the researchers who discovered that unencrypted traffic did i

• Microsoft Revokes Over 200 Certificates to Disrupt Ransomware Campaign

  Microsoft announced on Wednesday that it has disrupted a Vanilla Tempest campaign whose goal was the deployment of Rhysida ransomware. Vanilla Tempest, also known as Vice Spider an

• European Authorities Shutter Cybercrime Service Fueling Thousands of Online Scams

  Seven suspects are now in custody after a cross-border crackdown dismantled a cybercrime service that powered more than 3,000 online scams across Europe, authorities said. Investig

• Gladinet Patches Exploited CentreStack Vulnerability

  Gladinet this week released patches for a CentreStack vulnerability that has been exploited in the wild since at least late September. Tracked as CVE-2025-11371, the issue is descr

• Critical AEM Vulnerability (CVE-2025-54253) Actively Exploited, Says CISA

  A new vulnerability in Adobe Experience Manager (AEM) Forms has been confirmed as actively exploited in the wild, prompting the U.S. Cybersecurity and Infrastructure Security Agenc

• Vulnerabilities Allow Disruption of Phoenix Contact UPS Devices

  Phoenix Contact this week announced patches for several vulnerabilities affecting its QUINT4 uninterruptible power supply (UPS) products. The vendor has fixed five vulnerabilities

• Prosper Data Breach Impacts 17.6 Million Accounts

  More than 17 million individuals were likely impacted by a data breach at peer-to-peer lending marketplace Prosper, data breach notification service Have I Been Pwned warns. Prospe

• ‘Highest Ever’ Severity Score Assigned by Microsoft to ASP.NET Core Vulnerability

  Microsoft’s October Patch Tuesday updates addressed a critical-severity vulnerability in the ASP.NET Core open source web development framework. Tracked as CVE-2025-55315, the flaw

• Google Patches Critical Chrome Vulnerability (CVE-2025-11756) in Safe Browsing Component

  Google has issued an urgent security update for its Chrome browser, addressing a high-severity vulnerability tracked as CVE-2025-11756. This flaw, which affects Chrome’s Safe Brows

• Hackers Steal Sensitive Data From Auction House Sotheby’s

  Sotheby’s, the famed auction house, has disclosed a data breach that involved hackers stealing highly sensitive personal information from its systems. The New York City-based luxur

• APT28 With Weaponized Office Documents Delivers BeardShell and Covenant Modules

  Russia’s APT28 has resurfaced in mid-2025 with a sophisticated spear-phishing campaign that weaponizes Office documents to deploy two novel payloads: BeardShell, a C-based backdoor

• Siemens ProductCERT Issues Multiple Security Advisories Highlighting Critical Vulnerabilities

  Siemens ProductCERT has recently issued a series of security advisories alerting users to several critical vulnerabilities found across various Siemens industrial and automation pr

• Windows Rust Kernel GDI Vulnerability Leads to Crash and Blue Screen of Death Error

  A vulnerability in Microsoft’s newly implemented Rust-based kernel component for the Graphics Device Interface (GDI) in Windows. This flaw, which could trigger a system-wide crash

• Over $3 Million in Prizes Offered at Pwn2Own Automotive 2026

  Trend Micro’s Zero Day Initiative (ZDI) on Thursday announced that a new Pwn2Own Automotive hacking contest will be held next January, during the Automotive World event in Tokyo. T

• New Tech Support Scam with Microsoft’s Logo Tricks Users to Steal Login Credentials

  A new campaign has emerged that weaponizes Microsoft’s familiar branding to lure unsuspecting users into a sophisticated tech support scam. Victims receive a seemingly legitimate e

• In Other News: CrowdStrike Vulnerabilities, CISA Layoffs, Mango Data Breach

  SecurityWeek’s cybersecurity news roundup provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a valuable summary of stories tha

• Hackers Using AI to Automate Vulnerability Discovery and Malware Generation – Microsoft Report

  Security teams around the world are grappling with a new breed of cyber threats that leverage advanced automation to identify software weaknesses and craft malicious payloads at un

• Threat Actors Leveraging ClickFake Interview Attack to Deploy OtterCandy Malware

  Cybercriminals associated with the North Korean threat group WaterPlum, also known as Famous Chollima or PurpleBravo, have escalated their activities with a sophisticated new malwa

• Why Airline Data Breaches Matter – And Why Qantas Could Have Been Worse

  Airlines are a popular target for hackers in part because of the amount of personal data they collect – and no personal data is more coveted by cybercriminals than passports and go

• Hackers Using TikTok Videos to Deploy Self-Compiling Malware That Leverages PowerShell for Execution

  Cybercriminals are exploiting TikTok’s massive user base to distribute sophisticated malware campaigns that promise free software activation but deliver dangerous payloads instead.

• Microsoft Windows 11 October Update Breaks Localhost (127.0.0.1) Connections

  Microsoft’s October 2025 cumulative update for Windows 11 has disrupted localhost functionality, preventing developers and users from accessing local web applications and services

• Critical Zimbra SSRF Vulnerability Let Attackers Access Sensitive Data

  A newly disclosed Server-Side Request Forgery (SSRF) flaw in Zimbra Collaboration Suite has raised major security concerns, prompting administrators to patch systems immediately. T

• Microsoft: Russia, China Increasingly Using AI to Escalate Cyberattacks on the US

  Russia, China, Iran and North Korea have sharply increased their use of artificial intelligence to deceive people online and mount cyberattacks against the United States, according

• Authorities Dismantle Cybercrime-as-a-Service Platform, Seize 40,000 Active SIM Cards

  An international law enforcement operation has dismantled a large-scale cybercrime-as-a-service network responsible for fueling thousands of online fraud cases across Europe. The o

• PoC Exploit for 7-Zip Vulnerabilities that Allows Remote Code Execution

  A proof-of-concept exploit for two critical vulnerabilities in the popular file archiver 7-Zip, potentially allowing attackers to execute arbitrary code remotely through malicious

• Tata-Owned Jaguar Land Rover Delays Factory Reopening Following Major Cyber Attack

  Jaguar Land Rover (JLR), the United Kingdom’s largest automotive manufacturer, has announced an additional delay in resuming production at its factories following a significant cyb

• HoundBytes Launches Automated Security Analyst

  Cybersecurity consulting and MDR firm HoundBytes has launched an automated security analyst designed to replace the repetitive work of Tier 1 SOC analysts. Named WorkHorse, the sol

• European Airport Disruptions Caused by Ransomware Attack

  The cybersecurity incident impacting Collins Aerospace, which led to disruptions at several major airports across Europe, was the result of a ransomware attack, according to the EU

• Hackers Abusing GitHub Notifications to Deliver Phishing Emails

  In recent weeks, security researchers have uncovered an elaborate phishing campaign that leverages legitimate GitHub notification mechanisms to deliver malicious content. Victims r

• Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQ4bRwz6MJ6hdwy6WN3JzLRDW0W60H5wW9oKm50HAipFOxQ3TBxbOxfpz46icdE9elMWAl9W5kEqE3SUl91CjGLQX7HRqZWAQ6emiU9BgKVTjpPYsy-jaa

• Researchers Earn $150,000 for L1TF Exploit Leaking Data From Public Cloud

  Academic researchers from Vrije Universiteit Amsterdam have demonstrated that transient execution CPU vulnerabilities are practical to exploit in real-world scenarios to leak memor

• Hackers Hijacking IIS Servers Using Malicious BadIIS Module to Serve Malicious Content

  A sophisticated cyber campaign, dubbed “Operation Rewrite,” is actively hijacking Microsoft Internet Information Services (IIS) web servers to serve malicious content through a tec

• How to Gain Control of AI Agents and Non-Human Identities

  AI Agents and Non-Human Identities We hear this a lot: "We've got hundreds of service accounts and AI agents running in the background. We didn't create most of them. We don't know

• Mycroft Raises $3.5 Million for AI-Powered Security and Compliance Platform

  Toronto, Canada-based company Mycroft emerged from stealth on Monday with a solution designed to help organizations manage and operate their security and IT stack with the aid of a

• EV Charging Provider Confirm Data Breach – Customers Personal Data Exposed

  Digital Charging Solutions GmbH (DCS), a leading provider of white-label charging services for automotive OEMs and fleet operators, has confirmed a data breach affecting a limited

• ⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More

  Weekly Recap The security landscape now moves at a pace no patch cycle can match. Attackers aren't waiting for quarterly updates or monthly fixes—they adapt within hours, blending

• Automotive Titan Stellantis Discloses Data Breach

  Car manufacturing giant Stellantis has disclosed a data breach involving a third-party service provider’s platform. The incident, the company said over the weekend, impacted a thir

• GitHub Enhances NPM’s Security with Strict Authentication, Granular Tokens, and  Trusted Publishing

  Recent High-profile supply‐chain attacks have exposed critical weaknesses in package registry security, prompting GitHub to roll out a suite of defenses designed to harden the npm

• ComicForm and SectorJ149 Hackers Deploy Formbook Malware in Eurasian Cyberattacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3W5z25Hk46W7WFVmyS2iSNtOYmAK4fRnhASGkeouZ2UJ3B6D8rD8uIIvq4rNV8utNMz4BH8PM0IjVxU9eHafMytlGCbyWSN8LIV1u5Sx0cJCJ9s6jQWnE

• Hackers Exploits IMDS Service to Gain Initial Access to a Cloud Environment

  Threat actors were manipulating the Instance Metadata Service (IMDS), a core component designed to securely furnish compute instances with temporary credentials to infiltrate and n

• Scattered Spider Suspect Arrested in US

  A juvenile suspected of being involved in cyberattacks against multiple Las Vegas casinos was arrested last week, the Las Vegas Metropolitan Police Department announced. The attack

• BadIIS Malware Spreads via SEO Poisoning — Redirects Traffic, Plants Web Shells

  BadIIS Malware Cybersecurity researchers are calling attention to a search engine optimization (SEO) poisoning campaign likely undertaken by a Chinese-speaking threat actor using a

• SolarWinds Web Help Desk Vulnerability Enables Unauthenticated RCE

  SolarWinds has released an urgent security advisory for a critical vulnerability in its Web Help Desk software that could allow an unauthenticated attacker to achieve remote code e

• ShadowV2 DDoS Service Lets Customers Self-Manage Attacks

  A newly discovered distributed denial-of-service (DDoS) botnet targets misconfigured Docker containers for infection and offers a new service model where customers launch their own

• GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZQ-xcQ5PKzdd6Juz8x31GctkkivtZYfhVKlnZ5tFKbTtwJTtmajAEiqsdZZslnaRPS9Vd3LH4mQTo9agSCG6cEuoUU7WCvb1e-MmDytS4hQ1x1xur0u-D

• Berlin, Brussels, Dublin, and Heathrow Disrupted by Cyberattack on Critical Check-In Systems

  Several major European airports, including those in Berlin, Brussels, Dublin, and London, were hit by a cyberattack that caused extensive disruptions to check-in and boarding syste

• SpyCloud Report: 2/3 Orgs Extremely Concerned About Identity Attacks Yet Major Blind Spots Persist

  Austin, Texas, USA, September 23rd, 2025, CyberNewsWire New SpyCloud 2025 Identity Threat Report reveals dangerous disconnect between perceived security readiness and operational r

• Top 25 MCP Vulnerabilities Reveal How AI Agents Can Be Exploited

  MCP has become an integral part of the expansion of agentic AI but comes with its own vulnerabilities. Model Context Protocol (MCP), developed by Anthropic and released as an open

• ShadowV2 Botnet Exploits Misconfigured AWS Docker Containers for DDoS-for-Hire Service

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhub7jHO-c4YORGMXuQAjgkVE4mGHcG3R8hUmwiWpN0x9GAWcO6Ldo7z234xmlS4ozxYaGBbA3gZGY5Qaa3yg7U3DRvHMWD73PwzbcoPHcmdNcPHgYfCtpp

• U.S. Secret Service Dismantles 300 SIM Servers and 100,000 SIM Cards Disabling Cell Phone Towers

  The U.S. Secret Service has dismantled a massive, sophisticated network of electronic devices in the New York tristate area, thwarting what it described as an “imminent threat” to

• Microsoft Entra ID Exposed: Actor Token Flaw Enables Stealthy Global Admin Takeover

  A newly disclosed vulnerability tracked as CVE-2025-55241 has been reported. The flaw, discovered by an independent researcher and disclosed in September 2025, revealed that Micros

• All Microsoft Entra Tenants Were Exposed to Silent Compromise via Invisible Actor Tokens: Researcher

  The strength of responsible disclosure is that it can solve problems before they are actioned. The weakness is that it potentially generates a false sense of security in the vendor

• Lean Teams, Higher Stakes: Why CISOs Must Rethink Incident Remediation

  CISO Big companies are getting smaller, and their CEOs want everyone to know it. Wells Fargo has cut its workforce by 23% over five years, Bank of America has shed 88,000 employees

• Threat Actors with Fake Job Lures Attacking Job Seekers to Deploy Advanced Malware

  In recent months, a sophisticated campaign has emerged in which state-linked threat actors are leveraging fake job offers to ensnare unsuspecting job seekers and deliver advanced m

• Auto Giant Stellantis Confirms Data Breach, Says Minimal Data Accessed

  Stellantis, one of the world’s largest automakers, confirmed that it was hit by a data breach, but the company says the breach was limited to customer contact information. The Stel

• Unit 221B Raises $5 Million for Threat Intel Aiding Hacker Arrests 

  Threat intelligence firm Unit 221B has announced raising $5 million in a seed funding round led by J2 Ventures, with additional support from Pipeline Capital and other investors. F

• SolarWinds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFO1p2qWLIaLkEjXvBexuWL8MRzvAn8rhnkmU8VGge5ajRgr8Hz1rgLcSPqi5igX4xCZ5NMO8XjmonjH2PXyDK7ADHR3zlRfwUDZxrQDoIV5LkcVG7LseB

• SonicWall Releases Urgent Update to Remove Rootkit Malware ‘OVERSTEP’ from SMA Devices

  SonicWall has issued an urgent firmware update, version 10.2.2.2-92sv, for its Secure Mobile Access (SMA) 100 series appliances to detect and remove known rootkit malware. The advi

• SlopAds Fraud Ring Exploits 224 Android Apps to Drive 2.3 Billion Daily Ad Bids

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmMoqL8YhxdzN2eq2zAp5a1SG0hHkx3fiZQrOzG5EKSzNfEeQXOyt4uCoBXzPB1rZPF4ivi9W5SEKTA7SFKBQ7pyUIYC0jBvBc-wI5o59eYkCsLYQixj9D

• Chaos Mesh Critical GraphQL Flaws Enable RCE and Full Kubernetes Cluster Takeover

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrG4Y8oTdTQpISwTEucKZYJRdaCUFxv2UT9GVe0bfrSjRIsIypm5px4yBrNL2ZLx04HoxlZ1qq0lYUZ41lCbN7PISWgkl3O3v-q-RTWJko8qieWau0owLF

• RaccoonO365 Phishing Network Dismantled as Microsoft, Cloudflare Take Down 338 Domains

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPJ89hVCM5hxCqwxfOA086CpjwRDKWFcmTsqG8RQOa7xzhyphenhyphenWLCMBkeGChxaopcCCjqoXyGFe2HLBEgYXbl3vWD7Hb2h3oXB2NmCQNCRvJDFZ

• DOJ Resentences BreachForums Founder to 3 Years for Cybercrime and Possession of CSAM

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsxhtybqYnCeTLwGYXtnI7G5W1UPFsvuVSUrrwHCTZPmOMcMC4uxtKk84Y5qfgnvhtoIixV5Mqh2vHPgPoP61KBPa26xp-AI51x0sfWgvN5FE38UVq1DLw

• Scattered Spider Resurfaces With Financial Sector Attacks Despite Retirement Claims

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvhiJoHbLDBe73u2FOAcCRximIGI06JDoOfaAYb9DPSgzv12EaoKSJqn2BUHGvEeO7zvo734400ry-aiyEdFnU5mHEHOiupdklj3MCJsQcD1Fds8MSoG43

• Rethinking AI Data Security: A Buyer's Guide 

  AI Data Security Generative AI has gone from a curiosity to a cornerstone of enterprise productivity in just a few short years. From copilots embedded in office suites to dedicated

• From Quantum Hacks to AI Defenses – Expert Guide to Building Unbreakable Cyber Resilience

  Quantum Hacks to AI Defenses Quantum computing and AI working together will bring incredible opportunities. Together, the technologies will help us extend innovation further and fa

• Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmNqIAGRC-lHZt4UmR-2Sya8WTKOdff3NnKm8v-ychJrCDRAeEEtSb3V3G1Bz7aBPVz7SbvAg5PrhTgUswlpiKeWGiiQpDAD8opAWFqph5G3Tbu6Q1Q-FW

• TA558 Uses AI-Generated Scripts to Deploy Venom RAT in Brazil Hotel Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivKbokskfh0uy495zD5U2vzlJiqP4gzNk7va2HAxGv9dsZkTBjB1sRUVHSgmYrtqwvVoJbI3zq0XOelBdJ3vIjD7opWT1F8sYal-HFXzkVy2azgqlcw3J8

• Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVlzRvr9tBHSRQqe2jj8SrExmcCFhoLUrrMI4GzbM0-GggNMW0BTO02GXh8iShmsUpEJyy85FIPBXIbXwMjR68D30ldhn8osa8zG-wKqJu6KDR3Kuri6sd

• How CISOs Can Drive Effective AI Governance

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRM8iwFSFKUaICXnkUF6KsZW1IRpj76VfyKo-NhQxaiK2pezPbuowa0brBu2TsF9yJ4VMWDSR7TvbNoxJrBNWMv9bonFhZN1RtrEhHC2iA6qlU0toJ6nPd

• SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAbjw1B2M-4If7F3tFoqS9Ra3GqczXVQOAbTf0vTt6qhOxIgMMtyiF1yqZhxx8rl12vpRQ0AyJgmwreH83TJuqiNzEGCAP3XFCMVvY1w6l8FVWXWfQHy27

• CountLoader Broadens Russian Ransomware Operations With Multi-Version Malware Loader

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZnVtvPbVjEISGhCVekRjxkYEf9o-sXD-aOoO6xgVDbJNEFLNAPRPirIFMImRY2iQMBiwJTmnwj5WM4AtG3JzXPL2u8wkzk6g00NUfPtnn9UJv1xCTHqqV

• SonicWall Urges Password Resets After Cloud Backup Breach Affecting Under 5% of Customers

  SonicWall Urges Password Resets SonicWall is urging customers to reset credentials after their firewall configuration backup files were exposed in a security breach impacting MySon

• CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjO9PVt1uJywn46YI4l6-DXrIDYdUbAIruaqTGRq6c6jeycH8T0RZqFblPmH8ggLMp4iNcp1rwb4kmf55-bHOH-NS-FjtJXDueUcK3ORjroBo10NxrFXrYO

• Google Confirms Real-World Attacks on Chrome Vulnerability CVE-2025-10585

  Google has issued an urgent security alert for all users of its Chrome browser, confirming that an active exploit targeting a critical vulnerability, CVE-2025-10585, is currently b

• U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack

  Scattered Spider Hackers Law enforcement authorities in the U.K. have arrested two teen members of the Scattered Spider hacking group in connection with their alleged participation

• ChatGPT Targeted in Server-Side Data Theft Attack

  Researchers at web security company Radware recently discovered what they described as a service-side data theft attack method involving ChatGPT. The attack, dubbed ShadowLeak, tar

• Australia’s Privacy Commissioner Rules Kmart’s Facial Recognition Use Unlawful

  Australia’s privacy regulator has called the use of facial recognition technology without consent of it customers, in dozens of Kmart stores around the country a breach of the long

• Russian Hackers Gamaredon and Turla Collaborate to Deploy Kazuar Backdoor in Ukraine

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcan4EP6KxSTEnSsJgfX0N54PGEI1FQyqKhlC1m8OdisihSBdoh0CghuD5-YHwZIVAPAno-ytpdZZIGcaCumRg7XVQ8ymexMJaS9bvmgu7x9tfnhy62KTQ

• Unpatched Vulnerabilities Expose Novakon HMIs to Remote Hacking

  Some of the industrial control system (ICS) products made by Taiwan-based Novakon are affected by serious vulnerabilities, and the vendor does not appear to have released any patch

• How To Automate Alert Triage With AI Agents and Confluence SOPs Using Tines

  AI Agents and Confluence SOPs Using Tines Run by the team at workflow orchestration and AI platform Tines, the Tines library features over 1,000 pre-built workflows shared by secur

• Nokia CBIS/NCS Manager API Vulnerability Let Attackers Bypass Authentication

  A critical authentication bypass vulnerability has emerged in Nokia’s CloudBand Infrastructure Software (CBIS) and Nokia Container Service (NCS) Manager API, designated as CVE-2023

• APT28’s Recent Campaign Combined Steganography, Cloud C2 into a Modular Infection Chain

  APT28, the long-running actor tracked as Fancy Bear, Sofacy and Sednit, used a compact but technically sophisticated campaign that researchers documented as Phantom Net Voxel. The

• Two Scattered Spider Suspects Arrested in UK; One Charged in US

  Authorities in the UK have arrested and charged two individuals for their alleged roles in the infamous hacking group Scattered Spider. One of them has been charged in the US as we

• Top 10 Best API Security Testing Tools in 2025

  In today’s rapidly evolving digital landscape, APIs (Application Programming Interfaces) have become the backbone of online business, connecting services, and enabling new customer

• 17,500 Phishing Domains Target 316 Brands Across 74 Countries in Global PhaaS Surge

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDuKPU2Sji2eQDmj5HZHo-t7i3UGKf-gw-bcMvE36Ia-5d7q4qQvchcp4-9hD0P2mPMAXmbOywCRATAThMM6No59ZIkmRnGMiLPNkyzv-kA922e6iXG3Ds

• Black Hat USA 2025 | CISO Podcast Series Episode 8 Released

  The role of a Chief Information Security Officer (CISO) has never been more critical. We are in 2025, and today, CISOs stand at the frontline of defense, directing everything from

• Netskope Raises Over $908 Million in IPO

  California-based secure access service edge (SASE) solutions provider Netskope has raised more than $908 million in its initial public offering (IPO). The cybersecurity firm, tradi

• Phishing Attacks Using AI-Powered Platforms to Misleads Users and Evades Security Tools

  Phishing campaigns have long relied on social engineering to dupe unsuspecting users, but recent developments have elevated these attacks to a new level of sophistication. Attacker

• Fortra Releases Critical Patch for CVSS 10.0 GoAnywhere MFT Vulnerability

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgG0WVvL4G5mycWzjwdDUsWdQKAR4CjuBdxcvkmJ2WakC3wLwjgqXQDCyXAa2-w7ty0RMa19ARGNEOhNIu4uYebdhyphenhyphenqXdr6aOfvubly6zkLoW

• Key Scattered LAPSUS$ Hunters Hacker Arrested in the UK

  UK authorities have arrested a 19-year-old UK national alleged to be a key figure in the Scattered LAPSUS$ Hunters threat collective. UK authorities arrested Thalha Jubair and a se

• ChatGPT Tricked Into Solving CAPTCHAs

  AI security platform SPLX has demonstrated that prompt injections can be used to bypass a ChatGPT agent’s built-in policies and convince it to solve CAPTCHAs. AI agents have guardr

• BreachLock Named Sample Vendor for PTaaS and AEV in Two New 2025 Gartner® Reports

  New York, New York, September 19th, 2025, CyberNewsWire BreachLock, the global leader in offensive security, has been recognized as a Sample Vendor for Penetration Testing as a Ser

• SystemBC Powers REM Proxy With 1,500 Daily VPS Victims Across 80 C2 Servers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-w6283s1VaRjYcIVD7ekrmBAw8jRjpNp4q0ME7At7VVRZFjRLqRONytP45AdKFxsP8c2c9f4SyVQfzMCq7Qc0KEDLJ3zNqywZPdWw2xfn-1A0UoSf3Jta

• Qilin Remains Top Ransomware Group as New Threats Emerge

  Qilin remained the top ransomware group in August, but two rapidly emerging competitors are threatening to shake up the threat landscape. Those are some of the conclusions from Cyb

• CISA Analyzes Malware From Ivanti EPMM Intrusions

  The cybersecurity agency CISA has shared technical information on malware deployed in attacks targeting two vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM). The flaws, tra

• Threat Actors Selling New Undetectable RAT as ’ScreenConnect FUD Alternative’

  A threat actor has been observed advertising a new Remote Access Trojan (RAT) on underground forums, marketing it as a fully undetectable (FUD) alternative to the legitimate remote

• UNC1549 Hacks 34 Devices in 11 Telecom Firms via LinkedIn Job Lures and MINIBIKE Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4KgWUwD9BMG8RIgB7VXVVpIS88eo6MY0gQBO8U7TQOfw0gIqttm94pSEvAwUzSwtEUx5WamG6Em6pqlJ6IjQc-m5Ny5WelcYppunCgZqdrNlhJhhBEdoJ

• Top Zero-Day Vulnerabilities Exploited in the Wild in 2025

  The cybersecurity landscape in 2025 has been marked by an unprecedented surge in zero-day vulnerabilities actively exploited by threat actors. According to recent data, more than 2

• CISA Warns of New Malware Campaign Exploiting Ivanti EPMM Vulnerabilities

  The Cybersecurity and Infrastructure Security Agency (CISA) released a Malware Analysis Report (MAR), highlighting a new attack trend targeting Ivanti Endpoint Manager Mobile (EPMM

• Turla and Gamaredon Working Together in Fresh Ukrainian Intrusions

  Two Russian state-sponsored threat actors have been working together in recent cyberattacks against Ukrainian targets, evidence collected by ESET suggests. Specifically, the compan

• ShadowLeak Zero-Click Flaw Leaks Gmail Data via OpenAI ChatGPT Deep Research Agent

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0kpQMGrpKyeMOiinPEK1D2WM2cc-p9D2s5VOeFbI-sXbPWHBpdMEHN06sBgPdeS8nVegdEVvqUoKSQFfmRIThFnc3scBk6U8iTBGWf-V2iHq0hWjgnGbJ

• First-ever AI-powered ‘MalTerminal’ Malware Uses OpenAI GPT-4 to Generate Ransomware Code

  AI-powered malware, known as ‘MalTerminal’, uses OpenAI’s GPT-4 model to dynamically generate malicious code, including ransomware and reverse shells, marking a significant shift i

• In Other News: 600k Hit by Healthcare Breaches, Major ShinyHunters Hacks, DeepSeek’s Coding Bias

  SecurityWeek’s cybersecurity news roundup provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a valuable summary of stories tha

• WatchGuard Patches Critical Firebox Firewall Flaw (CVE-2025-9242) With 9.3 CVSS Score

  WatchGuard has issued security updates addressing a vulnerability, tracked as CVE-2025-9242, affecting its Firebox firewall devices. This flaw involves an out-of-bounds write weakn

• Researchers Uncover GPT-4-Powered MalTerminal Malware Creating Ransomware, Reverse Shell

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhYfi5Bp9cOMPmi3Gk7C5lclsTXBJR-A4RnIMXwk49g5eDdG0kD3Ah5wOoeVrw-5rJoXMHM74-ytsLunc8CzSgOFoiQYMXr7kBla8vDNfxlgBSD66wLzwYG

• Heathrow and Other European Airports Hit by Cyberattack, Several Flights Delayed

  A major cyberattack on a popular aviation software provider has caused significant disruptions at key European airports, including London’s Heathrow, Brussels, and Berlin, resultin

• Cyberattack Disrupts Check-In Systems at Major European Airports

  A cyberattack targeting check-in and boarding systems disrupted air traffic and caused delays at several of Europe’s major airports on Saturday. While the impact on travelers appea

• LastPass Warns of Fake Repositories Infecting macOS with Atomic Infostealer

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTi6Dhy7nzXe67ma-c9btG81oYxzpSkP8uMuwTPUNRLO2uSbZ4ML4n363q5U8Gi3zsxQ2LQSDrMSnwipWYtDsd02K3785fguCkDPLfN8JFw1FXtsXe-MoC

• JLR Cyberattack Becomes UK National Crisis

  The Jaguar Land Rover (JLR) cyberattack that has shuttered production at the UK automaker’s factories since September 1 is threatening to become a national crisis, with more than 2

• New EDR-Freeze Tool That Puts EDRs and Antivirus Into A Coma State

  A new proof-of-concept tool named EDR-Freeze has been developed, capable of placing Endpoint Detection and Response (EDR) and antivirus solutions into a suspended “coma” state. Acc

• DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVMBQ32OnJzuPD1a4Z6KMAlFtEHRqcLsysfMiqsIy0Y4tU7xD9bByyXThwX8QA8YvUQAolfUZ66Wksj3vQi0VJdOW5ARj3G0unL4K-NbeRyqLsY1LIAn5n

• Airport Cyberattack Disrupts More Flights Across Europe

  Fallout from a cyberattack that disrupted check-in systems at several European airports extended into a second full day on Sunday, as passengers faced dozens of canceled and delaye

• Fortra Fixes 10.0 GoAnywhere MFT Vulnerability. Patch Now!

  Fortra has fixed a maximum-severity vulnerability in its GoAnywhere Managed File Transfer (MFT) software, and users are urged to patch promptly, as threat actors have been particul

• Cybersecurity Newsletter Weekly – Shai Halud Attack, Ivanti Exploits, FinWise, BMW Data Leak, and More

  This week in cybersecurity, researchers exposed hidden alliances between ransomware groups, the rise of AI-powered phishing platforms, and large-scale vulnerabilities affecting tel

• Senator Wyden Urges FTC to Probe Microsoft for Ransomware-Linked Cybersecurity Negligence

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsjO2JHH1Cq9urNh3ZmyoP7Q6yq88mGNehISBb9dYOZU1yHCvbXsb6aO6tl9ujto-InJLL7FJmu0y8SeEfWwVRI8y8GOSKV5Ig20mItluQXly5w7u3CSWA

• Google Pixel 10 Adds C2PA Support to Verify AI-Generated Media Authenticity

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjiND-z6FdGroBwhkfZkICZEa3n4Z0Zuv-Lt9h07Z-PZXd3uJGpn71IErD1z2AZwtdezsUQYmBQZkqTfPyEQiOKgui5srkxLrkuwfWPFnf-Lq4aJT6li0sa

• Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHAKp4IJAmSiZWoK0v8XwpRWrn3YLZ3PZpvLMobinGLjEO70UTmZ36b5CVT00TuJSGsFuBPHO26VzxBZQ3OCgnLB09bj9R0OPIuyO3dm9sTyhvqdttKb1M

• Cloud-Native Security in 2025: Why Runtime Visibility Must Take Center Stage

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEvW0kfUQir6Eu15eratTv3mVtQTQ0UF9xJOpCCZIpMLcPVkxpJ15lBOlUJew4mnTiHtObVINexY8XgOuMAv9cI9H5bYYMzahkg7AJWvgVD6ic0JFiYVHv

• Critical CVE-2025-5086 in DELMIA Apriso Actively Exploited, CISA Issues Warning

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDi5sWX1YrlqnRnVst-qNnLlhTD-MbkGTmkoJ1Mlz1uUGMcq8oSTjs4FolSdejSsCHRy5uFpvYNq51Z0SMk-4lDRvU8wxDvmzpMMiuCDiFHYutgalfcVDu

• New HybridPetya Ransomware Bypasses UEFI Secure Boot With CVE-2024-7344 Exploit

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7UmnTCuSZ7XsUdBnsEm6JTy51hJbSV-y0D-tM21gC49M9C9xEEsw8VGB7MioLURpkAZSMx1rkXBwQb3kzc4oBVSlcMFgPGKvc0e70kRQ4NseQMHqGajbt

• Apple Warns French Users of Fourth Spyware Campaign in 2025, CERT-FR Confirms

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9qnShhKSuaZ7KfNErnGEsvL3EIq4rqILiR7fDSOKCpAdwcr0Y-LNhrs2DCD6X59DudRPcKUVllOAwuFA88BfXqeQ2mxr64hfHGZHGWrenJ9dQdJCz4-Qz

• Samsung Fixes Critical Zero-Day CVE-2025-21043 Exploited in Android Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQbDjkBGmfSCWIDEGU5fEAMLEUb8wxyX1na5DxoFQF33Bqi9j7UegDoUizpaaleYdmXDP7K4R6p0qjU7ziXTYKa2qoNqKpEVaIz4AklFtXQKqI0qGSnhg2

• Massive NPM Supply Chain Attack Earned Only $600 for Attackers

  A massive NPM supply chain attack that hit about 10% of all cloud environments yielded little for the hackers who engineered the compromise. That’s the conclusion of a pair of repo

• FBI Warns of UNC6040 and UNC6395 Targeting Salesforce Platforms in Data Theft Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjSMY4a9py67ins28hs0Kd11IosBKJgYJOJeNPxR-117qj6s90DFOAup68vrvTBqwDhDBKTsrFTX6PZf-4L19fslQ-TzGwMw2DCG9U9RiKOvOhLQPC7QFM

• Zero Trust Is 15 Years Old — Why Full Adoption Is Worth the Struggle

  Zero trust isn’t failing; it’s the implementation of zero trust that isn’t complete. The implementation of zero trust is essential for cybersecurity: but after 15 years, we’re stil

• HiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware Attacks

  Chinese Malware Attacks Chinese-speaking users are the target of a search engine optimization (SEO) poisoning campaign that uses fake software sites to distribute malware. "The att

• 689,000 Affected by Insider Breach at FinWise Bank

  Hundreds of thousands of individuals have been impacted by an insider breach experienced by FinWise Bank. FinWise Bank, a Utah-based provider of fintech solutions and banking servi

• Student Insider Threats Driving Surge in UK School Data Breaches, ICO Warns

  Over half of insider cyber incidents in UK schools are being caused by students—a trend raising alarms across education, regulation, and cybersecurity communities. The Information

• Nessus vs Metasploit Comparison: How To Exploit Vulnerabilities Using These Powerful Tools

  The cybersecurity landscape demands sophisticated tools to identify and exploit vulnerabilities effectively, with Nessus vs Metasploit representing one of the most powerful combina

• AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5FgACc1YnLMguV-bW6VD4HjuTw-TAhreiQAkcGbFoeGKs-fuwP0tanwmLFWfcTMG3b51jbBw-XZKYKVU9xiqr9RO36SDybprjXdc37c8bfC3-PC-bGrv8

• Endpoint Security Firm Remedio Raises $65 Million in First Funding Round

  Bootstrapped endpoint security company Remedio, which until Monday was known as Gytpol, has announced raising $65 million. The Israeli company’s first funding round since inception

• AWSDoor – New Persistence Technique Allows Attackers to Hide Malware Within AWS Cloud Environment

  Attackers are increasingly leveraging sophisticated techniques to maintain long-term access in cloud environments, and a newly surfaced tool named AWSDoor is emerging as a major th

• ⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero-Days & More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQGU8nWSg7zq0wG41glLZ8H2sYvW1Lfjn7MWYom8PwNSgKS636xRqKVeDYzS2ELkuXA9PoMKHCIKHOUHjn8FFh-swI6xLbnVgzCgYYQnQyMPHb4vvl0dAS

• Apple Rolls Out iOS 26, macOS Tahoe 26 With Patches for Over 50 Vulnerabilities

  Apple on Monday announced the release of major iOS and macOS platform updates with fixes for a total of more than 50 vulnerabilities. iOS 26 and iPadOS 26 were released for the lat

• FTC Probes AI Chatbots Designed as “Companions” for Children’s Safety

  The U.S. Federal Trade Commission has opened a formal inquiry into AI chatbots that act like companions—designed to mimic emotions, build trust, and engage like friends or confidan

• Threat Actors Can Weaponize MCP Servers To Harvests Sensitive Data

  In recent months, threat actors have begun exploiting the Model Context Protocol (MCP)—a universal “plug-in bus” designed to streamline AI-assistant integrations—as a novel supply

• 6 Browser-Based Attacks Security Teams Need to Prepare For Right Now

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8j6UuGDasKOXnhRbp5vO-mJnsGuiMvtiCQCLBS8zaWLeLBK6pIjBZV-iZErZlWtUJwypAfaWqH6zNYdVPH1lcVHCJ0Yxgjr5vxyPgBAYgw4uWg21z1VNv

• Fraud Prevention Company SEON Raises $80 Million in Series C Funding

  Fraud prevention and AML compliance firm SEON today announced raising $80 million in Series C funding, which brings the total raised by the company to $187 million. The new investm

• CrowdStrike npm Packages Compromised in Ongoing Supply Chain Attack

  An ongoing supply chain attack has compromised multiple npm packages published by CrowdStrike, extending a malicious campaign known as the “Shai-Halud attack.” The incident, which

• Mustang Panda Deploys SnakeDisk USB Worm to Deliver Yokai Backdoor on Thailand IPs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuFHJMhcKrcm7rKKxumPi41kzINbFE63vmSz9Z01h47HyqaoqX2NhVX3FECyM63yiZOeLoeikkQcGPdYZQdHvSUZl3LGUc8fhhzYqFiYWJaunzL8jXP7of

• ASEAN Adopts 10-Year Action Plan to Combat Rising Cybercrime Threat

  Cybercrime and online scams have officially overtaken traditional threats as the primary regional security concern for the Association of Southeast Asian Nations (ASEAN). This ASEA

• ChatGPT’s Calendar Integration Can Be Exploited to Steal Emails

  A new ChatGPT calendar integration can be abused to execute an attacker’s commands, and researchers at AI security firm EdisonWatch have demonstrated the potential impact by showin

• WordPress Plugin Vulnerability Let Attackers Bypass Authentication via Social Login

  A critical authentication bypass vulnerability in the Case Theme User WordPress plugin has emerged as a significant security threat, allowing unauthenticated attackers to gain admi

• 40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSYOeydLAlQ9uG63pTINB3QdaSSEhATMNZfCUGatfAgVrEJImME3VxV7EVSABpR4mVnb4wDSo34sITiXidfobQvJENPJyUbTjkgkpgbBcrdvM4LInO2dUs

• Rowhammer Attack Demonstrated Against DDR5

  A group of security researchers from the ETH Zurich university and Google have demonstrated a practical Rowhammer attack against DDR5. Dubbed Phoenix and tracked as CVE-2025-6202,

• New APT28 Attack Via Signal Messenger Delivers BeardShell and Covenant Malware

  Late in the summer of 2025, cybersecurity researchers uncovered a sophisticated spearphishing campaign targeting Ukrainian military personnel via the Signal messaging platform. The

• CISA Warns of Attacks on DELMIA Manufacturing Software Vulnerability

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a manufacturing operations management software vulnerability to its Known Exploited Vulnerabilities (KEV)

• Phoenix RowHammer Attack Bypasses Advanced DDR5 Memory Protections in 109 Seconds

  RowHammer Attack A team of academics from ETH Zürich and Google has discovered a new variant of a RowHammer attack targeting Double Data Rate 5 (DDR5) memory chips from South Korea

• LG WebOS TV Vulnerability Let Attackers Bypass Authentication and Enable Full Device Takeover

  A critical vulnerability has been discovered in LG’s WebOS for smart TVs, allowing an attacker on the same local network to bypass authentication mechanisms and achieve full contro

• Neon Cyber Emerges From Stealth, Shining a Light Into the Browser

  Neon Cyber’s purpose is to move the focus of current cybersecurity from the infrastructure to the workforce. The company emerged from stealth, September 16, after raising seed fund

• CVE-2025-58434: Critical FlowiseAI Flaw Enables Full Account Takeover

  A severe security vulnerability has been discovered in FlowiseAI, an open-source AI workflow automation tool, exposing users to the risk of complete account compromise. Tracked as

• Securing the Agentic Era: Introducing Astrix's AI Agent Control Plane

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJZBPyq1KpNAqemN5ft7m7PHZepmRYr3Zx8NiGXnFLyR0NRpKr8lw7pG4-pJu9hf5qxcweGigxu0eAl38HBLWeaSh9lmlE-jjURjm8TPo2YCcotg-In4cz

• Threat Actors Could Misuse Code Assistant To Inject Backdoors and Generating Harmful Content

  Modern development workflows increasingly rely on AI-driven coding assistants to accelerate software delivery and improve code quality. However, recent research has illuminated a p

• Security Industry Skeptical of Scattered Spider-ShinyHunters Retirement Claims

  The notorious cybercrime groups Scattered Spider and ShinyHunters claim they are retiring, but the cybersecurity industry is skeptical and believes the hackers will continue to be

• China Imposes One-Hour Reporting Rule for Major Cybersecurity Incidents

  China is ramping up its cybersecurity enforcement with new regulations requiring network operators to report severe cybersecurity incidents within one hour. The rules, announced by

• Apple Backports Fix for CVE-2025-43300 Exploited in Sophisticated Spyware Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEtyFQN828b8Jd8BAe7AeIjwASwSU0cJMhSQifqgUA1UgTFwFg787bdpeJFxgHN3E859Hm8G2LwPkj3ss4B-dAKsBFlDoWzcihPScX3miO-Uv85ZROSQ0v

• Top 10 Best Privileged Access Management (PAM) Tools in 2025

  In today’s complex digital landscape, where data breaches and cyberattacks are a constant threat, securing privileged accounts is more critical than ever. Privileged Access Managem

• Ray Security Emerges From Stealth With $11M to Bring Real-Time, AI-Driven Data Protection

  Constant visibility and security of data with the right level of security to maintain safe operational use. Tel Aviv, Israel-based Ray Security emerged from stealth with $11 millio

• New FileFix Variant Delivers StealC Malware Through Multilingual Phishing Site

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIJow17BkBl1U26cANjTmkLEkeB4FnTr2Vn1iv43UGoL-igCpd8VFVnSUoz9XfxIFiaLWSRaCzQMcdHUM7ITYcheK7Mn54yeYHKCdQOJlu4aD66PVMsv-M

• New Infostealer Campaign Targets Popular Games, Pirated Software

  Cyble threat intelligence researchers have uncovered an infostealer campaign that spreads the Maranhão Stealer through social engineering websites claiming to offer pirated softwar

• RevengeHotels Leveraging AI To Attack Windows Users With VenomRAT

  RevengeHotels, a financially motivated threat group active since 2015, has escalated its operations against hospitality organizations by integrating large language model–generated

• Salesloft Drift Security Breach Expands: Dozens of Companies Confirm Exposure in OAuth-Based Cyberattack

  A Salesloft Drift cyberattack has compromised the Salesforce environments of numerous organizations, exposing customer data and credentials in a growing software supply chain incid

• Geordie Emerges From Stealth With $6.5M for AI Agent Security Platform

  Geordie emerged from stealth mode this week with $6.5 million in funding and a platform designed to help enterprises address the security risks associated with the use of agentic A

• New Linux Botnet Combines Cryptomining and DDoS Attacks

  Cyble threat intelligence researchers have identified a sophisticated Linux botnet built for cryptocurrency mining, remote command execution, and dozens of DDoS attack types. Cyble

• Jaguar Land Rover Admits Data Breach Caused by Recent Cyberattack

  Jaguar Land Rover (JLR) has admitted that the recent cyberattack, which caused factory shutdowns, also resulted in data being compromised. The incident came to light in early Septe

• Microsoft Patch Tuesday September 2025 Fixes Risky Kernel Flaws

  Three high-risk Windows kernel flaws were among the fixes included in Microsoft’s September 2025 Patch Tuesday updates released today. In all, the Patch Tuesday September 2025 upda

• NVIDIA NVDebug Tool Vulnerability Let Attackers Escalate Privileges

  NVIDIA has released a security update for its NVDebug tool to address three high-severity vulnerabilities that could allow an attacker to escalate privileges, execute code, and tam

• Remote CarPlay Hack Puts Drivers at Risk of Distraction and Surveillance

  Researchers have disclosed details of a remote CarPlay hack that can allow attackers to spy on drivers or distract them. Runtime application security firm Oligo earlier this year r

• Hackers Booked Very Little Profit with Widespread npm Supply Chain Attack

  A sophisticated npm supply chain attack that surfaced in late August targeted thousands of downstream projects by injecting malicious payloads into popular JavaScript libraries. In

• Adobe Issues Urgent Patch for ‘SessionReaper’ Vulnerability in Commerce and Magento

  Adobe has issued an urgent security advisory, specifically for CVE-2025-54236, also known as SessionReaper, affecting Adobe Commerce and Magento Open-Source platforms. This flaw ha

• Email Security Startup AegisAI Launches With $13 Million in Funding

  AI-native email security startup AegisAI on Wednesday launched with $13 million in seed funding from Accel and Foundation Capital. Founded by Cy Khormaee and Ryan Luo, former Googl

• Malicious Chrome Extension Attacking Users to Steal Meta Login Credentials

  A novel malicious Chrome extension has been uncovered targeting digital marketers by masquerading as a productivity tool for Meta ad campaigns. Dubbed “Madgicx Plus,” this extensio

• Apple Introduces Memory Integrity Enforcement in iPhone 17 to Fight Spyware Exploits

  Apple has introduced Memory Integrity Enforcement (MIE), a system-wide security feature designed to crush one of the most persistent threats to iPhone users—that of Spyware. The co

• AI Emerges as the Hope—and Risk—for Overloaded SOCs

  The problems faced by SOCs are well known, understood, and quantified – but not yet solved. SMEs get around 500 security alerts every day; larger enterprises receive nearer 3,000.

• New Attack Technique That Enables Attackers To Exfiltrate Git Credentials In Argocd

  A newly disclosed attack technique enables authenticated users within the popular GitOps tool ArgoCD to exfiltrate powerful Git credentials. The method, discovered by the cybersecu

• CHILLYHELL macOS Backdoor and ZynorRAT RAT Threaten macOS, Windows, and Linux Systems

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgMM3XRawiIkYgH3z6CTwTS7PLhKcxGN-Zw35fC5FXnQSEAu34H6CEE6Zy6D6Rqqw9A9qo13GjeKJnsMCL8jQwCCOlosXX4R07R3lfsY6QB1tyto8qnLYG7

• Palo Alto Networks User-ID Credential Agent Vulnerability Exposes password In Cleartext

  A newly disclosed vulnerability in Palo Alto Networks’ User-ID Credential Agent for Windows, identified as CVE-2025-4235, could expose a service account’s password in cleartext und

• Senator Urges FTC Probe of Microsoft Over Security Failures

  US Senator Ron Wyden, D-Ore., on Wednesday sent a letter to the Federal Trade Commission (FTC), urging it to investigate Microsoft’s cybersecurity practices and hold it accountable

• US Charges Alleged Ransomware Mastermind as Europe Lists Him on ‘Most Wanted’

  The U.S. Department of Justice has unsealed charges against Ukrainian national for administering the LockerGoga, MegaCortex, and Nefilim ransomware operations, while the Europol ha

• Chinese APT Deploys EggStreme Fileless Malware to Breach Philippine Military Systems

  Chinese APT An advanced persistent threat (APT) group from China has been attributed to the compromise of a Philippines-based military company using a previously undocumented filel

• ChillyHell macOS Malware Profiles Compromised Machines and Maintain Persistence with 3 Methods

  ChillyHell first surfaced on public malware repositories in early May 2025, although its developer-signed notarization dates back to 2021. This modular backdoor has eluded detectio

• 100,000 Impacted by Cornwell Quality Tools Data Breach 

  American mobile tools manufacturer Cornwell Quality Tools has informed authorities that a data breach discovered late last year impacts more than 100,000 people. According to notif

• AsyncRAT Exploits ConnectWise ScreenConnect to Steal Credentials and Crypto

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjP7C2frdf5WmypvzDFcoIflzvcWCb6ZKOSHpC64B893uJaqeHBs40SZBkJVQze7dDx5I5UU16E7yf4KE0ZGxKpm6ccIqhpa2kBgHm6myP8aDFo1ikagWM1

• Australia Warns of Ransomware Attacks Exploiting SonicWall VPN Flaw CVE-2024-40766

  The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has issued an urgent alert regarding active exploitation of a critical security flaw identified a

• ZynorRAT Attacking Windows and Linux Systems to Gain Remote Access

  A sophisticated new remote access trojan named ZynorRAT has emerged as a cross-platform threat, targeting both Windows and Linux systems through an innovative Telegram-based comman

• UAE’s K2 Think AI Jailbroken Through Its Own Transparency Features

  K2 Think, the recently launched AI system from the United Arab Emirates built for advanced reasoning, has been jailbroken by exploiting the quality of its own transparency. Transpa

• Fake Madgicx Plus and SocialMetrics Extensions Are Hijacking Meta Business Accounts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2ZkDGIehpXH948IGTxMRsWIkGYEVs1os4i3Iz1dafJzvP7XspDt0F852C4WJVx39BSylL0mEUki4nWpbq3HDGhHg1efM2xKtSgdbEYW3SMMEshq1R54Q7

• FTC Urged to Investigate Microsoft on Outdated RC4 Encryption and Kerberoasting Flaws

  A fresh firestorm has erupted over Microsoft’s handling of cybersecurity risks, with U.S. Senator Ron Wyden (D-OR) calling on the Federal Trade Commission (FTC) to investigate the

• Angular SSR Vulnerability Lets Attackers Access Sensitive Data

  A significant vulnerability has been discovered in Angular’s server-side rendering (SSR) implementation that could allow attackers to access sensitive user data. The flaw, rooted i

• Akira Ransomware Attacks Fuel Uptick in Exploitation of SonicWall Flaw

  The Akira ransomware group has been exploiting a year-old vulnerability in SonicWall firewalls in a fresh round of attacks, potentially combining three attack vectors for initial a

• SonicWall SSL VPN Flaw and Misconfigurations Actively Exploited by Akira Ransomware Hackers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgc5yh-m-Y9Szf2h4n8OzL0v0AOMbd44YsBwjNGUTP3hOZR-sHS1e01QvPYzOVUk-xicRfxlRYjogzNJC5mN-wEMDrpCUKPFmi6WswqCtFOgBRtqj30F7ic

• LNER Train Passengers Data Accessed In Cyber Attack

  London North Eastern Railway (LNER) has confirmed that passenger data was accessed following a cyber attack on one of its third-party suppliers. The breach involved unauthorized ac

• SAP Issues Critical Security Patch for NetWeaver and Other Products, Warns of CVE-2025-42944

  SAP has released a new security update addressing a broad range of vulnerabilities across its product ecosystem. Among the most alarming is a critical vulnerability identified in S

• Critical Chrome Vulnerability Earns Researcher $43,000

  Researchers have earned significant rewards from Google for reporting two potentially serious vulnerabilities found in the Chrome web browser. Google this week rolled out a Chrome

• Cracking the Boardroom Code: Helping CISOs Speak the Language of Business

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibkU2rifwbezBnU4fS4oICkZ1TrSh6LjAuNTGxkBoGz5T8xvXMibiwNK4Y3sOQHXrWTa9UDLdDeVJ-aTsXCUdDzjXxAsAO-3RBsrNQiimkg6qsJmJSLrgL

• CoreDNS Vulnerability Let Attackers Pin DNS Cache And Deny Service Updates

  A significant vulnerability has been discovered in CoreDNS that could allow attackers to disrupt services by pinning DNS cache entries, effectively creating a denial of service for

• Exposed Docker APIs Likely Exploited to Build Botnet

  Threat actors are exploiting exposed Docker APIs to deploy malware and cryptocurrency miners and potentially create a new botnet, Akamai’s security researchers warn. Initially deta

• Adobe Patches Critical ColdFusion and Commerce Vulnerabilities

  Adobe has patched nearly two dozen vulnerabilities across nine of its products with its September 2025 Patch Tuesday updates, including critical flaws in ColdFusion and Commerce. T

• Workday Confirms Data Breach – Hackers Accessed Customers Data and Case Information

  Workday has confirmed it suffered a data breach after a security incident involving a third-party application that compromised customer information. The breach originated from Sale

• Microsoft Patches 86 Vulnerabilities

  Microsoft’s September 2025 Patch Tuesday updates resolve a total of 86 vulnerabilities across Windows and other products. The tech giant’s release notes indicate that none of the s

• Microsoft To Introduce New AI Actions In Windows File Explorer

  Microsoft is set to enhance the Windows user experience by integrating new AI-powered capabilities directly into File Explorer. This upcoming feature, named “AI actions in File Exp

• Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihdRbIp3q2q7MpV9hjqNW0Ngask5kqyovpxQFae7nJiGapCmRMCHnLtmNNdlUNzc5lPBzbcvCmpnTU5xtoqqzJD7uJUC7J4ip0IVVbJd6bmXvC4NG9Ro0P

• ICS Patch Tuesday: Rockwell Automation Leads With 8 Security Advisories

  Several industrial control systems (ICS) giants have published new security advisories this Patch Tuesday, including Rockwell Automation, Siemens, Schneider Electric, and Phoenix C

• Critical SAP NetWeaver Vulnerability Let Attackers Execute Arbitrary Code And Compromise System

  A critical vulnerability CVE-2025-42922 has been discovered in SAP NetWeaver that allows an authenticated, low-privileged attacker to execute arbitrary code and achieve a full syst

• SAP Patches Critical NetWeaver (CVSS Up to 10.0) and High-Severity S/4HANA Flaws

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGaoGwjyfDok9cHEwGQ40d6-OSNfEaW5LstAMBMLw8XhyBKxBaU8x8jQUOGGtKtCi-7J4Ac3F0OZlw71REn2r-BNSA6mL3DqJTaxDYoxpn-mayJQmr18zo

• Highly Popular NPM Packages Poisoned in New Supply Chain Attack

  Threat actors injected malicious code into multiple highly popular NPM packages after their maintainers fell for a well-crafted phishing email. The attack targeted several NPM pack

• Windows BitLocker Vulnerability Let Attackers Elevate Privileges

  Microsoft has addressed two significant elevation of privilege vulnerabilities affecting its Windows BitLocker encryption feature. The flaws, tracked as CVE-2025-54911 and CVE-2025

• Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQeAkLATkwduEXQR6N03YhczYEDoM5LSI3oIWDLa5J4GCfqtnwoS4zPT5JVJKbdXtpggScqa-ZQQlqu2UMnBAIL2sQ4cL5-osG40xRjvwBKul7Lyb3JO4A

• Sophos Wireless Access Points Vulnerability Let Attackers Bypass Authentication

  Sophos has resolved an authentication bypass vulnerability in its AP6 Series Wireless Access Points that could allow attackers to gain administrator-level privileges. The company d

• US Offers $10 Million Reward for Ukrainian Ransomware Operator

  The US on Tuesday announced a reward of up to $10 million for information on a Ukrainian national indicted for his role in administering the LockerGoga, MegaCortex, and Nefilim ran

• Watch Out for Salty2FA: New Phishing Kit Targeting US and EU Enterprises

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJi9QFUSwlPKRn3FHU83en34RJb1N5LLHP-KmyBaJnCNWXQr85kpCkIEjWimyZeJzOqqUHyL7D-WFwfKs1JChzylQ4OvyOZVLYyYwUlX9KreSFkMSxEOEB

• HackerOne Confirms Data Breach – Hackers Gained Unauthorized Access To Salesforce Instance

  HackerOne has confirmed it was among the companies affected by a recent data breach that provided unauthorized access to its Salesforce instance. The access was gained through a co

• Fortinet, Ivanti, Nvidia Release Security Updates

  Fortinet, Ivanti, and Nvidia on Tuesday announced security updates that address over a dozen high- and medium-severity vulnerabilities across their product portfolios. Ivanti resol

• The Time-Saving Guide for Service Providers: Automating vCISO and Compliance Services

  Automating vCISO and Compliance Services Introduction ------------------------------ Managed service providers (MSPs) and managed security service providers (MSSPs) are under incre

• Critical Microsoft Office Vulnerabilities Let Attackers Execute Malicious Code

  Microsoft has released patches for two significant vulnerabilities in Microsoft Office that could allow attackers to execute malicious code on affected systems. The flaws, tracked

• Hush Security Emerges Stealth to Eliminate Credential Threats With No-Secrets Platform

  Hush Security has emerged from stealth with $11 million seed funding, and a machine access platform that eliminates secrets. The seed funding is led by Battery Ventures and YL Vent

• China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations

  China-Linked APT41 Hackers The House Select Committee on China has formally issued an advisory warning of an "ongoing" series of highly targeted cyber espionage campaigns linked to

• Microsoft Warns of Active Directory Domain Services Vulnerability, Let Attackers Escalate Privileges

  Microsoft has issued an updated warning for a critical security vulnerability in Active Directory Domain Services, tracked as CVE-2025-21293. This flaw could permit an attacker who

• Apple Unveils iPhone Memory Protections to Combat Sophisticated Attacks

  Apple on Tuesday unveiled its new iPhone 17 and iPhone Air smartphones, which include a new memory protection feature to safeguard devices against sophisticated spyware attacks. Th

• Apple iPhone Air and iPhone 17 Feature A19 Chips With Spyware-Resistant Memory Safety

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIc1QgZZdOOu9jQtxubJBFHmvw4qLx40ihiXPLh2OxNaah10hDEBugyyYCv1sjQKw8k-VKw6wGRWPZhclMXqjT2WDKUghP8iKJqAmjM2ytlLCPgtWSDONf

• Google Drive Desktop for Windows Vulnerability Grants Full Access to Another User’s Drive

  A security vulnerability has been found in the Google Drive Desktop application for Windows. It allows a logged-in user on a shared machine to access another user’s Drive files com

• Red Access Raises $17 Million for Agentless Security Platform

  Cybersecurity startup Red Access today announced raising $17 million in a Series A funding round that brings the total raised by the company to $23 million. The new investment roun

• Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilmgWyVL7x8NEETgxUe-34xaBx6QnhRVofPlzEF90k9qxt27B7AqsbilACEBDjiAjpJBmfSu7DTNhlyYxFRHtO9YEwuN1azCT1x8kvSiv7f95w7Pv1X6H8

• Top 10 Best Mobile Application Penetration Testing Companies in 2025

  A high-quality mobile application penetration testing company is essential for businesses that want to safeguard their digital assets and user data. These specialized firms employ

• Salesloft GitHub Account Compromised Months Before Salesforce Attack

  Threat actors had access to Salesloft’s GitHub account between March and June 2025 and performed reconnaissance in preparation for the widespread Salesforce-Salesloft data theft ca

• SpamGPT – AI-powered Attack Tool Used By Hackers For Massive Phishing Attack

  A sophisticated new cybercrime toolkit named SpamGPT is enabling hackers to launch massive and highly effective phishing campaigns by combining artificial intelligence with the cap

• GPUGate Malware Uses Google Ads and Fake GitHub Commits to Target IT Firms

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUXOhpHKSSR7vtDVD4yKJJpzY658Hy2Cl-mVvMms7FKLkJRhl6KZ3701jdEINXYwIbRgVwQxqQxS2NKKI8V8KoQkh24EjUQuL3zxy3gFKWTWcx-O4fM9WS

• GitHub Workflows Attack Affects Hundreds of Repos, Thousands of Secrets

  A supply chain attack involving malicious GitHub Action workflows has impacted hundreds of repositories and thousands of secrets, developer security firm GitGuardian revealed on Fr

• Elastic Security Incident – Hackers Accessed Email Account Contains Valid Credentials

  Elastic has disclosed a security incident stemming from a third-party breach at Salesloft Drift, which resulted in unauthorized access to an internal email account containing valid

• GitHub Account Compromise Led to Salesloft Drift Breach Affecting 22 Companies

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhBbiqxBO337yWI2JoE0RHA0r-uvScXk-wvnLGrncz0eMtHij2MOijjXGQY9Q5Xi5QrpZVHmNJr2T882tVoT5AAMz2yXAT1ujFMoRKdhkyjWPzQH2I-2OI

• Chinese Salt Typhoon and UNC4841 Hackers Teamed Up to Attack Government and Corporate Infrastructure

  Cybersecurity researchers began tracking a sophisticated campaign in the closing months of 2024, targeting both government and corporate networks across multiple continents. The th

• PromptLock Only PoC, but AI-Powered Ransomware Is Real

  AI-powered ransomware is here, although it is not the recently discovered PromptLock, which proves to be a prototype created by academics at the New York University Tandon School o

• 45 Previously Unreported Domains Expose Longstanding Salt Typhoon Cyber Espionage

  Salt Typhoon Cyber Espionage Threat hunters have discovered a set of previously unreported domains, some going back to May 2020, that are associated with China-linked threat actors

• New APT37 Attacking Windows Machines With New Rust and Python Based Malware

  APT37, the North Korean-aligned threat actor also known as ScarCruft, Ruby Sleet, and Velvet Chollima, has expanded its arsenal with sophisticated new malware targeting Windows sys

• Chinese Spies Impersonated US Lawmaker to Deliver Malware to Trade Groups: Report 

  Chinese hackers are believed to be behind a recent attempt to spy on trade groups and other organizations ahead of US-China trade talks, the Wall Street Journal reported. The publi

• 20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgtemm9XFX7C2s0emclL3-7RrQ5wLlQ2ltlzDI0sOVKMC8NirJxT9C9yMnNO0DrcwB6yDwsArFXsKik-k9b1FvWeelLcN3rwubVJnllQwDUwoEH4WkTuUOi

• Magento and Adobe SessionReaper Vulnerability Exposes Thousands Of Online Stores to Attacks

  Adobe has issued an emergency security patch for a critical vulnerability in its Magento and Adobe Commerce platforms, dubbed “SessionReaper”. The vulnerability is considered one o

• SentinelOne to Acquire Observo AI in $225 Million Deal

  SentinelOne on Monday announced plans to acquire Observo AI, a California-based company that has developed an AI-native data pipeline platform for DevOps and security. SentinelOne,

• TOR-Based Cryptojacking Attack Expands Through Misconfigured Docker APIs

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTyVEL-sVGK04WfS6I9fiQcWLnTLiP7kInJxyq-ngjBUXeaVY-5Qz28Ry2RAYdhfxpYZQj77Y6QM5k4MLyWLd7MB8fI8rnJ-9m6AhwT8DymYkZvNWxX3TG

• Roblox Turns to AI-Based Age Estimation for All Communication-Ready Users

  Roblox is rolling out a bold move to bolster child protection on its platform. In a Safety + Civility update, Chief Safety Officer Matt Kaufman announced that, by the end of 2025,

• MostereRAT Attacking Windows Systems With AnyDesk/TightVNC to Enable Remote Access

  Security researchers have uncovered a sophisticated campaign in recent weeks leveraging a novel Remote Access Trojan (RAT) dubbed MostereRAT that targets Windows systems by deployi

• Plex Urges Password Resets Following Data Breach

  Popular streaming platform Plex on Monday issued an urgent warning that user information has been compromised in a data breach. “An unauthorized third party accessed a limited subs

• How Leading CISOs are Getting Budget Approval

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNemBGo1w1Iji50azIFpwJiworVCvUGt9bsnZtEyj7yIXNBa-oEOH2mVDfCnXrzC8D-qghxGax7BOB1ILh27DQb6ZLxD5oyiB9m2-uDFDv-rJSysIU3t6X

• SAP Security Patch Day September 2025 – 21 Vulnerabilities and 4 Critical One’s Patched

  As part of its scheduled security maintenance, SAP released its September 2025 Patch Day notes, addressing a total of 21 new vulnerabilities and providing updates to four previousl

• LockBit Attempts Comeback with LockBit 5.0 Ransomware Release

  LockBit was once the most feared ransomware group until global law enforcement action sent the group into decline last year. Now the threat group hopes to mount a comeback with Loc

• Mitsubishi Electric to Acquire Nozomi Networks for Nearly $1 Billion

  Industrial and technology giant Mitsubishi Electric has signed a definitive agreement to acquire OT and IoT cybersecurity company Nozomi Networks in a deal that values the industri

• From MostereRAT to ClickFix: New Malware Campaigns Highlight Rising AI and Phishing Risks

  Rising AI and Phishing Risks Cybersecurity researchers have disclosed details of a phishing campaign that delivers a stealthy banking malware-turned-remote access trojan called Mos

• New Malware Attack Leveraging Exposed Docker APIs to Maintain Persistent SSH Root Access

  A sophisticated malware strain targeting exposed Docker APIs has emerged with enhanced infection capabilities that go beyond traditional cryptomining operations. The threat, discov

• Threat Actor Connected to Play, RansomHub and DragonForce Ransomware Operations

  Analysis of the malware and tools used in an intrusion links a threat actor to three different ransomware-as-a-service (RaaS) operations, threat intelligence firm The DFIR Report s

• [Webinar] Shadow AI Agents Multiply Fast — Learn How to Detect and Control Them

  [](https://thehacker.news/shadow-ai-agents?source=article) ⚠️ One click is all it takes. An engineer spins up an "experimental" AI Agent to test a workflow. A business unit connect

• Top 10 Best External Penetration Testing Companies in 2025

  External penetration testing is a crucial practice for any organization aiming to validate its security posture against real-world threats. In 2025, with the proliferation of cloud

• Jaguar Land Rover Cyberattack Forces Extended Factory Shutdown and Disrupts Global Operations

  Jaguar Land Rover (JLR) has been forced to extend the shutdown of its UK manufacturing operations following a cyberattack on August 31. The Jaguar Land Rover cyberattack has halted

• 160,000 Impacted by Wayne Memorial Hospital Data Breach

  Georgia community hospital Wayne Memorial Hospital (WMH) is notifying over 160,000 individuals that their personal information was stolen in a May 2024 data breach. The incident, t

• RatOn Android Malware Detected With NFC Relay and ATS Banking Fraud Capabilities

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkZHfAJmYzPx2qkJlRUBufh2MXQJQVtbXMq4BUAOHNAU0O3SXB0AuSwDA3S5aqjD0aLf8YQfBm-0w-hF2unN2X6WizCJpqkIAGWhV9mohSPJo82zkZ0frL

• Jaguar Land Rover Extends Factory Shutdown Following Cyber Attack

  Jaguar Land Rover (JLR) has extended the shutdown of its UK factories until at least Wednesday, more than a week after a significant cyber attack crippled its operations. The produ

• Australian Authorities Uncovered Activities and Careers of Ransomware Criminal Groups

  Ransomware has emerged as one of the most devastating cybercrime threats in the contemporary digital landscape, with criminal organizations operating sophisticated billion-dollar e

• Atomic Stealer Disguised as Cracked Software Attacking macOS Users

  A sophisticated malware campaign targeting macOS users has emerged, exploiting the widespread desire for free software to deliver the notorious Atomic macOS Stealer (AMOS). This in

• U.S. Authorities Investigating Malicious Email Targeting Trade Talks with China

  U.S. federal authorities have launched an investigation into a sophisticated malware campaign that targeted sensitive trade negotiations between Washington and Beijing. The attack,

• How Microsoft Azure Storage Logs Aid Forensics Following a Security Breach

  After a security breach, forensic investigators work quickly to follow the attacker’s trail. Security experts have analyzed this situation and found that a key source of evidence i

• Qantas Airways Slashes CEO Bonus After Cyberattack Exposes 5.7 Million Customers

  Australia’s Qantas Airways has announced a cut in short-term incentives for its Group CEO and executive team following a major Qantas July cyberattack in that exposed the personal

• Apache Jackrabbit Exposes Systems To Arbitrary Code Execution Attacks

  An important security vulnerability has been discovered in Apache Jackrabbit, a popular open-source content repository used in enterprise content management systems and web applica

• UAE Cyber Security Council Flags 70% Smart Home Devices as Vulnerable

  The UAE Cyber Security Council (CSC) has issued a stark warning that 70 per cent of smart home devices are vulnerable to cyberattacks if not properly secured. The council emphasize

• Microsoft Azure Cloud Disrupted by Undersea Cable Cuts in Red Sea

  Microsoft’s Azure cloud platform is facing significant disruptions after multiple undersea fiber optic cables were severed in the Red Sea. The US technology giant confirmed that us

• Cybersecurity M&A Roundup: 27 Deals Announced in August 2025

  Twenty-seven cybersecurity merger and acquisition (M&A) deals were announced in August 2025, a significant drop compared to previous months. An analysis conducted by SecurityWeek s

• Argo CD Security Flaw Rated 9.8 Leaves GitOps Repositories Exposed

  A security flaw in Argo CD, the popular open-source GitOps tool for Kubernetes, has been targeted at the DevOps and cloud-native communities. Tracked as CVE-2025-55190, the vulnera

• Salesloft Drift Cyberattack Linked to GitHub Compromise and OAuth Token Theft

  A sophisticated supply-chain attack that impacted over 700 organizations, including major cybersecurity firms, has been traced back to a compromise of Salesloft’s GitHub account th

• Fintech Firm Wealthsimple Says Supply Chain Attack Resulted in Data Breach

  Canadian online investment company Wealthsimple on Friday disclosed a data breach impacting the personal information of some customers. Wealthsimple said the incident, discovered o

• PoC Exploit Released for ImageMagick RCE Vulnerability – Update Now

  A proof-of-concept (PoC) exploit has been released for a critical remote code execution (RCE) vulnerability in ImageMagick 7’s MagickCore subsystem, specifically affecting the blob

• Chinese Hackers Impersonate U.S. Congressman in Malware Sting on Trade Stakeholders: Report

  Chinese hackers, allegedly linked to the state, attempted to infiltrate the U.S. networks during sensitive trade discussions earlier this year by impersonating a sitting congressma

• Over 6,700 Private Repositories Made Public in Nx Supply Chain Attack

  Hackers used the secrets stolen in the recent Nx supply chain attack to make public over 6,700 private repositories, cybersecurity firm Wiz says. As part of the attack, dubbed s1ng

• You Didn’t Get Phished — You Onboarded the Attacker

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvrKi92x2KwHCIhlL3Cu2sCldMeHklKtE5MR78QPuTuEJhF3g62LhhCDLzIkwH6oqnXuTQiLfQHi3Xw-jYLYemnXWlQsgsm0XfXOPh2coRauFttZ7iFa6E

• PgAdmin Vulnerability Lets Attackers Gain Unauthorised Account Access

  A significant security flaw has been discovered in pgAdmin, the widely used open-source administration and development platform for PostgreSQL databases. The vulnerability, tracked

• Pakistan Launches Probe After Massive SIM Data Leak Hits Millions

  The Pakistani government has launched an urgent investigation following reports of a massive data leak involving SIM holders’ personal information, including that of Interior Minis

• ⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgw5xV5VMsK4YddXNcb0z2WiV5AFNohmaJdigptHtXj4NeaR1DnhyM1VVo-uKIdD2F5xbndGfNheC8zeuY7PKeFSuBvqOni6DAA8Z5WC2Ug3K-ullIQROxJ

• Researchers Bypassed Web Application Firewall With JS Injection with Parameter Pollution

  Cybersecurity researchers have demonstrated a sophisticated technique for bypassing Web Application Firewalls (WAFs) using JavaScript injection combined with HTTP parameter polluti

• Top 10 Best AI Penetration Testing Companies in 2025

  AI is no longer just a buzzword; it’s a fundamental part of business operations, from customer service chatbots to complex financial models. However, this adoption has created a ne

• Noisy Bear Targets Kazakhstan Energy Sector With BarrelFire Phishing Campaign

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJwP01hvXlLBWyWmZQ3T2ETpY2oqabj5DKEs-OfHlaotHz6BrQvUnkgc8zQSHkXdMHhveYv9X2WajcLSZn6SWlnjRrgj1yVNx4uIDXz03X9d5qgNbDBcoG

• 10 Best Cloud Penetration Testing Companies in 2025

  As more businesses migrate their infrastructure to the cloud, cloud penetration testing has become a critical service. Unlike traditional network tests, cloud pentesting focuses on

• New Malware Leverages Windows Character Map to Bypass Windows Defender and Mine Cryptocurrency for The Attackers

  A recently discovered strain of cryptomining malware has captured the attention of security teams worldwide by abusing the built-in Windows Character Map application as an executio

• Wealthsimple Data Breach Exposes Personal Information of Some Users

  Canadian fintech giant Wealthsimple announced today that it has suffered a data breach, resulting in the unauthorized access of personal information belonging to a small fraction o

• Threats Actors Weaponize ScreenConnect Installers to Gain Initial Access to Organizations

  A sophisticated cyber campaign has emerged targeting U.S.-based organizations through trojanized ConnectWise ScreenConnect installers, marking a significant evolution in remote mon

• TAG-150 Hackers Deploying Self-Developed Malware Families to Attack Organizations

  A sophisticated new threat actor designated TAG-150 has emerged as a significant cybersecurity concern, demonstrating rapid development capabilities and technical sophistication in

• SafePay Ransomware Claiming Attacks Over 73 Victim Organizations in a Single Month

  A new ransomware threat has emerged as one of 2025’s most prolific cybercriminal operations, with SafePay ransomware claiming attacks against 73 victim organizations in June alone,

• 143,000 Malware Files Attacked Android and iOS Device Users in Q2 2025

  Cybercriminals unleashed a massive wave of mobile malware attacks during the second quarter of 2025, with security researchers detecting nearly 143,000 malicious installation packa

• New Report Claims Microsoft Used China-Based Engineers For SharePoint Support and Bug Fixing

  A recent investigation has revealed that Microsoft employed China-based engineers to maintain and support SharePoint software, the same collaboration platform that was recently com

• TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjv0-56UW-EiEFHgxdX3jsH3G67Xg-SIgNWs9l0x044kYufHGm3xQNVJ4kc1GyXsyCWeDe4YCQdfV8aTzkYqWwq0k9-prUZwNrP1g7uvV4gxsTWWXGEGraE

• Kali Linux vs Parrot OS – Which Penetration Testing Platform is Most Suitable for Cybersecurity Professionals?

  Penetration testing and ethical hacking have been dominated by specialized Linux distributions designed to provide security professionals with comprehensive toolsets for vulnerabil

• CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation

  Critical Sitecore Vulnerability Under Active Exploitation Federal Civilian Executive Branch (FCEB) agencies are being advised to update their Sitecore instances by September 25, 20

• “GPUGate” Malware Abuses Google Ads and GitHub to Deliver Advanced Malware Payload

  A sophisticated malware campaign, dubbed “GPUGate,” abuses Google Ads and GitHub’s repository structure to trick users into downloading malicious software. The Arctic Wolf Cybersec

• How to Close the AI Governance Gap in Software Development

  Thanks to security teams improving exponentially at protecting networks, cyber criminals are increasingly targeting vulnerabilities in software. And, due to the near-ubiquitous dep

• Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFSJzLL1pc8quLfhY-XvdCTUHE211jQksLVgyJf3avkmDP1YU0kIMXpWhiw052Me82v6eQVpV3Q1-QNI5pUGLGrMal30FuYY2ySGimCMNU-JFOB47n3rFN

• Critical Argo CD API Vulnerability Exposes Repository Credentials

  A critical vulnerability has been discovered in Argo CD that allows API tokens with limited permissions to access sensitive repository credentials. The flaw in the project details

• Academics Build AI-Powered Android Vulnerability Discovery and Validation Tool

  Two academic researchers from Nanjing University and the University of Sydney have created a framework that relies on AI for the discovery and validation of vulnerabilities in Andr

• North Korean Threat Actors Reveal Their Tactics in Replacing Infrastructure With New Assets

  Over the past year, cybersecurity researchers have observed a surge in activity from North Korean threat actors leveraging military-grade social engineering techniques to target pr

• Black Hat USA 2025 CISO Podcast Series Episode 5 Out Now

  The Cyber Express, in collaboration with Suraksha Catalyst, has officially released Episode 5 of the Black Hat USA 2025 CISO Podcast Series. The series, which brings together globa

• Chess.com Confirms Data Breach Exposing Information of 4,541 Users

  Chess.com, one of the world’s largest online platforms for playing chess, has disclosed a data breach affecting 4,541 people, including residents of Maine and Vermont. The company

• 880,000 Texans Affected in PowerSchool Data Breach; Attorney General Launches Legal Action

  Texas Attorney General Ken Paxton has filed a lawsuit against PowerSchool, a California-based education technology provider. Lawsuit is filed over a massive PowerSchool data breach

• Czechia Warns of Chinese Data Transfers and Remote Administration for Espionage

  Czechia’s national cybersecurity watchdog has issued a warning about foreign cyber operations, focussed on Chinese data transfers and remote administration, urging both government

• Hackers Leverage Raw Disk Reads to Bypass EDR Solutions and Access Highly Sensitive Files

  A new technique that allows attackers to read highly sensitive files on Windows systems, bypassing many of the modern security tools designed to prevent such breaches. A report fro

• Hackers Use AI Platforms to Steal Microsoft 365 Credentials in Phishing Campaign

  Cybercriminals are increasingly exploiting the trust organizations place in artificial intelligence platforms to conduct sophisticated phishing attacks, according to a new report f

• Recent SAP S/4HANA Vulnerability Exploited in Attacks

  A recently patched SAP S/4HANA vulnerability tracked as CVE-2025-42957 is being exploited in the wild, SAP security solutions provider SecurityBridge warned on Thursday. The vulner

• New NightshadeC2 Botnet Uses ‘UAC Prompt Bombing’ to Bypass Windows Defender Protections

  Security teams began observing a novel botnet strain slipping beneath the radar of standard Windows Defender defenses in early August 2025. Dubbed NightshadeC2, this malware family

• More Cybersecurity Firms Hit by Salesforce-Salesloft Drift Breach

  Cybersecurity firms Proofpoint, SpyCloud, Tanium, and Tenable have confirmed that information in their Salesforce instances was compromised as part of the recent Salesforce–Saleslo

• Hackers Leverages Google Calendar APIs With Serverless MeetC2 Communication Framework

  Cybersecurity researchers have identified a sophisticated new command-and-control framework that exploits legitimate Google Calendar APIs to establish covert communication channels

• North Korean Hackers Targeted Hundreds in Fake Job Interview Attacks

  At least 230 individuals were targeted by North Korean hackers in fake cryptocurrency job interview attacks earlier this year, SentinelOne and Validin report. In continuation of th

• Critical 0-Click Vulnerability Enables Attackers to Takeover Email Access Using Punycode

  A critical, zero-click vulnerability that allows attackers to hijack online accounts by exploiting how web applications handle international email addresses. The flaw, rooted in a

• CISA Warns of Android 0-Day Use-After-Free Vulnerability Exploited in Attacks

  CISA has issued an urgent alert regarding a zero-day vulnerability in the Android operating system that is being actively exploited in real-world attacks. The vulnerability, identi

• In Other News: Scammers Abuse Grok, US Manufacturing Attacks, Gmail Security Claims Debunked

  SecurityWeek’s cybersecurity news roundup provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a valuable summary of stories tha

• Streameast Piracy Network Dismantled After Global Enforcement Operation

  In one of the international enforcement actions, the Alliance for Creativity and Entertainment (ACE), working alongside Egyptian authorities, has shut down Streameast, one of the w

• Automation Is Redefining Pentest Delivery

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEii-WzxQ4Ut1b0LMENz7asr8NGKrBJGwcru5KVcRGzT97ygdvBCgpGtz-w0L-qDfF3ls0oytm8NFWjMPIbgjkkXmiftjvYjLBS82TA3qkALSDVOP88OQNPH

• Critical SAP S/4HANA Vulnerability Actively Exploited to Fully Compromise Your SAP System

  A critical vulnerability in SAP S/4HANA is being actively exploited in the wild, allowing attackers with low-level user access to gain complete control over affected systems. The v

• FireCompass Raises $20 Million for Offensive Security Platform

  AI-powered automated penetration testing and red teaming startup FireCompass has announced raising $20 million in a strategic funding round that brings the total raised by the comp

• DOJ Moves to Seize $848K in Tether Linked to Crypto Confidence Scams

  The U.S. Department of Justice has initiated a civil forfeiture action targeting $848,247 in Tether (USDT), suspected to be proceeds from elaborate confidence scams that defrauded

• SAP S/4HANA Critical Vulnerability CVE-2025-42957 Exploited in the Wild

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgQRpzI20Cx676CmqKhngncyy9xbJzS5rTfCpWJf7l8VyWqb2fA1YDTKmrIoO5yxnzD2o341GXb3PCquwqOykEYm6p-LRTEjsNs7Scgww2nM5TW6NX35Eq

• 10 Best Internal Network Penetration Testing Companies in 2025

  In 2025, internal network penetration testing is more crucial than ever. While external defenses are often the focus, a single compromised credential or an employee falling for a s

• Sendmarc appoints Rob Bowker as North American Region Lead

  Wilmington, United States, September4th, 2025, CyberNewsWire: Veteran email security leader to expand MSP and VAR partnerships and accelerate DMARC adoption. Sendmarc today announc

• NoisyBear Weaponizing ZIP Files to PowerShell Loaders and Exfiltrate Sensitive Data

  A sophisticated threat actor known as NoisyBear has emerged as a significant concern for Kazakhstan’s energy sector, employing advanced tactics to infiltrate critical infrastructur

• Bridgestone Confirms Cyberattack Impacts Manufacturing Facilities

  Tire manufacturing giant Bridgestone Americas has confirmed it is responding to a cyberattack that disrupted operations at some of its manufacturing facilities this week. In a stat

• Tycoon Phishing Kit Employs New Technique to Hide Malicious Links

  Cybercriminals are deploying increasingly sophisticated methods to bypass security systems, with the latest threat emerging from the advanced Tycoon phishing-as-a-service kit. This

• Chess.com Data Breach – Hackers Breached External System and Gained Internal Access

  Online chess giant Chess.com has disclosed a data breach that compromised the personal information of 4,541 individuals, according to a filing with the Maine Attorney General’s Off

• Hackers Scanning Cisco ASA Devices to Exploit Vulnerabilities from 25,000 IPs

  An unprecedented surge in malicious scanning activity targeting Cisco Adaptive Security Appliances (ASAs) occurred in late August 2025, with over 25,000 unique IP addresses partici

• GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJ9IxdheAfdLi4r8NNZGNOTpgrIWFuvh0Gh-rLJEl-1XhzvEtJ2kvybXam97uORiVJCETWwLeu8LiDvvEOvyJ3ifKElUuDcCEhEZMsH1vsIULD7OFKUPFw

• Windows Heap-based Buffer Overflow Vulnerability Let Attackers Elevate Privileges

  A recently patched vulnerability in a core Windows driver could allow a local attacker to execute code with the highest system privileges, effectively taking full control of a targ

• Russian APT28 Deploys “NotDoor” Outlook Backdoor Against Companies in NATO Countries

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwhgINzgNirXlZNu6uMWQOzSQpkXFX5mDGt1yQPHtO2SlEBL5JhaNL2BjMrAxMYyKDMMML1L21Ke5hal5CfRsc1EuNQtmmYwhdnu9PvJ873ucjPw0MicZG

• CISA Warns of Linux Kernel Race Condition Vulnerability Exploited in Attacks

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new high-severity vulnerability in the Linux kernel to its Known Exploited Vulnerabilities (KEV) catalo

• Apple Seeks Researchers for 2026 iPhone Security Program

  Apple has kicked off the application period for the 2026 Security Research Device Program. White hat hackers interested in obtaining an iPhone that was specifically configured for

• VirusTotal Finds 44 Undetected SVG Files Used to Deploy Base64-Encoded Phishing Pages

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZvs8na9Ip78ucoHGvbHyiSCVP5nGr3Wy3A7cGn5gYzvSN6rU4ydJzqHK8499QP3OmYhhVuYUD5MHK3hPewmyBDkrZxbvC9OdIWby5B-7IqDnnMFMG2MuH

• Colombian Malware Weaponizing SWF and SVG to Bypass Detection

  A previously unseen malware campaign began circulating in early August 2025, through email attachments and web downloads, targeting users in Colombia and beyond. By leveraging two

• Hackers Turn Personal: Scattered LapSus Hunters Demand Google Sack Employees

  A hacker collective identifying itself as the Scattered LapSus Hunters has issued a direct threat to Google, demanding the termination of two of the company’s security employees. T

• Jaguar Land Rover Cyberattack Halts Global Operations and Retail Systems

  Jaguar Land Rover (JLR), the UK’s top luxury automaker, has confirmed a serious cyberattack that has disrupted its global IT infrastructure, affecting production lines, retail oper

• Google Patches High-Severity Chrome Vulnerability in Latest Update

  Google on Tuesday released Chrome 140 to the stable channel with patches for six vulnerabilities, including a four reported by external researchers. The most severe of the bugs is

• Salesloft Takes Drift Offline After OAuth Token Theft Hits Hundreds of Organizations

  Salesloft Drift OAuth Token Salesloft on Tuesday announced that it's taking Drift temporarily offline "in the very near future," as multiple companies have been ensnared in a far-r

• Disney to Pay $10M After FTC Finds It Enabled Children’s Data Collection Via YouTube Videos

  Disney has agreed to a $10 million settlement with the U.S. Federal Trade Commission (FTC) over violations of the Children’s Online Privacy Protection Act (COPPA), after improperly

• US Cybersecurity Agency Flags Wi-Fi Range Extender Vulnerability Under Active Attack

  The US cybersecurity agency CISA issued a fresh warning that a missing authentication vulnerability in TP-Link TL-WA855RE Wi-Fi range extender products has been exploited in attack

• CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwCu4E7K7CPvv0wuN6Ml73-6eNXjcIro1xpqYxOMuPrUDNfJA2jjSS9pMBfQmpMcvMa0czHTGY9sjGEJYarXRWwkvMHdAlBX8wTsR1EYN4jMAJk3r8ThRL

• Chinese APT Hackers Exploit Router Vulnerabilities to Infiltrate Enterprise Environments

  Over the past several years, a concerted campaign by Chinese state-sponsored Advanced Persistent Threat (APT) groups has exploited critical vulnerabilities in enterprise-grade rout

• Tidal Cyber Raises $10 Million for CTI and Adversary Behavior Platform

  Cybersecurity provider Tidal Cyber on Wednesday announced raising $10 million in a Series A funding round that brings the total raised by the company to $15 million. Founded in 202

• Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1B-RAsb4bgqW569kDz37WqVYPb29CEQ3AqtB6IFimy8fWuQLviUxMbebMrhl870YBEvulT2sXaycoa8PRpU4ElXNyX83Aesa-deme3t-lnaVwcIKOJ35X

• CISA Names Nicholas Andersen as Executive Assistant Director for Cybersecurity

  The Cybersecurity and Infrastructure Security Agency (CISA) has announced the appointment of Nicholas Andersen as its new Executive Assistant Director for Cybersecurity. Andersen,

• Massive IPTV Hosted Across More Than 1,000 Domains and Over 10,000 IP Addresses

  A sprawling network of illicit Internet Protocol Television (IPTV) services has been discovered, operating across more than 1,100 domains and in excess of 10,000 IP addresses. This

• Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWmrE3zgu9Am2bUCKYqs2jl2pk3USIxYUTTKS6H5brLJpk1ttsBUOE4kvjJBLlDii6orZnXnxO2ONeZ0fZNv6WIuLy7wBDsyHI1NSHVCYn6hKfRcnQGRJs

• Two Exploited Vulnerabilities Patched in Android

  Google this week rolled out fixes for a total of 111 unique CVEs as part of the September 2025 set of Android patches, including exploited zero-days. The exploited vulnerabilities,

• Google Warns of Zero-Day Vulnerability in Sitecore Products Allowing Remote Code Execution

  A critical zero-day vulnerability in several Sitecore products could allow attackers to execute code remotely. The vulnerability, identified as CVE-2025-53690, stems from a ViewSta

• Android Security Alert: Google Patches 120 Flaws, Including Two Zero-Days Under Attack

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnx-QMUT7etPYBsfqAscVLlU2OvSoNLfGB8xS0MWXE7scEEG5yqrprDPcSnOWhenlpN2C2Op9h9hgmfFEOi8DeBlyY-l-Nv4rq1iMvqup5pzFfFy4p8nq5

• Fancy Bear Develops Fancy New Outlook Backdoor

  Security researchers have uncovered a new Microsoft Outlook backdoor developed by Russian threat actors that monitors incoming email for trigger words and can exfiltrate data, uplo

• Hackers Exploit Sitecore Zero-Day for Malware Delivery

  Threat actors have been using an exposed ASP.NET machine key for remote code execution (RCE) on vulnerable Sitecore deployments, Google warns. Adversaries used a sample machine key

• US Offers $10M Bounty For FSB Hackers Who Exploited Cisco Vulnerability To Attack Critical Infrastructure

  The United States government has announced a reward of up to $10 million for information leading to the identification or location of three Russian intelligence officers. The bount

• Detecting Data Leaks Before Disaster

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhk7lQHMJ60wfWppcNJtTQH4MfpmcOeFDFTZCPuGFhEfsGovs-ktcQScJrOkPXLRfIW5yMQrw9Qb6uedy5MDAZR4FPZpZv6qlidrMmX6mNvASuW0yzU5tPt

• Wytec Expects Significant Financial Loss Following Website Hack

  Texas-based communications and safety solutions provider Wytec International, Inc. expects significant financial losses as a result of a cyberattack targeting its website. The comp

• How Russia-Linked Spies Turned Everyday Websites into Surveillance Traps aka ‘Watering Hole’

  Maria thought she was just browsing her favorite tech news site during her lunch break. She clicked on an article, waited for it to load and then suddenly found herself on what loo

• Django Critical Vulnerability Let attackers Execute Malicious SQL Code on Web Servers

  The Django development team has issued critical security updates to address a high-severity vulnerability that could allow attackers to execute malicious SQL code on web servers us

• Threat Actors Weaponize HexStrike AI to Exploit Citrix Flaws Within a Week of Disclosure

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizJcpERTE2LdFHOYAA-DkBdGfzkyWm23jxLjSlCcy0MEweG34O4tOEGZ9x7fWKEfBbG04Fzrq90V3A4kpKomuM49p-su5zZrnbpW0fiiMDtTpWozLiFUjm

• US, Allies Push for SBOMs to Bolster Cybersecurity

  Government agencies in the US and 14 allied countries have released new guidance on the advantages of widespread adoption of Software Bills of Materials (SBOMs). The shared vision

• Critical Linux UDisks Daemon Vulnerability (CVE-2025-8067) Exposes Privileged Data to Local Attackers

  A newly disclosed security flaw in the Linux UDisks daemon has been reported. Tracked as CVE-2025-8067, the out-of-bounds read vulnerability allows local, unprivileged users to acc

• Threat Actors Using Stealerium Malware to Attack Educational Organizations

  Educational institutions have become prime targets in the escalating battle against commodity information stealers. First emerging in 2022 as an open-source project on GitHub, Stea

• Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto Developers

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhycrblL0qifSQLAhfIoEcpyc66sG1mESmRInnNo4g-q7VqRZaPhTtcZg6xR1ckGngfxdhXZBc2Wns3NvLwpYFZ2vwJv3n3wHR2BdcaWWVYa6bicrC1lzcD

• Microsoft Confirms UAC Bug Breaks App Install On Windows 11 And 10 Versions

  Microsoft has officially acknowledged a significant bug in recent Windows security updates that is causing application installation and repair failures across multiple versions of

• Sola Security Raises $35M to Bring No-Code App Building to Cybersecurity Teams

  Israeli startup Sola Security has raised a $35 million Series A round, the company announced Thursday, which brings the total funding to date for the company to $65 million. Founde

• Google Slapped with $381 Million Fine in France Over Gmail Ads, Cookie Consent Missteps

  Google is once again in the crosshairs of French regulators. France’s data watchdog, the CNIL, has fined the tech giant €325 million (approximately $381 million) for slipping promo

• CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8xJe9T9uTd401ugxQoFzBy4J6mCxt6xK6lA6JSMSW9HXl8TkURFEa6raAzkNNlD8-ryl28Q-8ggUNGCwolfWwL4AT1akRTuUqFuJu3p2hfrLtJCpSvWqf

• Google Services Down For Most Of The Users In US, Turkey And Eastern Europe

  A significant outage of Google services, including its search engine, Gmail, and YouTube, has affected users across Turkey and several countries in Eastern Europe. The disruption,

• US Offers $10 Million for Three Russian Energy Firm Hackers

  The US Department of State this week announced rewards of up to $10 million for information on three Russian Federal Security Service (FSB) officers. According to the government, t

• Google Fined $379 Million by French Regulator for Cookie Consent Violations

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-5tzbLArBsk9Vz2f1mlnQ7lkG0cMPMASYuljaoqPeb45iDsDY3sPc8Ov8m6Z5XxUmD4PBuCZPIGUro4nER4lMc0zcpguk8uyusvaZnjaT-ze2kWZS1rGQ

• Google Patches 111 Android Vulnerabilities, Confirms Active Exploitation of Two Zero-Days

  In its latest Android Security Bulletin, Google has confirmed the patching of 111 unique security vulnerabilities, including two zero-day vulnerabilities that were actively exploit

• Hackers Leverage X’s Grok AI To Amplify Malicious Links Via Promoted Posts

  A new cyber-attack, dubbed “Grokking,” is exploiting features on the social media platform X to spread malicious links on a massive scale. Scammers are manipulating the platform’s

• AI Supply Chain Attack Method Demonstrated Against Google, Microsoft Products

  Researchers at Palo Alto Networks have uncovered a new attack method that could pose a significant AI supply chain risk, and they demonstrated its impact against Microsoft and Goog

• Cybercriminals Exploit X’s Grok AI to Bypass Ad Protections and Spread Malware to Millions

  Grok AI to Bypass Ad Protections Cybersecurity researchers have flagged a new technique that cybercriminals have adopted to bypass social media platform X's malvertising protection

• Django Web Vulnerability Exposes Applications to High-Risk SQL Injection – CVE-2025-57833

  A serious Django web vulnerability has been identified, prompting immediate action from the Django web framework development team. The flaw, officially registered as CVE-2025-57833

• GhostRedirector Hackers Compromise Windows Servers With Malicious IIS Module To Manipulate Search Results

  A newly identified hacking group, dubbed “GhostRedirector” by cybersecurity researchers, has compromised at least 65 Windows servers across the globe, deploying custom malware desi

• New ClickFix Attack Mimic as AnyDesk Leverages Windows Search to Drop MetaStealer

  A novel variant of the ClickFix attack has recently emerged, masquerading as a legitimate AnyDesk installer to spread the MetaStealer infostealer. This campaign exploits a fake Clo

• New WhatsApp Scam Alert Tricks Users to Get Complete Access to Your WhatsApp Chats

  A newly discovered WhatsApp scam has begun circulating on messaging platforms, exploiting the popular device linking feature to seize full control of user accounts. The attack unfo

• WhatsApp Zero-Day Exploited in Attacks Targeting Apple Users

  WhatsApp has shared details on a zero-day vulnerability that was exploited in highly targeted attacks against Apple users. Tracked as CVE-2025-55177 (CVSS score of 8.0), the bug is

• Jaguar Land Rover Confirms Cybersecurity Incident Impacts Global IT Systems

  Luxury automaker Jaguar Land Rover (JLR) has been forced to halt production at its Halewood plant and shut down its global IT infrastructure following a significant cybersecurity i

• Amazon Disrupts Russian Hacking Campaign Targeting Microsoft Users

  Amazon has disrupted a Russian watering hole campaign targeting Microsoft users via compromised websites opportunistically redirecting users to malicious infrastructure. Attributed

• Ukrainian Networks Launch Massive Brute-Force and Password-Spraying Campaigns Targeting SSL VPN and RDP Systems

  A sophisticated network of Ukrainian-based autonomous systems has emerged as a significant cybersecurity threat, orchestrating large-scale brute-force and password-spraying attacks

• Silver Fox Exploits Microsoft-Signed WatchDog Driver to Deploy ValleyRAT Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwYszjjHt4QlqPOwvS1lwNXYJfIl-A2DgKE4z4kiLhesve7NiT1kGxqPJPbHF-QZDl0g35-JvF8r3AonVf-ysnynPXXYKOErKJoxHQYTaGzb03tauVEUtG

• Varonis Acquires Email Security Firm SlashNext

  Varonis Systems (Nasdaq: VRNS) announced the acquisition of email security provider SlashNext. Founded in 2017 by Atif Mushtaq, one of the main architects of FireEye’s core malware

• How IOC Feeds Streamline Incident Response and Threat Hunting for Best SOC Teams 

  When you’re in a SOC, speed is everything. The earlier you detect and confirm an intrusion, the faster you can contain it, and the less damage it does to your organization. But raw

• Ukrainian Network FDN3 Launches Massive Brute-Force Attacks on SSL VPN and RDP Devices

  Massive Brute-Force Attacks Cybersecurity researchers have flagged a Ukrainian IP network for engaging in massive brute-force and password spraying campaigns targeting SSL VPN and

• Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack

  Cloudflare on Monday said it blocked the largest distributed denial-of-service (DDoS) attack ever recorded, at 11.5 Tbps (Terabits per second). In a short message on X, Cloudflare

• Iran-Nexus Hackers Abuses Omani Mailbox to Target Global Governments

  A sophisticated spear-phishing campaign orchestrated by Iranian-aligned operators has been identified targeting diplomatic missions worldwide through a compromised Ministry of Fore

• Shadow AI Discovery: A Critical Part of Enterprise AI Governance

  Shadow AI Discovery The Harsh Truths of AI Adoption -------------------------------------------------------------------- MITs State of AI in Business report revealed that while 40%

• Sangoma Patches Critical Zero-Day Exploited to Hack FreePBX Servers

  Sangoma has released emergency patches for a zero-day vulnerability exploited to hack FreePBX servers with the administrator control panel accessible from the internet. Tracked as

• New Report on Commercial Spyware Vendors Detailing Their Targets and Infection Chains

  Commercial surveillance vendors have evolved from niche technology suppliers into a sophisticated multi-billion-dollar ecosystem that poses unprecedented threats to journalists, ac

• Researchers Warn of MystRodX Backdoor Using DNS and ICMP Triggers for Stealthy Control

  MystRodX Backdoor Cybersecurity researchers have disclosed a stealthy new backdoor called MystRodX that comes with a variety of features to capture sensitive data from compromised

• New Phishing Attack Via OneDrive Attacking C-level Employees for Corporate Credentials

  A sophisticated spear-phishing campaign has emerged targeting senior executives and C-suite personnel across multiple industries, leveraging Microsoft OneDrive as the primary attac

• Lazarus Group Expands Malware Arsenal With PondRAT, ThemeForestRAT, and RemotePE

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7s74nKQKLYp8e88vDrj0i1C9fSQ5kw0XENNDwhfYqTs5nucAYzvX0zkp8rquBdTYEzWn99MFkePXD-kpzIGVKhWlIDVotLaBhGOTgxvP1yYq1cVbzBd7r

• Google Confirms That Claims of Major Gmail Security Warning are False

  Google has officially debunked widespread reports claiming the company issued a major security warning to Gmail users, clarifying that such claims are entirely false. The technolog

• ESPHome Web Server Authentication Bypass Vulnerability Exposes Smart Devices

  A critical security vulnerability discovered in ESPHome’s web server component has exposed thousands of smart home devices to unauthorized access, effectively nullifying basic auth

• 28 Years of Nmap – From Simple Port Scanner to Comprehensive Network Security Suite

  Nmap has remained at the forefront of network discovery and security assessment for nearly three decades. Originally introduced on September 1, 1997, in Phrack magazine as a modest

• Azure Active Directory Vulnerability Exposes Credentials and Enables Attackers to Deploy Malicious Apps

  A critical security vulnerability has emerged in Azure Active Directory (Azure AD) configurations that exposes sensitive application credentials, providing attackers with unprecede

• Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus Wallets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRcOy1Zd5SkNC2FkVCAg2Qy-UKCj2kPIvWKApI4s8nt9Xlyl5h-KczhHriB1Vne7GA5AbAbVwd9HubZXnbdnCBWWbzUGEVEB0jue2opsZha9zUT5YDwIxC

• Critical Qualcomm Vulnerabilities Allow Attackers to Execute Arbitrary Code Remotely

  Multiple critical vulnerabilities in Qualcomm Technologies’ proprietary Data Network Stack and Multi-Mode Call Processor that permit remote attackers to execute arbitrary code. The

• Salesforce Releases Forensic Investigation Guide Following Chain of Attacks

  Salesforce today unveiled its comprehensive Forensic Investigation Guide, equipping organizations with best practices, log analysis techniques, and automation workflows to detect a

• MediaTek Security Update – Patch for Multiple Vulnerabilities Across Chipsets

  MediaTek today published a critical security bulletin addressing several vulnerabilities across its latest modem chipsets, urging device OEMs to deploy updates immediately. The bul

• New Large-Scale Phishing Attacks Targets Hotelier Via Ads to Gain Access to Property Management Tools

  A novel phishing campaign emerged in late August 2025 that specifically targeted hoteliers and vacation rental managers through malicious search engine advertisements. Rather than

• Critical Next.js Framework Vulnerability Let Attackers Bypass Authorization

  A newly discovered critical security vulnerability in the Next.js framework, designated CVE-2025-29927, poses a significant threat to web applications by allowing malicious actors

• Microsoft To Mandate MFA for Accounts Signing In to the Azure Portal

  In a significant security move, Microsoft announced on August 26, 2025, that it will require mandatory multifactor authentication (MFA) for all accounts signing in to the Azure por

• Microsoft Urges OEM Manufacturers to Fix Windows 11 USB-C Notification issues

  Microsoft is issuing a direct call to its hardware partners, urging original equipment manufacturers (OEMs) to address configuration issues that prevent crucial USB-C troubleshooti

• SIM Swapping Attacks on the Rise – How eSIM can Make SIM Swapping Harder

  The telecommunications landscape is facing an unprecedented crisis as SIM swapping attacks surge to alarming levels, with the United Kingdom alone reporting a staggering 1,055% inc

• When Browsers Become the Attack Surface: Rethinking Security for Scattered Spider

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnsfKhvPWHRG3eGsuEkZbrjUvHliKeZW5NCrciwrtrWqh2EytMDEHRk6Dxf46KM8d3uMa7ov0D9vXSsLZgYgOZuRhNTUfHlWHdNvm6vsNFUR97fCzu0SJj

• Hackers Reportedly Demand Google Fire Two Employees, Threaten Data Leak

  A group claiming to be a coalition of hackers has reportedly issued an ultimatum to Google, threatening to release the company’s databases unless two of its employees are terminate

• ⚡ Weekly Recap: WhatsApp 0-Day, Docker Bug, Salesforce Breach, Fake CAPTCHAs, Spyware App & More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjTU8zv9AntHOeJ5Cjh0EIyFRGF9muwzha8zjS9OZuitQeg0kLMk3rVctG9HsEZny7QWLcxmwSY2Ij0eSrMNPfR6NEDOamsbLlogO0fKZSswTNE1fg-YuW

• Wireshark 4.4.9 Released With Fix For Critical Bugs and Updated Protocol Support

  The Wireshark team has rolled out version 4.4.9, a maintenance release for the world’s most popular network protocol analyzer. This update focuses on stability and reliability, del

• Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijJTcif6mcxfb0YF4WaePfUiiiwhcgupvhbcFV3JtSeX062w3y-3p9kovXrMdVBZb8UJP5I7vbMWpErQ98KYLIYxZTr8gWFLG6mdmqhfWguMObzyFuBiYS

• Authenticated Attackers Could Exploit IBM Watsonx Vulnerability to Access Sensitive Data

  A newly disclosed security vulnerability, tracked as CVE-2025-0165, has been reported, specifically concerning the users of the IBM Watsonx Orchestrate Cartridge within the IBM Clo

• Zscaler Confirms Data Breach – Hackers Compromised Salesforce Instance and Stole Customer Data

  Cybersecurity company Zscaler has confirmed it fell victim to a widespread supply-chain attack that exposed customer contact information through compromised Salesforce credentials

• AI Waifu RAT Attacking Users With Novel Social Engineering Techniques

  A sophisticated malware campaign targeting niche Large Language Model (LLM) role-playing communities has emerged, leveraging advanced social engineering tactics to distribute a dan

• Hackers Leverage Windows Defender Application Control Policies to Disable EDR Agents

  Cybercriminals are exploiting Windows Defender Application Control (WDAC) policies to systematically disable Endpoint Detection and Response (EDR) agents, creating a dangerous blin

• Amazon Dismantles Russian APT 29 Infrastructure Used to Attack Users

  Amazon’s threat intelligence team uncovered a sophisticated watering hole campaign in late August 2025, which is orchestrated by APT29, also known as Midnight Blizzard, a Russian F

• Infostealer Malware is Being Exploited by APT Groups for Targeted Attacks

  Infostealer malware, initially designed to indiscriminately harvest credentials from compromised hosts, has evolved into a potent weapon for state-sponsored Advanced Persistent Thr

• Sitecore CMS Platform Vulnerabilities Enables Remote Code Execution

  Critical vulnerabilities in Sitecore Experience Platform allow attackers to achieve complete system compromise through a sophisticated attack chain combining HTML cache poisoning w

• Malicious npm Package Mimics as Popular Nodemailer with Weekly 3.9 Million Downloads to Hijack Crypto Transactions

  Security researchers at Socket.dev uncovered a sophisticated supply chain attack in late August 2025 leveraging a malicious npm package named nodejs-smtp, which masquerades as the

• Windows 11 25H2 Update Preview Released, What’s New?

  Microsoft has opened the Release Preview Channel to Windows Insiders for the forthcoming Windows 11, version 25H2 (Build 26200.5074) enablement package (eKB), offering an early loo

• Apple Hints That iPhone 17 Is to Eliminate the Physical SIM Card

  Apple appears to be laying the groundwork to remove the physical SIM card slot from its upcoming iPhone 17 models in more countries, with a significant push anticipated across the

• IBM Watsonx Vulnerability Let Attackers Inject Malicious SQl Queries

  IBM published a security bulletin disclosing a serious Blind SQL injection vulnerability in its IBM Watsonx Orchestrate Cartridge for IBM Cloud Pak for Data, assigned CVE-2025-0165

• Homeland Security Purges FEMA IT Department Over Cybersecurity Breach

  Homeland Security Secretary Kristi Noem has fired 24 members of the Federal Emergency Management Agency’s (FEMA) IT department, citing a series of alleged cybersecurity failures at

• ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcP0JniGEQ1BhVaxj58idmB4eRLrow2RTYiMD9L58JPILuaDXBc0E9El7AmFSgVihz5iRGq90ugDBrjybEo-lOKItD5YRJjfm5E-xoB47qBbJjmJp8r-tC

• Beware of Fraudulent Scholarship Apps Attacking Students in Defarud Campaign

  A sophisticated Android malware campaign has emerged in recent months, targeting students in Bangladesh by masquerading as legitimate scholarship applications. Disguised under the

• Microsoft Confirms Recent Windows 11 24H2 Security Update Not Causing SSD/HDD Failures

  Microsoft has officially addressed growing concerns among Windows 11 users, stating that its August 2025 security update for version 24H2 is not responsible for the scattered repor

• Google Warns 2.5B Gmail Users to Reset Passwords Following Salesforce Data Breach

  Google has issued a broad security alert to its 2.5 billion Gmail users, advising them to enhance their account security in the wake of a data breach involving one of the company’s

• Top 10 Best API Penetration Testing Companies In 2025

  API penetration testing has evolved dramatically in 2025. While traditional, human-led penetration testing remains critical, the scale and complexity of modern APIs have necessitat

• New ‘Sindoor Dropper’ Malware Targets Linux Systems with Weaponized .desktop Files

  A new malware campaign, dubbed “Sindoor Dropper,” is targeting Linux systems using sophisticated spear-phishing techniques and a multi-stage infection chain. The campaign leverages

• Critical Citrix 0-Day Vulnerability Exploited Since May, Leaving Global Entities Exposed

  A critical zero-day vulnerability in Citrix NetScaler products, identified as CVE-2025-6543, has been actively exploited by threat actors since at least May 2025, months before a p

• WhatsApp Issues Emergency Update for Zero-Click Exploit Targeting iOS and macOS Devices

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQB3IyvcFkdlEImIRceXFfbwNDwgZryHFJ2VX9eu9hFEX476EjqKBqndt4hRkjAGJBDPfCZK-oWZMUKmv8jCt9vDwk2SFbZvAXXbDrqs2h8eMCzn3jOCzA

• Top 10 Attack Surface Management Software Solutions In 2025

  Attack Surface Management (ASM) is a proactive security discipline focused on continuously discovering, analyzing, and reducing an organization’s external-facing digital footprint.

• Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunneling

  Velociraptor Forensic Tool Cybersecurity researchers have called attention to a cyber attack in which unknown threat actors deployed an open-source endpoint monitoring and digital

• Top 10 Best Web Application Penetration Testing Companies in 2025

  Web application penetration testing in 2025 goes beyond a simple, one-time assessment. The top companies combine human expertise with automation and intelligent platforms to provid

• Hackers Leverage Compromised Third-Party SonicWall SSL VPN Credentials to Deploy Sinobi Ransomware

  A sophisticated ransomware attack has emerged targeting organizations through compromised third-party managed service provider (MSP) credentials, showcasing the evolving tactics of

• Cyber Attacks Targeting Education Sector Surges Following Back-to-School Season

  As students and staff returned to campuses this August, a stark rise in cyber attacks against educational institutions has been observed worldwide. From January to July 2025, organ

• Hackers Weaponize PDF Along With a Malicious LNK File to Compromise Windows Systems

  Attackers have begun leveraging a seemingly innocuous PDF newsletter alongside a malicious Windows shortcut (LNK) file to infiltrate enterprise environments. The attack surfaced in

• New TAOTH Campaign Exploits End-of-Support Software to Distribute Malware and Collect Sensitive Data

  In June 2025, a previously undocumented campaign leveraging end-of-support software began surfacing in telemetry data gathered across Eastern Asia. Dubbed TAOTH, the operation expl

• AppSuite PDF Editor Hacked to Execute Arbitrary Commands on The Infected System

  A sophisticated malware campaign has emerged targeting users seeking free PDF editing software, with cybercriminals distributing a malicious application masquerading as the legitim

• NightSpire Ransomware Group Claims to Exploit The Vulnerabilities of Orgs to Infiltrate Their Systems

  Since its emergence in February 2025, the NightSpire ransomware group has rapidly distinguished itself through a sophisticated double-extortion strategy that combines targeted encr

• NodeBB Vulnerability Let Attackers Inject Boolean-Based Blind and PostgreSQL Error-Based Payloads

  NodeBB, a popular open-source forum platform, has been found vulnerable to a critical SQL injection flaw in version 4.3.0. The flaw, tracked as CVE-2025-50979, resides in the searc

• Abandoned Sogou Zhuyin Update Server Hijacked, Weaponized in Taiwan Espionage Campaign

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhlMjfZMk2hdkae7SCbd4KXuVVEQG3TAO5supo1M2tdAMUJP8kBXaGkiE4PjVqlZhmmSk3YzDMrq7RDlV305hbb6fHRfO1UAwci4Z0uiRaOY6A5jT8Vl5UY

• Citrix Netscaler 0-day RCE Vulnerability Patched – Vulnerable Instances Reduced from 28.2K to 12.4K

  A significant global effort to patch a critical zero-day remote code execution (RCE) vulnerability in Citrix NetScaler devices has seen the number of exposed systems drop from appr

• VerifTools Fake ID Operation Dismantled by Law Enforcement

  Law enforcement in the US and the Netherlands on Thursday announced the seizure of domains and servers associated with VerifTools, one of the largest marketplaces for fraudulent id

• Amazon Disrupts APT29 Watering Hole Campaign Abusing Microsoft Device Code Authentication

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKYZ5DLUHPr8ka-gN-66F-UM32FyEHFG-zXbjosHjQQDFT5AWRGWMwyyVCzU0HWoD-M7XErgpJumbsKwGKGzDsIz8BZlcBQ4iZYgWOShEi-jWnHHgGp-1g

• WhatsApp 0-Day Vulnerability Exploited to Hack Mac and iOS Users

  A sophisticated attack campaign has leveraged a previously unknown zero-day vulnerability in WhatsApp on Apple devices to target specific users, the company has confirmed. The vuln

• In Other News: Iranian Ships Hacked, Verified Android Developers, AI Used in Attacks

  SecurityWeek’s cybersecurity news roundup provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a valuable summary of stories tha

• Not Larger Telecommunications, But Smaller Dutch ISPs Also Targeted in Broader Salt Typhoon Campaign

  China-linked espionage actor Salt Typhoon is again in news but this time not for targeting larger telecommunication giants, instead its the smaller internet and hosting service pro

• Researchers Warn of Sitecore Exploit Chain Linking Cache Poisoning and Remote Code Execution

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZ7bizpDvROfMdTGE9Bv2YH9pRG01EtH9x33pDvQXnDJ93K-gQTZTl-Vx9YryMaAvWmAHxHnQ8jTK-beKCnyZt6Z4bSWgbQH-53jpBRhUp80nH4rXTwiA0

• U.S. Government Seizes Online Marketplaces Used to Sell Fraudulent Identity Documents to Cybercriminals

  The U.S. Attorney’s Office for the District of New Mexico announced Thursday that federal authorities have executed a court-authorized seizure of two domain names and one affiliate

• Salt Typhoon Exploits Flaws in Edge Network Devices to Breach 600 Organizations Worldwide

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeNOLo56KNkKNaat-XrGPDlcfwwFUX-GuRapoEDEVPPC9FGs7sXdgjxvSaOtCTi7dnM6b-2LuxJECmaJw939fENa5Dj4PqPH-JebraAWXVAYSJ-gB82wVf

• Researchers Find VS Code Flaw Allowing Attackers to Republish Deleted Extensions Under Same Names

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8Y9u9GKMsRB1GGJ2J6rfmmG3DVAbnxFf3wKnogYQtMl-S9FYeW0CxV7aFiIZtBxrghtuVoKnNG5i9JaOBtrb5TBnxQ6AnrMzoybR14km-s46-1L1YUPoS

• TamperedChef Malware Disguised as Fake PDF Editors Steals Credentials and Cookies

  TamperedChef Malware Cybersecurity researchers have discovered a cybercrime campaign that's using malvertising tricks to direct victims to fraudulent sites to deliver a new informa

• Ransomware Group Exploits Hybrid Cloud Gaps, Gains Full Azure Control in Enterprise Attacks

  The financially motivated threat actor tracked as Storm-0501 has shifted focus on targeting cloud environments for data theft and extortion, Microsoft warns. Active since at least

• Google Warns Salesloft OAuth Breach Extends Beyond Salesforce, Impacting All Integrations

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1BrY04SOKYqiKho0jAJ2fts4l0kJBcbJX3b8rvpSFpfGWI6FC-RjehD9IluFyQRBxkQ70M7AacScxgWVx-1y2O99UETJpoONjJIk8WgpMwcaXWqj2EpTh

• Ransomware Attack Hits Nevada: DMV, Health Authority Among Agencies Affected

  The State of Nevada is contending with the fallout of a major cyberattack that struck government systems early Sunday morning, disrupting critical public services and flashing a ro

• US Sanctions Russian National, Chinese Firm Aiding North Korean IT Workers

  The US Treasury Department’s Office of Foreign Assets Control (OFAC) on Wednesday announced sanctions against a Russian national and a Chinese company for their roles in North Kore

• Feds Seize $6.4M VerifTools Fake-ID Marketplace, but Operators Relaunch on New Domain

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwUnvn1vmivPqUaJanUlgbcdmPVnAXkvtUmVPKgoNxzPba9WoS8woKXkezQTXyOahduBoSwUBN1Q35QdklVGYuHZUgOAID4iG4I6hZTPW88tcBswLcCZtJ

• New Android Malware ‘SikkahBot’ Targets Students in Bangladesh

  A newly discovered Android malware, dubbed SikkahBot, is actively targeting students in Bangladesh by posing as official applications from the Bangladesh Education Board. This malw

• Nevada Confirms Ransomware Attack Behind Statewide Service Disruptions

  Nevada on Wednesday confirmed that the days-long disruption to state systems and services was caused by a ransomware attack. The incident, disclosed on Monday morning as a network

• FreePBX Servers Targeted by Zero-Day Flaw, Emergency Patch Now Available

  FreePBX Servers Targeted by Zero-Day The Sangoma FreePBX Security Team has issued an advisory warning about an actively exploited FreePBX zero-day vulnerability that impacts system

• German Prosecutors Charge Hacker in Rosneft Deutschland Cyberattack

  Berlin prosecutors have formally charged a 30-year-old German man accused of carrying out the Rosneft cyberattack in March 2022, an incident that severely disrupted one of Germany’

• TransUnion Data Breach Impacts 4.4 Million

  Credit reporting firm TransUnion (NYSE: TRU) is notifying more than 4.4 million people that their personal information was compromised in a data breach. The incident occurred on Ju

• Click Studios Patches Passwordstate Authentication Bypass Vulnerability in Emergency Access Page

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYwcWAQWKyWLOvZ6KFO-kzZnlKIICg-1PGP1BokueRtsVNZyRedEJeosmB0sgxOLtnKcKulDphhiaOGT4pLg8FKwlD9VW6kNQPLYyxpRhYWvPQKeuIG3l6

• Google Confirms Workspace Accounts Also Hit in Salesforce–Salesloft Drift Data Theft Campaign

  The recent widespread data theft campaign that hit hundreds of Salesforce customers through their Salesloft Drift integration also impacted organizations using Google Workspace, Go

• SEBI Clarifies Scope of CSCRF, Recognizes RBI Oversight

  The Securities and Exchange Board of India (SEBI) issued a clarification on Thursday regarding the scope and applicability of its Cybersecurity and Cyber Resilience Framework (CSCR

• Can Your Security Stack See ChatGPT? Why Network Visibility Matters

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhQei5SSNfifrxHggc81p-i68H752M-C7Bpsv9wHxMYBiycZYFVq1Ly8AzGdKz0nMXQkEegNij2HNKqePCTWENP6TYFBXue2u0blfdjOjNP2GuyetMYvTN

• New Sni5Gect Attack Crashes Phones and Downgrades 5G to 4G without Rogue Base Station

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIkgJca1vtf2mEOJnQ21hV27JFIrMEfztrhDiYEwEDsWRengbYPauuyipn-l2xi0x-t5FJ3R5BEpyg9v0WY7v6fGN6w0UqxQTF92K7buuCNOEDPO79OS6p

• Citrix Patches Three NetScaler Flaws, Confirms Active Exploitation of CVE-2025-7775

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8JyjBnvpAKrO0oAOwIU8-iH3wL6zPhfwW0ikuRkIH5vdKmnA4d3BJYT9SLRKmReO2MovgGigJ5uq-6NYjNvwQN0MzPUYtlu2gW0J8x6EXoXeXbQRWc4HS

• Citrix Patches Exploited NetScaler Zero-Day

  Citrix on Tuesday rolled out patches for three vulnerabilities in its NetScaler ADC and Gateway, including a critical-severity flaw exploited in the wild as a zero-day. Tracked as

• Blind Eagle’s Five Clusters Target Colombia Using RATs, Phishing Lures, and Dynamic DNS Infra

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDcIRF5LPAAQyLmtPmVQf09heMs19EcAcTkNlU55FHONZMdLEBtJlSaw2jFnyfuj2-JElHfdzYXFvUJ64AHAMUVffg5DNMYIOdyb2vuUw6NYz7Eem8ctvY

• CISA Adds Citrix Vulnerabilities to KEV Catalog as New Flaws Emerge

  The U.S. Cybersecurity and Information Security Agency (CISA) has added two Citrix vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog just as new Citrix vulnerabi

• Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgA3n8i-3R37szxYM-Mqk74uLkPqAJJ7NQ-xmiwzE4y4k8YT5ZLkYdiGwQM9JVcN4vAaGr26LBDkX9YyJlhvemQG3YMJleeyLxX75rAmf1gzjRwzBqVTrpR

• Infostealers: The Silent Smash-and-Grab Driving Modern Cybercrime

  Infostealers have become the fulcrum of modern cybercrime. They enter silently, steal in stealth, and vanish. The evolution of this malware over the last ten years is a feature of

• NX Build Tool Hacked with Malware That Checks for Claude or Gemini to Find Wallets and Secrets

  Over 1,400 developers discovered today that a malicious post-install script in the popular NX build kit silently created a repository named s1ngularity-repository in their GitHub a

• Chinese State Hackers Target Global Critical Infrastructure, NSA Warns

  A coalition of cybersecurity and intelligence agencies from across the globe, including the United States National Security Agency (NSA), has issued a joint advisory revealing ongo

• The 5 Golden Rules of Safe AI Adoption

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgMHwvaKfu0Fm0CSYxEpptSWbO0OfA3JBSVEELxmqbNjgbiEsUNw6-BunyL5qkynV61yoPbKlyWbvNZeacG8etIUtMa5rKH7jxd2uiJTKS6EVHWVZdOMaw

• Nevada State Offices Closed Following Disruptive Cyberattack

  Nevada is scrambling to restore certain systems that were disrupted by a cyberattack on Sunday, forcing it to close state offices on Monday and Tuesday. The incident was disclosed

• CrowdStrike Set to Acquire Onum in $290 Million Deal to Enhance Falcon Next-Gen SIEM

  Global cybersecurity leader CrowdStrike announced its intention to acquire Onum, a pioneer in real-time telemetry pipeline management, in a deal reportedly valued at $290 million.

• ShadowSilk Hits 35 Organizations in Central Asia and APAC Using Telegram Bots

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9v-pv83Rg9z0iJd1xopBCWz5YlWivtf6Kb7r-4CiOEY9ZewegZxviBEFV6QsbrygsKJA6n8LKxM4V-JMSe87te7SOLTozMe13dqexPQq-zKTCNnGsA2e3

• China-Linked Hackers Hijack Web Traffic to Deliver Backdoor

  A China-linked cyberespionage group has been hijacking web traffic to infect diplomats and other entities with the PlugX backdoor, Google Threat Intelligence Group (GTIG) reports.

• US, Japan, South Korea Meet Private Partners to Combat North Korea’s IT Work Fraud Scheme

  The U.S. State Department in collaboration with Japan, South Korea, and private cybersecurity partners met in Tokyo, last week, to draw plans for combating North Korea’s side hustl

• Cloudflare Launches MCP Server Portals – A Unified Gateway to All MCP Servers

  Cloudflare today launched MCP Server Portals in open beta, a groundbreaking capability designed to centralize, secure, and observe all Model Context Protocol (MCP) connections in a

• Anthropic Disrupts AI-Powered Cyberattacks Automating Theft and Extortion Across Critical Sectors

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEingwW6gPDKzbVY9mT5hCxFXG71i8DX-dW306cWxoNro0pjnOJNGhvBY0W0lReZYpjt5dyNeCZQWdORqHFcft36e9crGY3MF3X0RTc3fVCjeyZKA-lUz3cd

• Hundreds of Salesforce Customers Hit by Widespread Data Theft Campaign

  Hackers stole data from hundreds of Salesforce customer instances in a widespread campaign earlier this month, Google Threat Intelligence Group (GTIG) warns. The attacks did not ex

• New Research Highlights Emulating Tactics of Scattered Spider in Realistic Scenarios

  New findings from Lares Labs underscore the importance of realistic threat emulation exercises that mirror the sophisticated tactics of the Scattered Spider APT group. By integrati

• Fraud, Romance Scams, and Laundered Millions: Fifth Conspirator Convicted

  A federal jury in Puerto Rico has convicted Oluwasegun Baiyewu, the fifth defendant in a transnational money laundering conspiracy involving fraud schemes run by Nigerian Organized

• Someone Created the First AI-Powered Ransomware Using OpenAI's gpt-oss:20b Model

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8UnVH7RFSemTqAZaC-mJxAeNXjOxPNjYFdOlwc4hSzD6AHMcFMrhF81DXOEQnBVoT6mmHPS3VKJOXn8tRE84zcB1YZrWGLuw9GKrX-NBwxrZLHZDuIjgm

• Hackers Weaponize Trust with AI-Crafted Emails to Deploy ScreenConnect

  Multiple phishing campaigns deploying ConnectWise ScreenConnect for remote control demonstrate the sophistication, extent, and danger of AI-supercharged social engineering. An ongo

• New TamperedChef Attack With Weaponized PDF Editor Steals Sensitive Data and Login Credentials

  A sophisticated malware campaign that weaponizes a seemingly legitimate PDF editor to steal sensitive data and login credentials from unsuspecting users across Europe. The attack u

• Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicQuE8yfWyaamT0a9dChjurt2pRrbenRZMNVxxboB4P43y9M1t4WjWDxKO3sSRTE8j-Wm1hlwWGTpYpeycKfVfnT8zPY1wk6YcsKlJrWtqNSUp1drOzCMm

• Hacker Used Claude AI to Automate Reconnaissance, Harvest Credentials and Penetrate Networks

  A hacker used a popular artificial intelligence chatbot to run a cybercriminal operation that weaponized AI—deploying Claude AI Code not just as a copilot, but as the driver of an

• FreePBX Servers Hacked in 0-Day Attack – Admins are Urged to Disable Internet Access

  A critical zero-day exploit targeting exposed FreePBX 16 and 17 systems. Threat actors are abusing an unauthenticated privilege escalation vulnerability in the commercial Endpoint

• Hackers Target Popular Nx Build System in First AI-Weaponized Supply Chain Attack

  Hackers stole thousands of credentials in a fresh supply chain attack targeting JavaScript developers that use the popular Nx build system package. With over 4 million weekly downl

• U.S. Treasury Sanctions DPRK IT-Worker Scheme, Exposing $600K Crypto Transfers and $1M+ Profits

  U.S. Treasury Sanctions DPRK IT-Worker Scheme The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) announced a fresh round of sanctions against two individ

• ShadowSilk Leveraging Penetration-Testing Tools, Public Exploits to Attack Organizations

  ShadowSilk first surfaced in late 2023 as a sophisticated threat cluster targeting government entities across Central Asia and the broader APAC region. Exploiting known public vuln

• Webinar Today: Ransomware Defense That Meets Evolving Compliance Mandates

  [](https://event.on24.com/wcc/r/5039943/146DC41B451190239456D7011ADF04D5?partnerref=post) Live Webinar | Thursday, August 28, 2025 at 11AM ET – Register Ransomware has evolved well

• Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI Credentials

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0vDTtGKRVGmC1PGb2PNZIyvrvbO1OWvqTBMgSidaZ2bMV05538tTsdn6BTIaAFdTHQJjPbXY8fr5fOE6zntjqYTPa7SehZMypeWTkfntWh5qnG8bX0Nxc

• Now Streaming – Episode 3 of the Black Hat USA 2025 CISO Podcast Series

  Healthcare is one of the most targeted sectors in today’s cyber threat landscape. Ransomware attacks continue to disrupt hospital operations, while the exposure of sensitive patien

• Breaking the Passkey Promise: SquareX Discloses Major Passkey Vulnerability at DEF CON 33

  It is no secret that passwords are highly susceptible to phishing and brute force attacks. This led to the mass adoption of passkeys, a passwordless authentication method leveragin

• CrowdStrike to Acquire Onum to Fuel Falcon Next-Gen SIEM With Real-Time Telemetry

  CrowdStrike (NASDAQ: CRWD) on Wednesday announced plans to acquire Onum, a Spanish startup that provides real-time telemetry pipeline technology. The cybersecurity giant says the a

• Hidden Vulnerabilities of Project Management Tools & How FluentPro Backup Secures Them

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrrSe4Q4hXiB7BKAtiZ07qiJqQVi32DEfByohFU1yd78YI4ZtrzGkX2kGkk48k13xcNoMoD2OEIV4I46sotwhindkIjFT1FOl4JTBC6IlBbdOVwtXoel45

• Cisco IMC Virtual Keyboard Video Monitor Let Attacker Direct User to Malicious Website

  Cisco disclosed a high-severity open redirect vulnerability in the Virtual Keyboard Video Monitor (vKVM) component of its Integrated Management Controller (IMC). Tracked as CVE-202

• China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years

  The China-linked cyberespionage group known as Salt Typhoon has been compromising backbone and edge routers globally for persistent access to networks across multiple industries, g

• ENISA and European Commission Launch €36 Million EU Cybersecurity Reserve to Strengthen Digital Resilience

  The European Union Agency for Cybersecurity (ENISA) and the European Commission have signed a landmark contribution agreement to establish and operate the EU Cybersecurity Reserve.

• Webinar: Why Top Teams Are Prioritizing Code-to-Cloud Mapping in Our 2025 AppSec

  2025 AppSec Picture this: Your team rolls out some new code, thinking everything's fine. But hidden in there is a tiny flaw that explodes into a huge problem once it hits the cloud

• UTG-Q-1000 Group Weaponizing Subsidy Schemes to Exfiltrate Sensitive Data

  The emergence of sophisticated cybercriminal organizations continues to pose significant threats to individuals and institutions worldwide, with the UTG-Q-1000 group representing o

• Malicious Go Module Poses as SSH Brute-Force Tool, Steals Credentials via Telegram Bot

  SSH Brute-Force Tool Cybersecurity researchers have discovered a malicious Go module that presents itself as a brute-force tool for SSH but actually contains functionality to discr

• Transparent Tribe Targets Indian Govt With Weaponized Desktop Shortcuts via Phishing

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEid4XIqtUx4dvIytbJUeM5krSLJ26aFucK4uEgLFOnOEx08v0hbzkeZ2pQWeRq2upA7ndK78jnIV0TmvLpV7JLOJsR2FEl5W5y57mbfqrSn3bUgg-uk1SZt

• Aspire Rural Health System Data Breach Impacts Nearly 140,000

  Aspire Rural Health System has informed state authorities that it has suffered a data breach impacting nearly 140,000 people. Aspire provides emergency care, outpatient services, d

• Why SIEM Rules Fail and How to Fix Them: Insights from 160 Million Attack Simulations

  [](https://hubs.li/Q03DwF6q0) Security Information and Event Management (SIEM) systems act as the primary tools for detecting suspicious activity in enterprise networks, helping or

• Pakistani Hackers Back at Targeting Indian Government Entities

  Pakistan-linked state-sponsored cyberspies are targeting Indian government and defense entities with tailored malware in a fresh campaign, security researchers warn. Active since a

• ⚡ Weekly Recap: Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-the-Wild Exploits & More

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZo-o2G9iluMs4Uf8IbLbSwWYmk5ou2AE7eIS4g56ige7V1PWwSX3LzO6LhT4rA7RltV-3og7no7HaupHR1g5dysQ1MUJTMrXS6F9yVCl2LCMtCoA73uky

• WhatsApp Desktop Users At Risk of Code Execution Attacks with Python on Windows PCs

  WhatsApp Desktop users who have Python installed on their Windows PCs are at risk of arbitrary code execution due to a flaw in how the application handles Python archive files. A m

• OneFlip: An Emerging Threat to AI that Could Make Vehicles Crash and Facial Recognition Fail

  Autonomous vehicles and many other automated systems are controlled by AI; but the AI could be controlled by malicious attackers taking over the AI’s weights. Weights within AI’s d

• Phishing Campaign Uses UpCrypter in Fake Voicemail Emails to Deliver RAT Payloads

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglw0T7Z0nG4FzLOEDAtjMBNAhsLUkI6kgiUFV8N91SBKhVVCO94H0gtmAR0t4ToHAzgB6vxlVpKXbOO0xXzr64urfmtMQH3O4e7r21n7G-RwwG2kWJlg-3

• APT36 Hackers Attacking Indian BOSS Linux Systems With Weaponized .desktop Shortcut Files

  In early August 2025, security researchers uncovered an unprecedented campaign targeting India’s BOSS Linux installations through seemingly innocuous shortcut files. These files, m

• FTC Calls on Tech Firms to Resist Foreign Anti-Encryption Demands

  The Federal Trade Commission (FTC) has sent letters to major tech companies in the United States, urging them to resist foreign governments’ demands to weaken encryption. The lette

• Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3

  Container Escape Vulnerability Docker has released fixes to address a critical security flaw affecting the Docker Desktop app for Windows and macOS that could potentially allow an

• New Prompt Insertion Attack – OpenAI Account Name Used to Trigger ChatGPT Jailbreaks

  The latest technique, uncovered by AI researcher @LLMSherpa on X (formerly Twitter), exposes a little-known vulnerability in OpenAI’s ChatGPT system, a prompt insertion attack leve

• Organizations Warned of Exploited Git Vulnerability

  The US cybersecurity agency CISA on Monday warned that a recent vulnerability in Git has been exploited in attacks, urging its immediate patching. The flaw, tracked as CVE-2025-483

• UNC6384 Deploys PlugX via Captive Portal Hijacks and Valid Certificates Targeting Diplomats

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhoIojSn8T0xs4LrDA5a9xYIANtqsMaoDtoaOGZ2kcqO7-fxaMj9Fr3wzUiLI4eBEcxP7QvylXppjD0pgZO86JTyEJDEKmUVVnsPI1WltiIMa3Urxu359HV

• Hackers Can Exploit Image Scaling in Gemini CLI, Google Assistant to Exfiltrate Sensitive Data

  Hackers can weaponize hidden prompts revealed by downscaled images to trigger sensitive tool actions and achieve data exfiltration in Gemini CLI—and similar risks extend to Google

• Buffalo Police Detective Indicted for Attempted Purchases on Genesis Market

  A Buffalo Police detective has been hit with a superseding federal indictment for allegedly attempting to purchase stolen credentials from an illicit online marketplace known as Ge

• Hundreds of Thousands Affected by Auchan Data Breach

  French retail chain Auchan is notifying hundreds of thousands of customers that their personal information was stolen in a data breach. The incident, the company said in notificati

• CISA Adds Three Exploited Vulnerabilities to KEV Catalog Affecting Citrix and Git

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQovp4NUQStz0J2-9opIt-GbPMh1-snoRseEJWeBdVMlBFVpFPAEX83AkzUhpdxst6kYzk9bmMta4LLsZYrI8bBFSsoTw0PRF7x1-oR1pEotAfy3y8jqul

• Google to Add New Layer of Developer Verification to Distribute Apps on Play Store

  Android’s open ecosystem has been both its greatest strength and a persistent security challenge. While sideloading offers developers and users unparalleled freedom, it has also be

• Massive Cyberattack Hits Italian Hotels: Tens of Thousands of Passports Stolen and Sold on the Dark Web

  The Italian Agency for Digitalization (Agid) has confirmed a large-scale cyberattack targeting hotel servers across Italy. Tens of thousands of high-resolution scans of identificat

• AI Systems Vulnerable to Prompt Injection via Image Scaling Attack

  Researchers have shown how popular AI systems can be tricked into processing malicious instructions through an indirect prompt injection attack that involves image scaling. Image s

• Google to Verify All Android Developers in 4 Countries to Block Malicious Apps

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOamSW4uN3Qiu7IsNS2F304qYQG1ffstSSRQBTVJByHgfZ81IBFQOS8COrSefbfVqGmh9AIp9C6mmPEIwUMzgw26mQcGawj14vSVvdACSRF895qsTvt7I8

• AccuKnox Awarded Patent for Runtime Security of Kernel Events

  AccuKnox, a leader in Zero Trust Kubernetes and cloud-native security solutions, has been issued a patent \[US Patent 12,242,629 – full PDF copy available\] by the U.S. Patent and

• Indo-U.S. Agencies Dismantle Cybercrime Network Targeting U.S. Nationals

  India’s Central Bureau of Investigation (CBI) has dismantled a transnational cybercrime ring accused of defrauding US nationals of more than $40 million, in a joint effort with the

• HOOK Android Trojan Adds Ransomware Overlays, Expands to 107 Remote Commands

  HOOK Android Trojan Cybersecurity researchers have discovered a new variant of an Android banking trojan called HOOK that features ransomware-style overlay screens to display extor

• Docker Desktop Vulnerability Leads to Host Compromise

  A critical vulnerability in Docker Desktop allows attackers to control containers, mount the host’s file system, and modify it to escalate their privileges to those of an administr

• CISA Warns of Git Arbitrary File Write Vulnerability Exploited in Attacks

  CISA has issued a high-severity warning for CVE-2025-48384, a link-following vulnerability in Git that enables arbitrary file writes via misconfigured carriage return handling in c

• ShadowCaptcha Exploits WordPress Sites to Spread Ransomware, Info Stealers, and Crypto Miners

  Exploits WordPress Sites to Spread Ransomware A new large-scale campaign has been observed exploiting over 100 compromised WordPress sites to direct site visitors to fake CAPTCHA v

• Healthcare Services Group Data Breach Impacts 624,000

  Healthcare Services Group is notifying over 624,000 individuals that their personal information was stolen in a data breach. The incident, the organization says, was identified on

• Aembit Extends Secretless CI/CD with Credential Lifecycle Management for GitLab

  Aembit, the workload identity and access management (IAM) company, today announced new capabilities for GitLab designed to reduce the security risks of long-lived personal access t

• Cyber Insurers Might Not Pay if Vulnerabilities Unpatched

  A cyber insurance provider is taking issue with competitors that won’t pay claims resulting from unpatched vulnerabilities. In a recent LinkedIn post, cyber insurer Coalition said

• AI-Driven Trends in Endpoint Security: What the 2025 Gartner® Magic Quadrant™ Reveals

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRnuZtuhhd4JQVPRphZntyGJPVTW-pNxKPCLtBZQfISSkilafWacRYdzNAM82pW4k5Mn9UYwanbePOAAvlTJNnxo5K04OZ0W6b7VWW5cSj7DMFqWPDJ6UV

• Beyond the Prompt: Building Trustworthy Agent Systems

  We’re witnessing the quiet rise of the agent ecosystem – systems built not just to answer questions, but to plan, reason, and execute complex tasks. Tools like GPT-4, Claude, and G

• Microsoft Unveils New Tool to Migrate VMware Virtual Machines From vCenter to Hyper-V

  Microsoft has released a new VM Conversion extension for Windows Admin Center, designed to streamline the migration of VMware virtual machines from vCenter to Hyper-V environments.

• China-Linked Espionage Campaign Hijacks Web Traffic to Target Diplomats

  Google’s Threat Intelligence Group has uncovered a cyber espionage campaign of a PRC-linked threat actor, which it tracks as UNC6384, using captive portals and adversary-in-the-mid

• MixShell Malware Delivered via Contact Forms Targets U.S. Supply Chain Manufacturers

  U.S. Supply Chain Manufacturers Cybersecurity researchers are calling attention to a sophisticated social engineering campaign that's targeting supply chain-critical manufacturing

• Online PDF Editors Safe to Use? Detailed Analysis of Security Risks Associated With It

  Online PDF editors have become common tools for quick document manipulation, providing convenient alternatives to desktop software. However, their cloud-based nature brings signifi

• Microsoft Confirms August 2025 Update Causes Severe Lag in Windows 11 24H2, and Windows 10

  Microsoft has officially confirmed that its August 2025 security update is causing significant performance problems for users of NDI (Network Device Interface) technology. Content

• 20 Best Network Monitoring Tools in 2025

  A network monitoring tool is software or hardware that helps businesses monitor their computer networks and learn more about their security, health, and performance. These tools re

• Microsoft 365 Exchange Online Outage Blocks Email on Outlook Mobile App

  Microsoft is investigating a significant service incident within Exchange Online, identified as EX1137017, which is preventing some users from sending or receiving emails through t

• Hundreds of Thousands of Users’ Grok Chats Exposed in Google Search Results

  A significant data exposure has revealed hundreds of thousands of private user conversations with Elon Musk’s AI chatbot, Grok, in public search engine results. The incident, stemm

• New Gmail Phishing Attack Uses AI Prompt Injection to Evade Detection

  Phishing has always been about deceiving people. But in this campaign, the attackers weren’t only targeting users; they also attempted to manipulate AI-based defenses. This is an e

• New HTTP Smuggling Attack Technique Let Hackers Inject Malicious Requests

  A sophisticated HTTP request smuggling attack that exploits inconsistent parsing behaviors between front-end proxy servers and back-end application servers. This newly discovered t

• Help TDS Weaponize Legitimate Sites’ PHP Code Templates With Fake Microsoft Windows Security Alert Pages

  A sophisticated traffic direction system known as Help TDS has been weaponizing compromised websites since 2017, transforming legitimate sites into gateways for elaborate tech supp

• CISA Warns of Apple iOS, iPadOS, and macOS 0-day Vulnerability Exploited in Attacks

  CISA has issued an urgent warning regarding a critical zero-day vulnerability affecting Apple’s iOS, iPadOS, and macOS operating systems that threat actors are actively exploiting.

• Hackers Abuse VPS Servers To Compromise Software-as-a-service (SaaS) Accounts

  Cybercriminals are increasingly leveraging Virtual Private Server (VPS) infrastructure to orchestrate sophisticated attacks against Software-as-a-Service (SaaS) platforms, exploiti

• Chinese MURKY PANDA Attacking Government and Professional Services Entities

  A sophisticated China-nexus threat actor designated MURKY PANDA has emerged as a significant cybersecurity concern, conducting extensive cyberespionage operations against governmen

• Linux Malware Delivered via Malicious RAR Filenames Evades Antivirus Detection

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2VrTT9RQBJaptTjv9tgaDp5BnGNaPo3oqBDGhwFrbqp2m1mre29vtcu8BGSN2qmc-7fT5UQulCE2PrNa5yvjxAaWZfgMoSeL1phgVbzawZ1SwujoqKf4P

• Hackers Can Exfiltrate Windows Secrets and Credentials Silently by Evading EDR Detection

  A method to silently exfiltrate Windows secrets and credentials, evading detection from most Endpoint Detection and Response (EDR) solutions. This technique allows attackers who ha

• Large Interpol Cybercrime Crackdown in Africa Leads to the Arrest of Over 1,200 Suspects

  A major cybercrime crackdown coordinated by Interpol has led to the arrest of 1,209 suspects across Africa and the recovery of nearly $97.4 million, the organization announced Frid

• China-linked Silk Typhoon Hackers Target SaaS Providers, Zero Days

  The China-linked advanced persistent threat (APT) group Silk Typhoon has shown a rare ability to compromise trusted relationships in the cloud. That’s one of the key takeaways from

• GeoServer Exploits, PolarEdge, and Gayfemboy Push Cybercrime Beyond Traditional Botnets

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcCcnMqrg0InxGnhlbgRJiabtjXU8hoVU2BvnCUJqD5GaIGgW6Rw5u2DIjZq-MfX16KgWLsvFgWoWqNWaxDZeAHEVCPmJkWyNZV2IbFvMaCSdDG9GZ5Zb9

• Microsoft to Limit Onmicrosoft Domain Usage for Sending Emails

  Microsoft has announced significant restrictions on email sending capabilities for organizations using default onmicrosoft.com domains, implementing a throttling system that limits

• Critical Chrome Flaw CVE‑2025‑9132 Exposes Browsers to Remote Code Execution

  The Hong Kong Computer Emergency Response Team Coordination Center issued an alert regarding a remote code execution flaw in Google Chrome. The Chrome team reported the same vulner

• Europol Says $50k Reward on Qilin Ransomware Group Admins is Fake

  About Us Contact Us Editorial Calendar Careers The Cyber Express by Cyble Vulnerability Disclosure Policy Cyble Trust Portal The Cyber Express MagazineDownload Firewall Daily All B

• Russia’s FSB-Linked Hackers Targeting Cisco Network Gear Used in Critical Infrastructure

  About Us Contact Us Editorial Calendar Careers The Cyber Express by Cyble Vulnerability Disclosure Policy Cyble Trust Portal The Cyber Express MagazineDownload Firewall Daily All B

• DOM-Based Extension Clickjacking Exposes Millions of Password Manager Users to Credential Theft

  About Us Contact Us Editorial Calendar Careers The Cyber Express by Cyble Vulnerability Disclosure Policy Cyble Trust Portal The Cyber Express MagazineDownload Firewall Daily All B

• Apple Patches Zero-Day in iOS 18.6.2 After Targeted Exploits Involving Malicious Image Files

  About Us Contact Us Editorial Calendar Careers The Cyber Express by Cyble Vulnerability Disclosure Policy Cyble Trust Portal The Cyber Express MagazineDownload Firewall Daily All B

• Critical Vulnerability in Docker Desktop Allows Malicious Containers to Access Host System

  About Us Contact Us Editorial Calendar Careers The Cyber Express by Cyble Vulnerability Disclosure Policy Cyble Trust Portal The Cyber Express MagazineDownload Firewall Daily All B

• Black Hat USA 2025 CISO Podcast Series: Episode 2 Now Live

  About Us Contact Us Editorial Calendar Careers The Cyber Express by Cyble Vulnerability Disclosure Policy Cyble Trust Portal The Cyber Express MagazineDownload Firewall Daily All B

• CISA Warns of Critical ICS Flaws in Siemens, Tigo Energy, and EG4 Equipment

  About Us Contact Us Editorial Calendar Careers The Cyber Express by Cyble Vulnerability Disclosure Policy Cyble Trust Portal The Cyber Express MagazineDownload Firewall Daily All B

• 70,000 WordPress Sites Exposed by Inspiro Theme Security Flaw

  About Us Contact Us Editorial Calendar Careers The Cyber Express by Cyble Vulnerability Disclosure Policy Cyble Trust Portal The Cyber Express MagazineDownload Firewall Daily All B

• African Authorities Arrest 1,200 People, Seize Millions in Massive Cybercrime and Fraud Networks’ Bust

  About Us Contact Us Editorial Calendar Careers The Cyber Express by Cyble Vulnerability Disclosure Policy Cyble Trust Portal The Cyber Express MagazineDownload Firewall Daily All B

• New Cryptojacking Attack Exploits Redis Servers to Install Miners and Disable Defenses

  A sophisticated cryptojacking campaign has emerged, exploiting misconfigured Redis servers across multiple continents to deploy cryptocurrency miners while systematically dismantli

• NIST Releases Control Overlays to Manage Cybersecurity Risks in Use and Developments of AI Systems

  The National Institute of Standards and Technology (NIST) has unveiled a comprehensive concept paper outlining proposed NIST SP 800-53 Control Overlays for Securing AI Systems, mar

• UAC-0057 Hackers Weaponizing PDF Invitation Files to Execute Shell Scripts

  A sophisticated cyber espionage campaign has emerged targeting Ukrainian and Polish organizations through weaponized PDF invitation files designed to execute malicious shell script

• Windows Docker Desktop Vulnerability Leads to Full Host Compromise

  A newly disclosed vulnerability in Docker Desktop for Windows has revealed how a simple Server-Side Request Forgery (SSRF) attack could lead to complete host system compromise. CVE

• South Asian APT Hackers Using Novel Tools to Compromise Phones of Military-Adjacent Members

  A sophisticated South Asian Advanced Persistent Threat (APT) group has been conducting an extensive espionage campaign targeting military personnel and defense organizations across

• INTERPOL Arrests 1,209 Cybercriminals Across 18 African Nations in Global Crackdown

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhjWXAYbMHXJZ6a2c-yOm8fqBzD9HuiiXSK4Sgla-Q7z6D8NBr1-c-fY8wMxYpdVnQf2pK-gT3FzfvY754irjh8f0-n4hyphenhyphenmYY77uwJyx3kWk

• Developer Who Hacked Former Employer’s Systems Sentenced to Prison

  A Chinese national was sentenced to four years in prison for sabotaging his former employer’s systems through malicious code. The man, Davis Lu, 55, a legal resident of Houston, Te

• Malicious Go Module Package as Fast SSH Brute Forcer Exfiltrates Passwords via Telegram

  A sophisticated supply chain attack has emerged targeting developers through a malicious Go module package that masquerades as a legitimate SSH brute forcing tool while covertly st

• Automation Is Redefining Pentest Delivery

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjp0xQGn7RhsRIT6CSEEd9ZhAHfJbEnb3RyhGWS0wj169r0e2LSiXpqeVvP8uQZlmVUCak0BiOQ2UhBVJV0rxoyvoDVYxDzobggA9LLyXaNl7LoFohF3eeS

• Chinese Silk Typhoon Hackers Exploited Commvault Zero-Day

  Chinese state-sponsored hacking group Silk Typhoon has been intensifying its attacks against entities in North America, CrowdStrike says. The APT, which has been blamed for the 202

• BQTLOCK Ransomware Operates as RaaS With Advanced Evasion Techniques

  A sophisticated new ransomware strain named BQTLOCK has emerged in the cyberthreat landscape since mid-July 2025, operating under a comprehensive Ransomware-as-a-Service (RaaS) mod

• In Other News: McDonald’s Hack, 1,200 Arrested in Africa, DaVita Breach Grows to 2.7M

  SecurityWeek’s cybersecurity news roundup provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a valuable summary of stories tha

• Chinese Hackers Murky, Genesis, and Glacial Panda Escalate Cloud and Telecom Espionage

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjI7LhdZrfHdvNIWAe3KrnQnkgy-WHWNfhTv1mG7Yv-rlKXtmXEvqf39-L1mtrf2TARYJFL9kfsQR5BpVFv9avvaK85vWWFOm1rcrF5OI0Oz6WTiu2VVtzq

• Lumma Affiliates Using Advanced Evasion Tools Designed to Ensure Stealth and Continuity

  The Lumma information stealer has evolved from its 2022 origins into one of the most sophisticated malware-as-a-service (MaaS) ecosystems in the cybercriminal landscape. Operating

• The Ultimate Battle: Enterprise Browsers vs. Secure Browser Extensions

  Enterprise Browsers vs. Secure Browser Extensions Most security tools can't see what happens inside the browser, but that's where the majority of work, and risk, now lives. Securit

• New ‘Curly COMrades’ APT Using NGEN COM Hijacking in Georgia, Moldova Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh5tCNabpGIibUaFVEXFDFsxFfz-2BpIqJPPeWdQvsUCd-Znm3DoxTzC025iFdRKqHmjfv2gbpetKWi93HTG-R1WP7tBolGfZY-Er6tTAY3dPpV-Olvin8L

• Cybercrime Groups ShinyHunters, Scattered Spider Join Forces in Extortion Attacks on Businesses

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj98Sa8JphqrBDjQPrIs3yGObQffkaucMBFJH1eO7jFvqZSOQH1b1HwAEOvaMTBSWZ1MRtqSCWzndyQpRpsXOFQHnZve4VqmYFtjNjgAYqZIfX8pLqxaR9Q

• Fortinet SSL VPNs Hit by Global Brute-Force Wave Before Attackers Shift to FortiManager

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrEMbHTYM3BGdWTNDNB1t2ExuWZ2wkRWViLkCW4V3tG9hDbMQ81Z0g-Sp8WzaZi5-s3wL7V7A8vDxIh6-Qsedy8STadCsneZ3CvyZ3hGNLknHxiYpqnCZN

• Researchers Spot XZ Utils Backdoor in Dozens of Docker Hub Images, Fueling Supply Chain Risks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhlx4HJDVqoAicklUmY5-7Ddt7tGPfhyvC7NwtRS2qwQuxm-lNNZ4F1ZEVIZZqoVeJXAMb5YPIhG8fFZ0Nyi8NZy740DlsrFdoT-zjXoRCjP05ZOmVoEgBS

• Charon Ransomware Hits Middle East Sectors Using APT-Level Evasion Tactics

  Charon Ransomware Cybersecurity researchers have discovered a new campaign that employs a previously undocumented ransomware family called Charon to target the Middle East's public

• Microsoft August 2025 Patch Tuesday Fixes Kerberos Zero-Day Among 111 Total New Flaws

  August 2025 Patch Tuesday Microsoft on Tuesday rolled out fixes for a massive set of 111 security flaws across its software portfolio, including one flaw that has been disclosed as

• Webinar: What the Next Wave of AI Cyberattacks Will Look Like — And How to Survive

  [](https://thehacker.news/ai-attack-surface?source=article) The AI revolution isn't coming. It's already here. From copilots that write our emails to autonomous agents that can tak

• AI SOC 101: Key Capabilities Security Leaders Need to Know

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUEMkuJwgTici30KHyrmYyvA6xo4ItEkOhyMrXMY36aG61XJs6MQJOqnZ44Sqf1vDZPq4ZGlsHhbtPCScnZu0ukUKyDADrwYOOZzZw1ztC4tU1HoMHziBH

• Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code

  FortiSIEM Vulnerability (CVE-2025-25256)") Fortinet is alerting customers of a critical security flaw in FortiSIEM for which it said there exists an exploit in the wild. The vulner

• Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE Flaws

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEha2BURnd9EZHiBtdwvpmovsvT8uqUgGB2Wy-wafrWB8ZFmNliJ7Vvb3XQpmYQ0gCgI-gRasZ-IItc6Bf4P39mQ9odhekagkyBKDWLezbNZfnwKTOOTKXFC

• New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDaTwvKbuc0gqYyWkwbooqY7VDDYCNRsSAv7U2-YcJgSBltJtOw6pfFIyQpXpOWGLPuWjtWTgNl1-ErK6SM6DJsBoCz6FxPKL6FE6HwAevCH4cx8YjrFua

• CISA Adds Two N-able N-central Flaws to Known Exploited Vulnerabilities Catalog

  Known Exploited Vulnerabilities Catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws impacting N-able N-central to its Kno

• Google Requires Crypto App Licenses in 15 Regions as FBI Warns of $9.9M Scam Losses

  Google Requires Crypto App Licenses Google said it's implementing a new policy requiring developers of cryptocurrency exchanges and wallets to obtain government licenses before pub

• Simple Steps for Attack Surface Reduction

  Attack Surface Reduction Story teaser text: Cybersecurity leaders face mounting pressure to stop attacks before they start, and the best defense may come down to the settings you c

• New Android Malware Wave Hits Banking via NFC Relay Fraud, Call Hijacking, and Root Exploits

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPYc1Mf9jKG7gepf7pL5OlUGl9FD2eIxdkpWeUd1ATrru9kGttCduHZljPmkyEBuLOxuL6K4y4SrJVLEEQ2kEwVrIaeh-imemuiW6SMhKhqmxNxXgvEyID

• Have You Turned Off Your Virtual Oven?

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhua6BTLyMFafG-iEYTfqBPrz-I0bFPd4l4E0mgLNaPryqfFndfNHeBg9rfCDOGuItndPTwhWSRvxPRXgo52K4ZDXBQoRLGHeQsq-yMM6W9SmqMb39zJJ4N

• Hackers Found Using CrossC2 to Expand Cobalt Strike Beacon’s Reach to Linux and macOS

  CrossC2 Expands Cobalt Strike Japan's CERT coordination center (JPCERT/CC) on Thursday revealed it observed incidents that involved the use of a command-and-control (C2) framework

• New HTTP/2 'MadeYouReset' Vulnerability Enables Large-Scale DoS Attacks

  New HTTP/2 'MadeYouReset' Vulnerability Multiple HTTP/2 implementations have been found susceptible to a new attack technique called MadeYouReset that could be explored to conduct

• Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikiELTSHyWHi7CSFi6tYtpffVVvHCmkPhCmPVocvkSuRS54UnTJ9IZUpKS88W021yRHJrtjQw24uS6-zkLCcxJHT959CPDLmMm27WCb98N3lBJl1rMl5fw

• Zero Trust + AI: Privacy in the Age of Agentic AI

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKzdrz7HCdYdW7xvYOABMgaPmv0nYglTqKwGteEjDw-DmupwflT4W9bHLjXEVVBylhRcqdnP7ZY0c1bKL2VPlXpyfqY5eWPR6py-LwOIqUz11mV-7YIEOb

• U.S. Sanctions Garantex and Grinex Over $100M in Ransomware-Linked Illicit Crypto Transactions

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNC07IzPSEWHsctp6tSbsNFBZSScB7NQY9qX1pwHI8s1bli0KVwkebm2OmJpBG4CIMD7x09PlLrsmiHgekuZLdcplO-cMS3CaEa191w4TSnrLAwizaNRrp

• Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools

  Open-Source Hacking Tools A Chinese-speaking advanced persistent threat (APT) actor has been observed targeting web infrastructure entities in Taiwan using customized versions of o

• Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware

  EncryptHub Exploits MSC EvilTwin Vulnerability The threat actor known as EncryptHub is continuing to exploit a now-patched security flaw impacting Microsoft Windows to deliver mali

• ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkDEdTz5dBgOpCrQHwQ2O2-hdB3qJYhppKRK8mspd39utoS2qwAlMb-AC-L118htQGhvphdQh0z9aAOiQ5Nx7mSEgxBgfbPYbLEuKAIRN0lzBCwURf2KAx

• Wazuh for Regulatory Compliance

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4CvIKJvOfWEEVXZ9aqKa8JSrjFhXbikc59uAJj8ofuOvKYefv7WONYuHVl4DWxuDKqXo4m6HLto-f4m3dJ7jI1jb-ZQb0bcinBBHCjQBqfGG0-6Hkq7ZT

• Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVsQYKjexzkMnch22MOTvXSwDN6onx14trYKhLvwcZcHEW2ElmUO0XW54awgmKvUpGtoqlC5fgIUzKQLKBGEiyVA2euYrQssz-dqOtnNlIdB1XMMGiaO9X

• ⚡ Weekly Recap: NFC Fraud, Curly COMrades, N-able Exploits, Docker Backdoors & More

  Weekly Recap Power doesn't just disappear in one big breach. It slips away in the small stuff—a patch that's missed, a setting that's wrong, a system no one is watching. Security u

• Microsoft Windows Vulnerability Exploited to Deploy PipeMagic RansomExx Malware

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8PWAn17K3NBQOtKMmVF0aytbVViq4MDboabGih3GsBZWmpdSmB1v0-CTat7nNAkLVMcff3JxNjZcDeGl4YL21qgxTe0yN-vcsGBMPCZFqd2e2xTOzngRu

• Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgERvrMD0i9urT4i9QAP8zTcCKEVQlstfw0qWIR5Qq8AeFasV6iJHoZAawueR6s9bHQ3dZj6Qm9kPPHP3mjgitp9DQ-CvqWyQDuXEqp03KCpxSnfkYLK50x

• PyPI Blocks 1,800 Expired-Domain Emails to Prevent Account Takeovers and Supply Chain Attacks

  Expired-Domain Emails The maintainers of the Python Package Index (PyPI) repository have announced that the package manager now checks for expired domains to prevent supply chain a

• Why Your Security Culture is Critical to Mitigating Cyber Risk

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikj0t94bTKTEW3B5NkBgd32IWTlrSlxtlpNehmXawcJlFJnpF5WozSEoy0mN-RoXK9DXNeh4FTCquXbNUtKnwiMukpWTOn9mE4jSLudnqC1zkWokAWuXv9

• U.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties Pushback

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilT1TyTz6CxzFc48E714QdOSlrJDwfGGuTRqwGY0pVKp8dRXIdc9eba-E8qb2vWemXqUZArOCpBspMk8Ry0f6LaNZdLYBqj4n0dTKYidHIfiYwxzqUITbx

• Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUIAg6-6xvngNpsDACirnnYY8fdExWFUhb7SLUdORIxO21DNeWABffHISoWKMT7p05jv3ovNs0r7IQtkWvfeKGhBJGtsV0eE-TZDJ6gpxIjV-scUsiyyc4

• New GodRAT Trojan Targets Trading Firms Using Steganography and Gh0st RAT Code

  Steganography and Gh0st RAT Code Financial institutions like trading and brokerage firms are the target of a new campaign that delivers a previously unreported remote access trojan

• Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiolpI1JCim4Tq4vF9ga4h9hCoxclnoW-bT8LLJxmy28H0KjL-XoVvN2L4jXic510GLokL-t8hzxZcfyd4AR3CdglFrnX4PgYGYMx92OXNJK96t29lOWu7P

• DOJ Charges 22-Year-Old for Running RapperBot Botnet Behind 370,000 DDoS Attacks

  RapperBot Botnet A 22-year-old man from the U.S. state of Oregon has been charged with allegedly developing and overseeing a distributed denial-of-service (DDoS)-for-hire botnet ca

• North Korea Uses GitHub in Diplomat Cyber Attacks as IT Worker Scheme Hits 320+ Firms

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaFqPEijE5RkgBG-Yxd25JY3N4pTzdCj-PTwuKg-mHi5ZR-BfH-22ZHQHl8YUpDDqfzQVlQu-X94QUohgVzA9bdx0ACqnLYbJP2YPYvqoiV-7bul8hRjMU

• From Impact to Action: Turning BIA Insights Into Resilient Recovery

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCyXWpIZTLvnq1-AYcNvPeDyZnQbGtBLVtwMGJs9TAeM-WD3FHFK9t2C7MQu0hOGE7KrPzDruNYa99q3AK3KbKTPwVHOQ6gGDkAa7XTXYiajW-Jrb2N4AM

• Experts Find AI Browsers Can Be Tricked by PromptFix Exploit to Run Malicious Hidden Prompts

  Comet AI Browser Cybersecurity researchers have demonstrated a new prompt injection technique called PromptFix that tricks a generative artificial intelligence (GenAI) model into c

• Apple Patches Zero-Day Exploited in Targeted Attacks

  Apple on Wednesday rushed security updates across its mobile and desktop operating systems to resolve a zero-day vulnerability exploited in highly targeted attacks. Tracked as CVE-

• FBI Warns FSB-Linked Hackers Exploiting Unpatched Cisco Devices for Cyber Espionage

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjsB55EZlFkQ8AgCYnCRIs-wtmupP6NYmicWHNjwi3Fmzy9A-YysIAwqwDsbhJP0nxUsiDi7JDVMcAXGqWeHw5IfTByj9p5sgbR7Kz23DnnooCeUNFBhom

• Orange Belgium Data Breach Impacts 850,000 Customers

  Orange Belgium on Wednesday announced 850,000 customer accounts were impacted by a July data breach. The telecoms company said it identified the incident in late July, and it immed

• 🕵️ Webinar: Discover and Control Shadow AI Agents in Your Enterprise Before Hackers Do

  [](https://thehacker.news/shadow-ai-agents-threats?source=article) Do you know how many AI agents are running inside your business right now? If the answer is "not sure," you're no

• Threat Actors Abuse AI Website Creation App to Deliver Malware

  Cybercriminals have discovered a new avenue for malicious activities by exploiting Lovable, an AI-powered website creation platform, to develop sophisticated phishing campaigns and

• Russian APT Exploiting 7-Year-Old Cisco Vulnerability: FBI

  For years, a Russian state-sponsored threat actor has been exploiting an old vulnerability in Cisco networking devices to collect configuration information, Cisco and the FBI warn.

• DOM-Based Extension Clickjacking Exposes Popular Password Managers to Credential and Data Theft

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEis8s2AE2HL9hSh59LP2ylzs5MHDhwBvrz3osuRARB4BpzRakMQnL4b5FJtFiHJsBv8w1JWNQ9d2uv932WVPoWKjMJbatN4Oprl-eA2bN3QM8G3xdbB1g0-

• Hackers Weaponize QR Codes Embedded with Malicious Links to Steal Sensitive Information

  Cybersecurity researchers have observed a surge in phishing campaigns leveraging QR codes to deliver malicious payloads. This emerging threat, often dubbed “quishing,” exploits the

• Password Managers Vulnerable to Data Theft via Clickjacking

  A researcher has tested nearly a dozen password managers and found that they were all vulnerable to clickjacking attacks that could lead to the theft of highly sensitive data. The

• Threat Actors Gaining Access to Victims’ Machines and Monetizing Access to Their Bandwidth

  A stealthy campaign emerged in early March 2025 that capitalized on a critical remote code execution flaw in GeoServer (CVE-2024-36401) to compromise publicly exposed geospatial se

• Apple Patches CVE-2025-43300 Zero-Day in iOS, iPadOS, and macOS Exploited in Targeted Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7OE5srk2VWSOyGR3jyqMzEueFqJJe2RPFKO43FSejcZDMvFrA5U6wrgXXlUASSPro7iLlZBBIquShpsPpHnVjblcuO8OR6G9OhMooRPvEsSgxENisFY7l

• Scattered Spider Hacker Sentenced to Prison

  A Florida man was sentenced to 120 months in prison for his role in the notorious cybercrime group Scattered Spider. The individual, Noah Michael Urban, 20, of Palm Coast, Florida,

• ChatGPT-5 Downgrade Attack Let Hackers Bypass AI Security With Just a Few Words

  A critical vulnerability in OpenAI’s latest flagship model, ChatGPT-5, allows attackers to sidestep its advanced safety features using simple phrases. The flaw, dubbed “PROMISQROUT

• Scattered Spider Hacker Gets 10 Years, $13M Restitution for SIM Swapping Crypto Theft

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYJuefOT1mDRi69U7WLLeVEizlDo7Y-aCpGsInEpVC3aXtOY-2ZybyEjPX1cCqjo6JU8pIFij4BLEz5qW4nALM92vjrJVxhZaQGb9jahy8shsMuflURoOl

• Telecom Firm Colt Confirms Data Breach as Ransomware Group Auctions Files

  UK-based multinational telecom firm Colt Technology Services confirmed on Thursday that hackers have taken some data from its systems. Colt provides network, voice, and other servi

• AI Systems Can Generate Working Exploits for Published CVEs in 10-15 Minutes

  Artificial intelligence systems can automatically generate functional exploits for newly published Common Vulnerabilities and Exposures (CVEs) in just 10-15 minutes at approximatel

• Hackers Using New QuirkyLoader Malware to Spread Agent Tesla, AsyncRAT and Snake Keylogger

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOLfENKAfbcUX8nakYQ5CQ6QFXVK76CqY2raylZ3uo8dh1SFOrhDfGQ4hmeSQaB2RZWVcjwLAEEe6Mtent2RUGwZVdHDxo7ueLRYotlGW83m6FRZc4NQEl

• Anatsa Malware Attacking Android Devices to Steal Login Credentials and Monitor Keystrokes

  The Anatsa banking trojan, also known as TeaBot, continues to evolve as one of the most sophisticated Android malware threats targeting financial institutions worldwide. First disc

• MITRE Updates List of Most Common Hardware Weaknesses

  The non-profit MITRE Corporation this week published a revised CWE Most Important Hardware Weaknesses (MIHW) to align it with the evolution of the hardware security landscape. Init

• Weak Passwords and Compromised Accounts: Key Findings from the Blue Report 2025

  [](https://hubs.ly/Q03CLGfh0) As security professionals, it's easy to get caught up in a race to counter the latest advanced adversary techniques. Yet the most impactful attacks of

• New Linux Malware With Weaponized RAR Archive Deploys VShell Backdoor

  Linux environments, long considered bastions of security, are facing a sophisticated new threat that challenges traditional assumptions about operating system safety. A recently di

• Hundreds Targeted in New Atomic macOS Stealer Campaign

  CrowdStrike warns of a spike in attacks aimed at infecting macOS users with a variant of the infamous Atomic macOS Stealer (AMOS) information stealer. Between June and August, the

• Cybercriminals Deploy CORNFLAKE.V3 Backdoor via ClickFix Tactic and Fake CAPTCHA Pages

  Fake CAPTCHA Pages Threat actors have been observed leveraging the deceptive social engineering tactic known as ClickFix to deploy a versatile backdoor codenamed CORNFLAKE.V3. Goog

• Microsoft Warns of Hackers Using ClickFix Technique to Attack Windows and macOS Devices

  Cybersecurity researchers have identified a sophisticated social engineering technique called ClickFix that has been rapidly gaining traction among threat actors since early 2024.

• AWS Trusted Advisor Tricked Into Showing Unprotected S3 Buckets as Secure

  AWS has addressed a weakness that could have been leveraged by attackers to prevent AWS Trusted Advisor from flagging unprotected S3 buckets as a risk. AWS Trusted Advisor is desig

• Pre-Auth Exploit Chains Found in Commvault Could Enable Remote Code Execution Attacks

  [](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdwjHA2AQLHrSRmHR2WKprC-3BnNSfdu5D1uDAB8aj0d61mf1xs0TIWBZFBBEjnG8eMsHB5AsoaXxnMXXzlD9Ura-GFTkmKaND90EqLQUTgeb0Vh476pVb

• Azure’s Default API Connection Vulnerability Enables Full Cross-Tenant Compromise

  A critical vulnerability in Microsoft Azure’s API Connection infrastructure enabled attackers to compromise resources across different Azure tenants worldwide. The flaw, which earn

• CPAP Medical Data Breach Impacts 90,000 People

  Healthcare services provider CPAP Medical Supplies and Services is informing tens of thousands of people that their personal and health information has been compromised. Florida-ba

• Ex-Developer Jailed Four Years for Sabotaging Ohio Employer with Kill-Switch Malware

  Kill-Switch Malware A 55-year-old Chinese national has been sentenced to four years in prison and three years of supervised release for sabotaging his former employer's network wit

• Colt Confirms Customer Data Stolen in Ransomware Attack

  Telecommunications giant Colt Technology Services has confirmed that customer data was compromised in a sophisticated cyber attack that began on August 12, 2025. The company disclo

• Các lỗ hổng của Cisco, Hitachi, Microsoft và Progress đang bị khai thác tích cực—CISA cảnh báo

  Cơ quan An ninh mạng và Cơ sở hạ tầng Hoa Kỳ (CISA) hôm thứ Hai đã thêm năm lỗ hổng bảo mật ảnh hưởng đến phần mềm của Cisco, Hitachi Vantara, Microsoft Windows và Progress WhatsUp

• Bản cập nhật bảo mật Android tháng 3 năm 2025 của Google khắc phục hai lỗ hổng đang bị khai thác tích cực

  Google đã phát hành Bản tin bảo mật Android hàng tháng cho tháng 3 năm 2025 để giải quyết tổng cộng 44 lỗ hổng bảo mật, bao gồm hai lỗ hổng mà Google cho biết đã bị khai thác tích

• Các lỗ hổng OpenSSH mới cho phép tấn công Man-in-the-Middle và DoS

  Hai lỗ hổng bảo mật đã được phát hiện trong bộ tiện ích mạng an toàn OpenSSH, nếu khai thác thành công, có thể dẫn đến tấn công máy trung gian (MitM) và tấn công từ chối dịch vụ (D

• Lỗ hổng PostgreSQL bị khai thác cùng với BeyondTrust Zero-Day trong các cuộc tấn công có mục tiêu

  Theo phát hiện của Rapid7, những tác nhân đe dọa đứng sau vụ khai thác lỗ hổng zero-day trong các sản phẩm BeyondTrust Privileged Remote Access (PRA) và Remote Support (RS) vào thá

• Tin tặc sử dụng thủ thuật CAPTCHA trên PDF Webflow CDN để vượt qua máy quét bảo mật

  Một chiến dịch lừa đảo lan rộng đã được phát hiện sử dụng các tài liệu PDF giả mạo được lưu trữ trên mạng phân phối nội dung (CDN) Webflow với mục đích đánh cắp thông tin thẻ tín d

• Apple vá lỗi iOS Zero-Day CVE-2025-24200 đã được khai thác tích cực trong bản cập nhật khẩn cấp

  Hôm thứ Hai, Apple đã phát hành bản cập nhật bảo mật ngoài luồng để giải quyết lỗ hổng bảo mật trong iOS và iPadOS mà hãng cho biết đã bị khai thác trên thực tế. iOS Zero-Day Được

• Các nhóm tội phạm mạng của Nga khai thác lỗ hổng 7-Zip để vượt qua các biện pháp bảo vệ MotW của Windows

  Một lỗ hổng bảo mật mới được vá trong công cụ lưu trữ 7-Zip đã bị khai thác để phát tán phần mềm độc hại SmokeLoader . Lỗi 7-Zip Lỗ hổng, CVE-2025-0411 (điểm CVSS: 7.0), cho phép k

• Tin tặc Triều Tiên triển khai phần mềm độc hại FERRET thông qua các cuộc phỏng vấn xin việc giả trên macOS

  Những kẻ đe dọa đến từ Triều Tiên đứng sau chiến dịch Phỏng vấn lây nhiễm đã bị phát hiện phát tán một bộ sưu tập các loại phần mềm độc hại Apple macOS có tên gọi là FERRET như một

• Tường lửa Palo Alto dễ bị tấn công Secure Boot Bypass và khai thác phần mềm hệ thống

  Đánh giá toàn diện ba mô hình tường lửa từ Palo Alto Networks đã phát hiện ra một loạt lỗ hổng bảo mật đã biết ảnh hưởng đến phần mềm của thiết bị cũng như các tính năng bảo mật đư

• Cisco khắc phục lỗi leo thang đặc quyền nghiêm trọng trong quản lý cuộc họp (CVSS 9.9)

  Cisco đã phát hành bản cập nhật phần mềm để giải quyết lỗ hổng bảo mật nghiêm trọng ảnh hưởng đến Quản lý cuộc họp, có thể cho phép kẻ tấn công từ xa đã xác thực có được quyền quản

• Tin tặc khai thác Zero-Day trong bộ định tuyến cnPilot để triển khai botnet DDoS AIRASHI

  Các tác nhân đe dọa đang khai thác lỗ hổng bảo mật zero-day chưa xác định trong bộ định tuyến cnPilot của Cambium Networks để triển khai một biến thể của botnet AISURU có tên là AI

• Oracle phát hành bản vá tháng 1 năm 2025 để giải quyết 318 lỗ hổng trên các sản phẩm chính

  Oracle đang kêu gọi khách hàng áp dụng Bản cập nhật bản vá quan trọng (CPU) tháng 1 năm 2025 để giải quyết 318 lỗ hổng bảo mật mới trên nhiều sản phẩm và dịch vụ của mình. Lỗi nghi

• Biến thể Mirai Murdoc Botnet khai thác Camera IP AVTECH và Bộ định tuyến Huawei

  Các nhà nghiên cứu an ninh mạng đã cảnh báo về một chiến dịch quy mô lớn mới khai thác lỗ hổng bảo mật trong camera IP AVTECH và bộ định tuyến Huawei HG532 để kết nối các thiết bị

• 13.000 bộ định tuyến MikroTik bị Botnet tấn công để phát tán Malspam và tấn công mạng

  Một mạng lưới toàn cầu gồm khoảng 13.000 bộ định tuyến Mikrotik bị chiếm quyền điều khiển đã được sử dụng làm mạng botnet để phát tán phần mềm độc hại thông qua các chiến dịch thư

• Trình tải PNGPlug phân phối phần mềm độc hại ValleyRAT thông qua trình cài đặt phần mềm giả mạo

  Các nhà nghiên cứu an ninh mạng đang cảnh báo về một loạt các cuộc tấn công mạng nhắm vào các khu vực nói tiếng Trung như Hồng Kông, Đài Loan và Trung Quốc đại lục bằng một loại ph

• Các giao thức đường hầm không an toàn làm lộ 4,2 triệu máy chủ, bao gồm cả VPN và bộ định tuyến

  Một nghiên cứu mới đã phát hiện ra lỗ hổng bảo mật trong nhiều giao thức đường hầm có thể cho phép kẻ tấn công thực hiện nhiều loại tấn công khác nhau. Giao thức đường hầm Top10VPN

• Các lỗi nghiêm trọng trong bộ chuyển mạch WGS-804HPT cho phép RCE và khai thác mạng

  Các nhà nghiên cứu an ninh mạng đã tiết lộ ba lỗ hổng bảo mật trong các thiết bị chuyển mạch công nghiệp WGS-804HPT của Planet Technology có thể được kết nối để thực thi mã từ xa x

• Lỗ hổng khởi động an toàn UEFI mới có thể cho phép kẻ tấn công tải Bootkit độc hại

  Thông tin chi tiết về lỗ hổng bảo mật hiện đã được vá có thể cho phép bỏ qua cơ chế Khởi động an toàn trong các hệ thống Giao diện chương trình cơ sở mở rộng hợp nhất (UEFI) đã xuấ

• Phần mềm độc hại dựa trên Python hỗ trợ RansomHub Ransomware khai thác lỗ hổng mạng

  Các nhà nghiên cứu an ninh mạng đã trình bày chi tiết một cuộc tấn công liên quan đến một tác nhân đe dọa sử dụng cửa hậu dựa trên Python để duy trì quyền truy cập liên tục vào các

• Nhà nghiên cứu Google Project Zero phát hiện ra lỗ hổng Zero-Click nhắm vào các thiết bị Samsung

  Các nhà nghiên cứu an ninh mạng đã chỉ ra chi tiết về một lỗ hổng bảo mật hiện đã được vá, ảnh hưởng đến bộ giải mã Monkey's Audio (APE) trên điện thoại thông minh Samsung, có thể

• Các lỗ hổng nghiêm trọng đã được vá trong SonicWall, Palo Alto Expedition và Aviatrix Controllers

  Palo Alto Networks đã phát hành bản vá phần mềm để giải quyết một số lỗ hổng bảo mật trong công cụ di chuyển Expedition, bao gồm một lỗi nghiêm trọng mà kẻ tấn công đã xác thực có

• Biến thể Botnet Mirai khai thác lỗ hổng bộ định tuyến Four-Faith cho các cuộc tấn công DDoS

  Một biến thể botnet Mirai đã được phát hiện đang khai thác lỗ hổng bảo mật mới được tiết lộ ảnh hưởng đến các bộ định tuyến công nghiệp Four-Faith kể từ đầu tháng 11 năm 2024 với m

• Server monitoring với Grafana, Prometheus, Cavisor, Node-exporter và Docker

  Nếu bạn đang ở một level trung trung và đang bắt đầu tập tành chạy các app của mình trên vps/server thì với số lượng nhỏ nhỏ có thể chưa có vấn đề gì. Tuy nhiên khi số lượng lớn có

• Các nhà nghiên cứu phát hiện ra lỗ hổng Nuclei cho phép bỏ qua chữ ký và thực thi mã

  Một lỗ hổng bảo mật nghiêm trọng đã được phát hiện trong Nuclei của ProjectDiscovery , một trình quét lỗ hổng mã nguồn mở được sử dụng rộng rãi. Nếu khai thác thành công, lỗ hổng n

• PLAYFULGHOST được phân phối thông qua lừa đảo và đầu độc SEO trong các ứng dụng VPN bị Trojan hóa

  Các nhà nghiên cứu an ninh mạng đã phát hiện ra một phần mềm độc hại mới có tên là PLAYFULGHOST , có nhiều tính năng thu thập thông tin như ghi lại phím bấm, chụp màn hình, ghi âm

• LDAPNightmare PoC Exploit làm sập LSASS và khởi động lại Windows Domain Controllers

  Một bản khai thác bằng chứng khái niệm (PoC) đã được công bố cho một lỗ hổng bảo mật hiện đã được vá, ảnh hưởng đến Giao thức truy cập thư mục nhẹ của Windows (LDAP) có thể kích ho

• Các lỗ hổng bảo mật nghiêm trọng đã được vá trong Microsoft Dynamics 365 và Power Apps Web API

  Đã xuất hiện thông tin chi tiết về ba lỗ hổng bảo mật hiện đã được vá trong Dynamics 365 và Power Apps Web API có thể dẫn đến rò rỉ dữ liệu. Microsoft Dynamics 365 và Power Apps We

• Gói NPM bị che giấu độc hại được ngụy trang thành công cụ Ethereum triển khai Quasar RAT

  Các nhà nghiên cứu an ninh mạng đã phát hiện ra một gói phần mềm độc hại trên sổ đăng ký gói npm ngụy trang thành một thư viện để phát hiện lỗ hổng trong hợp đồng thông minh Ethere

• Botnet FICORA và Kaiten khai thác lỗ hổng cũ của D-Link để tấn công toàn cầu

  Các nhà nghiên cứu an ninh mạng đang cảnh báo về sự gia tăng các hoạt động độc hại liên quan đến việc kết nối các bộ định tuyến D-Link dễ bị tấn công vào hai mạng botnet khác nhau,

• Kubernetes RBAC được cấu hình sai trong Azure Airflow có thể khiến toàn bộ cụm bị khai thác

  Các nhà nghiên cứu an ninh mạng đã phát hiện ra ba điểm yếu bảo mật trong tích hợp Apache Airflow của Azure Data Factory của Microsoft , nếu khai thác thành công, có thể cho phép k

• 16 tiện ích mở rộng của Chrome bị hack, khiến hơn 600.000 người dùng bị đánh cắp dữ liệu

  Một chiến dịch tấn công mới đã nhắm vào các tiện ích mở rộng đã biết của trình duyệt Chrome, khiến ít nhất 16 tiện ích mở rộng bị xâm phạm và khiến hơn 600.000 người dùng có nguy c

• Palo Alto phát hành bản vá cho lỗ hổng DoS PAN-OS — Cập nhật ngay lập tức

  Palo Alto Networks đã tiết lộ một lỗ hổng nghiêm trọng ảnh hưởng đến phần mềm PAN-OS có thể gây ra tình trạng từ chối dịch vụ (DoS) trên các thiết bị dễ bị tấn công. Lỗ hổng DoS PA

• Apache MINA CVE-2024-52046: Lỗi CVSS 10.0 cho phép RCE thông qua Serialization không an toàn

  Apache Software Foundation (ASF) đã phát hành bản vá để giải quyết lỗ hổng nghiêm trọng nhất trong nền tảng ứng dụng mạng MINA Java có thể dẫn đến thực thi mã từ xa trong các điều

• Lỗ hổng SQL Injection quan trọng trong Apache Traffic Control được đánh giá 9.9 CVSS — Bản vá ngay

  Apache Software Foundation (ASF) đã triển khai các bản cập nhật bảo mật để giải quyết lỗ hổng bảo mật nghiêm trọng trong Traffic Control. Nếu khai thác thành công, lỗ hổng này có t

• Lỗ hổng Apache Tomcat CVE-2024-56337 khiến máy chủ dễ bị tấn công RCE

  Apache Software Foundation (ASF) đã phát hành bản cập nhật bảo mật để giải quyết lỗ hổng quan trọng trong phần mềm máy chủ Tomcat có thể dẫn đến thực thi mã từ xa (RCE) trong một s

• Nhóm Lazarus bị phát hiện nhắm mục tiêu vào các kỹ sư hạt nhân bằng phần mềm độc hại CookiePlus

  Nhóm Lazarus, một tác nhân đe dọa khét tiếng có liên hệ với Cộng hòa Dân chủ Nhân dân Triều Tiên (DPRK), đã bị phát hiện đang tận dụng "chuỗi lây nhiễm phức tạp" nhắm vào ít nhất h

• Tin tặc khai thác lỗ hổng quan trọng của Fortinet EMS để triển khai các công cụ truy cập từ xa

  Một lỗ hổng bảo mật nghiêm trọng hiện đã được vá ảnh hưởng đến Fortinet FortiClient EMS đang bị các tác nhân độc hại khai thác như một phần của chiến dịch mạng cài đặt phần mềm máy

• Fortinet cảnh báo về lỗ hổng nghiêm trọng của FortiWLM có thể dẫn đến khai thác quyền truy cập quản trị

  Fortinet đã ban hành khuyến cáo về lỗ hổng bảo mật nghiêm trọng hiện đã được vá , ảnh hưởng đến Wireless LAN Manager (FortiWLM) có thể dẫn đến tiết lộ thông tin nhạy cảm. Lỗ hổng F

• UAC-0125 lợi dụng nhân viên Cloudflare để phân phối phần mềm độc hại ngụy trang thành ứng dụng Army+

  Đội ứng phó khẩn cấp máy tính của Ukraine (CERT-UA) đã tiết lộ rằng một tác nhân đe dọa mà họ theo dõi là UAC-0125 đang lợi dụng dịch vụ Cloudflare Workers để lừa quân nhân trong n

• Tin tặc sử dụng tệp Microsoft MSC để triển khai Backdoor được che giấu

  Một chiến dịch lừa đảo mới đã được phát hiện sử dụng các chiêu trò liên quan đến thuế để phát tán phần mềm độc hạ Cửa sau bị che giấu Công ty an ninh mạng Securonix, đang theo dõi

• Kẻ tấn công khai thác Microsoft Teams và AnyDesk để triển khai phần mềm độc hại DarkGate

  Một chiến dịch kỹ thuật xã hội mới đã tận dụng Microsoft Teams như một cách để tạo điều kiện triển khai phần mềm độc hại đã biết có tên là DarkGate . Microsoft Teams và AnyDesk Các

• Rootkit Linux mới PUMAKIT sử dụng các kỹ thuật tàng hình tiên tiến để tránh bị phát hiện

  Các nhà nghiên cứu an ninh mạng đã phát hiện ra một rootkit Linux mới có tên là PUMAKIT có khả năng leo thang đặc quyền, ẩn tệp và thư mục, đồng thời ẩn mình khỏi các công cụ hệ th

• Các nhà nghiên cứu phát hiện ra lỗ hổng Symlink cho phép bỏ qua TCC trong iOS và macOS

  Thông tin chi tiết về lỗ hổng bảo mật hiện đã được vá trong iOS và macOS của Apple đã xuất hiện, nếu khai thác thành công, có thể vượt qua khuôn khổ Minh bạch, Đồng ý và Kiểm soát

• Microsoft sửa 72 lỗi, bao gồm bản vá cho lỗ hổng CLFS đang bị khai thác tích cực

  Microsoft đã kết thúc bản cập nhật Patch Tuesday năm 2024 với bản sửa lỗi cho tổng cộng 72 lỗi bảo mật trong danh mục phần mềm của mình, bao gồm một lỗi mà hãng cho biết đã bị khai

• Lỗ hổng chuyển tập tin Cleo đang bị khai thác – Bản vá đang chờ xử lý, Khuyến khích giảm thiểu

  Người dùng phần mềm truyền tệp do Cleo quản lý đang được khuyến cáo đảm bảo rằng phiên bản của họ không bị lộ ra internet sau các báo cáo về việc khai thác hàng loạt lỗ hổng ảnh hư

• Mạng bot Socks5Systemz cung cấp dịch vụ proxy bất hợp pháp với hơn 85.000 thiết bị bị hack

  Theo phát hiện mới từ Bitsight, một mạng botnet độc hại có tên Socks5Systemz đang điều khiển dịch vụ proxy có tên PROXY.AM. Mạng bot Socks5Systemz Nhóm nghiên cứu bảo mật của công

• Trojan Android trị giá 3.000 đô la này nhắm vào các ngân hàng và sàn giao dịch tiền điện tử

  Có tới 77 tổ chức ngân hàng, sàn giao dịch tiền điện tử và tổ chức quốc gia đã trở thành mục tiêu của một loại trojan truy cập từ xa (RAT) trên Android mới được phát hiện có tên là

• Các nhà nghiên cứu phát hiện ra những lỗ hổng trong các khuôn khổ học máy mã nguồn mở phổ biến

  Các nhà nghiên cứu an ninh mạng đã tiết lộ nhiều lỗ hổng bảo mật ảnh hưởng đến các công cụ và khuôn khổ học máy (ML) nguồn mở như MLflow, H2O, PyTorch và MLeap, có thể mở đường cho

• Tin tặc tận dụng Cloudflare Tunnels, DNS Fast-Flux để ẩn phần mềm độc hại GammaDrop

  Kẻ tấn công có tên Gamaredon đã bị phát hiện lợi dụng Cloudflare Tunnels như một chiến thuật để che giấu cơ sở hạ tầng lưu trữ phần mềm độc hại có tên là GammaDrop. Insikt Group củ

• Các nhà nghiên cứu phát hiện ra Backdoor trong thư viện npm Web3.js phổ biến của Solana

  Các nhà nghiên cứu an ninh mạng đang cảnh báo về một cuộc tấn công chuỗi cung ứng phần mềm nhắm vào thư viện npm @solana/web3.js phổ biến liên quan đến việc đẩy hai phiên bản độc h

• Cisco cảnh báo về việc khai thác lỗ hổng ASA WebVPN đã tồn tại hàng thập kỷ

  Hôm thứ Hai, Cisco đã cập nhật thông báo để cảnh báo khách hàng về việc khai thác tích cực lỗ hổng bảo mật đã tồn tại hàng thập kỷ đang ảnh hưởng đến Thiết bị bảo mật thích ứng (AS

• Chiến dịch Horns&Hooves phân phối RAT qua email giả mạo và tải trọng JavaScript

  Một chiến dịch phần mềm độc hại mới được phát hiện nhắm vào người dùng cá nhân, nhà bán lẻ và doanh nghiệp dịch vụ chủ yếu ở Nga để phát tán NetSupport RAT và BurnsRAT. Chiến dịch

• Các cập nhật bản vá lỗ hổng bảo mật tháng 11

  Trong tháng 11, Microsoft, Adobe và SAP đã phát hành bản vá cho các sản phẩm của mình. Người dùng cần khẩn trương cài đặt bản vá để phòng tránh rủi ro mất an toàn thông tin. Cập nh

• 8 triệu người dùng Android bị nhiễm phần mềm độc hại SpyLoan trong các ứng dụng cho vay trên Google Play

  Theo phát hiện mới từ McAfee Labs, hơn chục ứng dụng Android độc hại được xác định trên Google Play Store với tổng số lượt tải xuống hơn 8 triệu lần có chứa phần mềm độc hại có tên

• Dịch vụ lừa đảo "Rockstar 2FA" nhắm vào người dùng Microsoft 365 bằng các cuộc tấn công AiTM

  Các nhà nghiên cứu an ninh mạng đang cảnh báo về các chiến dịch email độc hại lợi dụng bộ công cụ lừa đảo dưới dạng dịch vụ ( PhaaS ) có tên là Rockstar 2FA với mục đích đánh cắp t

• Các trang web giả mạo lợi dụng Black Friday để đánh cắp thông tin người dùng

  Một chiến dịch lừa đảo mới nhắm vào những người mua sắm thương mại điện tử ở châu Âu và Mỹ thông qua các trang web giả mạo các thương hiệu hợp pháp với mục đích đánh cắp thông tin

• Các nhà nghiên cứu phát hiện ra "Bootkitty" – UEFI Bootkit đầu tiên nhắm vào hạt nhân Linux

  Các nhà nghiên cứu an ninh mạng đã làm sáng tỏ thứ được mô tả là bộ khởi động Giao diện chương trình cơ sở mở rộng hợp nhất (UEFI) đầu tiên được thiết kế cho các hệ thống Linux. Bộ

• RomCom khai thác lỗ hổng Zero-Day của Firefox và Windows trong các cuộc tấn công mạng tinh vi

  Nhóm tin tặc liên kết với Nga có tên gọi RomCom đã có liên quan đến việc khai thác lỗ hổng zero-day của hai lỗ hổng bảo mật, một trong Mozilla Firefox và một trong Microsoft Window

• Các nhà nghiên cứu phát hiện ra phần mềm độc hại sử dụng BYOVD để vượt qua các biện pháp bảo vệ chống vi-rút

  Các nhà nghiên cứu an ninh mạng đã phát hiện ra một chiến dịch độc hại mới sử dụng kỹ thuật có tên Bring Your Own Vulnerable Driver ( BYOVD ) để vô hiệu hóa các biện pháp bảo vệ an

• Tin tặc Triều Tiên đánh cắp 10 triệu đô la bằng các trò lừa đảo và phần mềm độc hại sử dụng AI trên LinkedIn

  Tin tặc có liên quan đến Triều Tiên có tên Sapphire Sleet ước tính đã đánh cắp hơn 10 triệu đô la tiền điện tử thông qua các chiến dịch tấn công kỹ thuật xã hội được dàn dựng trong

• APT-K-47 sử dụng mồi nhử theo chủ đề Hajj để phân phối phần mềm độc hại Asyncshell nâng cao

  Kẻ tấn công có tên Mysterious Elephant đã bị phát hiện sử dụng phiên bản phần mềm độc hại nâng cao có tên là Asyncshell. Nhóm Knownsec 404 cho biết trong một bản phân tích được côn

• Apple phát hành bản cập nhật khẩn cấp để vá các lỗ hổng Zero-Day đang bị khai thác tích cực

  Apple đã phát hành bản cập nhật bảo mật cho iOS, iPadOS, macOS, visionOS và trình duyệt web Safari để giải quyết hai lỗ hổng zero-day đang bị khai thác rộng rãi. Lỗ hổng Zero-Day c

• Biến thể Ransomware 'Helldown' mới mở rộng các cuộc tấn công vào hệ thống VMware và Linux

  Các nhà nghiên cứu an ninh mạng đã phát hiện ra biến thể Linux của một loại ransomware tương đối mới có tên là Helldown, cho thấy kẻ tấn công đang mở rộng phạm vi tấn công. Các cuộ

• ❌ Lỗ hổng VMware vCenter và Kemp LoadMaster đang bị khai thác tích cực

  Các lỗ hổng bảo mật đã được vá ảnh hưởng đến Progress Kemp LoadMaster và VMware vCenter Server hiện đang bị khai thác tích cực trên thực tế. Sự dễ bị tổn thương Cơ quan An ninh mạn

• Lỗ hổng tường lửa PAN-OS đang bị khai thác tích cực – IoC đã được phát hành

  Palo Alto Networks đã công bố các chỉ số xâm phạm (IoC) mới một ngày sau khi nhà cung cấp bảo mật mạng xác nhận rằng lỗ hổng bảo mật zero-day mới ảnh hưởng đến giao diện quản lý tư

• Lỗ hổng nghiêm trọng trong PostgreSQL cho phép tin tặc khai thác các biến môi trường

  Các nhà nghiên cứu an ninh mạng đã tiết lộ một lỗ hổng bảo mật nghiêm trọng trong hệ thống cơ sở dữ liệu nguồn mở PostgreSQL có thể cho phép người dùng không có đặc quyền thay đổi

• Nhóm tin tặc Việt Nam triển khai phần mềm đánh cắp PXA mới nhắm vào Châu Âu và Châu Á

  Một tin tặc người Việt đã bị phát hiện có liên quan đến chiến dịch đánh cắp thông tin nhắm vào các tổ chức chính phủ và giáo dục ở Châu Âu và Châu Á bằng phần mềm độc hại mới dựa t

• Ransomware Ymir mới khai thác bộ nhớ để tấn công lén lút; nhắm vào mạng doanh nghiệp

  Các nhà nghiên cứu an ninh mạng đã phát hiện ra một họ ransomware mới có tên là Ymir, được triển khai trong một cuộc tấn công hai ngày sau khi hệ thống bị xâm nhập bởi phần mềm độc

• Tội phạm mạng sử dụng Excel Exploit để phát tán phần mềm độc hại Remcos RAT Fileless

  Các nhà nghiên cứu an ninh mạng đã phát hiện ra một chiến dịch lừa đảo mới phát tán một biến thể không có tệp mới của phần mềm độc hại thương mại đã biết có tên là Remcos RAT. Phần

• Các lỗ hổng bảo mật trong các bộ công cụ ML phổ biến cho phép chiếm quyền máy chủ, leo thang đặc quyền

  Các nhà nghiên cứu an ninh mạng đã phát hiện gần hai chục lỗ hổng bảo mật trong 15 dự án nguồn mở khác nhau liên quan đến máy học (ML). học máy Công ty bảo mật chuỗi cung ứng phần

• Cisco phát hành bản vá cho lỗ hổng URWB nghiêm trọng trong hệ thống không dây công nghiệp

  Cisco đã phát hành bản cập nhật bảo mật để giải quyết lỗ hổng bảo mật nghiêm trọng nhất ảnh hưởng đến các Điểm truy cập Backhaul không dây cực kỳ đáng tin cậy ( URWB ) có thể cho p

• Phần mềm độc hại Winos 4.0 mới lây nhiễm cho game thủ thông qua các ứng dụng tối ưu hóa trò chơi độc hại

  Các nhà nghiên cứu an ninh mạng đang cảnh báo rằng một nền tảng chỉ huy và kiểm soát (C&C) có tên Winos đang được phân phối trong các ứng dụng liên quan đến trò chơi như công cụ cà

• Học Golang đầy đủ chỉ với 9 bước

  Golang, hay còn gọi là Go, là một ngôn ngữ lập trình đơn giản, nhanh chóng và hỗ trợ đa luồng. Hiện tại, Golang đang ngày càng phổ biến, và càng nhiều dự án viết backend bằng Go. N

• Các lỗi nghiêm trọng trong Ollama AI Framework có thể cho phép DoS, trộm cắp mô hình và đầu độc

  Các nhà nghiên cứu an ninh mạng đã tiết lộ sáu lỗ hổng bảo mật trong nền tảng trí tuệ nhân tạo (AI) Ollama có thể bị kẻ xấu khai thác để thực hiện nhiều hành động khác nhau, bao gồ

• Phần mềm độc hại Android Banking mới 'ToxicPanda' nhắm vào người dùng bằng cách chuyển tiền gian lận

  Hơn 1.500 thiết bị Android đã bị nhiễm một loại phần mềm độc hại ngân hàng Android mới có tên là ToxicPanda, cho phép kẻ tấn công thực hiện các giao dịch ngân hàng gian lận. Phần m

• Các mối đe dọa, công cụ và thực hành an ninh mạng hàng đầu trong tháng 11

  Tuần này là một tuần bùng nổ dữ liệu số! Tin tặc kiểu như, "Hãy gây hỗn loạn nào!" và nhắm vào mọi thứ từ trình duyệt của chúng ta đến những chiếc máy ảnh lạ mắt có thể zoom và qua

• Biến thể phần mềm độc hại FakeCall mới chiếm quyền điều khiển thiết bị Android để thực hiện các cuộc gọi ngân hàng gian lận

  Các nhà nghiên cứu an ninh mạng đã phát hiện ra một phiên bản mới của nhóm phần mềm độc hại Android nổi tiếng có tên là FakeCall , sử dụng kỹ thuật lừa đảo bằng giọng nói (hay còn

• Vi phạm cấu hình Git lớn làm lộ 15.000 thông tin đăng nhập; 10.000 kho lưu trữ riêng tư bị sao chép

  Các nhà nghiên cứu an ninh mạng đã đánh dấu một chiến dịch "lớn" nhắm vào các cấu hình Git bị lộ để đánh cắp thông tin đăng nhập, sao chép các kho lưu trữ riêng tư và thậm chí tríc

• Nghiên cứu mới tiết lộ lỗ hổng Spectre vẫn tồn tại trong bộ xử lý AMD và Intel mới nhất

  Hơn sáu năm sau khi lỗ hổng bảo mật Spectre ảnh hưởng đến bộ xử lý CPU hiện đại bị phát hiện, một nghiên cứu mới đã phát hiện ra rằng các bộ xử lý AMD và Intel mới nhất vẫn dễ bị t

• Phân tích kỹ thuật tấn công mới của nhóm tin tặc Awaken Likho

  Nhóm tin tặc Awaken Likho hay còn được gọi với cái tên Core Werewolf đã quay trở lại và tiếp tục nhắm mục tiêu vào các cơ quan chính phủ, doanh nghiệp lớn. Bài viết này sẽ tiến hàn

• Các nhà nghiên cứu phát hiện ra lỗ hổng hạ cấp hệ điều hành nhắm vào Microsoft Windows Kernel

  Một kỹ thuật tấn công mới có thể được sử dụng để vượt qua tính năng Thực thi chữ ký trình điều khiển (DSE) của Microsoft trên các hệ thống Windows đã vá đầy đủ, dẫn đến các cuộc tấ

• CERT-UA xác định các tệp RDP độc hại trong cuộc tấn công mới nhất vào các thực thể Ukraine

  Đội ứng phó khẩn cấp máy tính của Ukraine (CERT-UA) đã nêu chi tiết về một chiến dịch email độc hại mới nhắm vào các cơ quan chính phủ, doanh nghiệp và quân đội. rdp Đội ứng phó kh

• Biến thể Ransomware Qilin.B mới xuất hiện với chiến thuật mã hóa và né tránh được cải thiện

  Các nhà nghiên cứu an ninh mạng đã phát hiện ra một phiên bản nâng cao của phần mềm tống tiền Qilin có nhiều tính năng tinh vi và chiến thuật hơn để tránh bị phát hiện. Phần mềm tố

• Lỗ hổng của AWS Cloud Development Kit khiến người dùng có nguy cơ bị chiếm đoạt tài khoản

  Các nhà nghiên cứu an ninh mạng đã tiết lộ một lỗ hổng bảo mật ảnh hưởng đến Amazon Web Services (AWS) Cloud Development Kit (CDK) có thể dẫn đến việc chiếm đoạt tài khoản trong nh

• Tin tặc khai thác lỗ hổng XSS của Roundcube Webmail để đánh cắp thông tin đăng nhập

  Một số tác nhân đe dọa chưa xác định đã bị phát hiện đang cố gắng khai thác lỗ hổng bảo mật hiện đã được vá trong phần mềm webmail Roundcube nguồn mở như một phần của cuộc tấn công

• Tìm hiểu tổng quan về Elasticsearch

  Elasticsearch là gì? -------------------- Elasticsearch là một công cụ tìm kiếm với nhiều REST API đơn giản có khả năng phân tích và lưu trữ tất cả các dữ liệu có dạng như textextu

• Tìm hiểu tổng quan về Redis

  1\. Lời mở đầu ============== Thông thường, cứ mỗi request từ phía client thì lại chạy vào database lôi đống kết quả về cho client. Cho tới khi số lượng request tăng lên đáng kể sẽ

• Phần mềm độc hại TrickMo đánh cắp mã PIN Android bằng màn hình khóa giả mạo

  Công ty bảo mật Zimperium (Mỹ) đã xác định được 40 biến thể mới của trojan ngân hàng TrickMo trên Android. Các biến thể này được liên kết với 16 chương trình dropper (một loại troj

• Tin tặc sử dụng mã độc Linux mới để tấn công máy ATM

  Mã độc FASTCash của tin tặc được cho từ Triều Tiên tiếp tục gây lo ngại khi được phát hiện nhắm vào hệ thống Linux, làm gia tăng nguy cơ gian lận và tấn công mạng đối với các hệ th

• Giải mã phần mềm gián điệp LianSpy nhắm mục tiêu vào người dùng Nga

  Vào tháng 3/2024, các nhà nghiên cứu tại hãng bảo mật Kaspersky đã phát hiện ra một chiến dịch tấn công mạng tinh vi nhắm vào những cá nhân ở Nga bằng phần mềm gián điệp Android có

• Các thành viên của nhóm tin tặc LockBit và Evil Corp bị trừng phạt

  Một làn sóng hành động thực thi pháp luật quốc tế mới với sự tham gia của 12 quốc gia đã bắt giữ 4 thành viên và phá hủy 9 máy chủ có liên quan đến hoạt động tống tiền LockBit (hay

• Phát hiện ra phần mềm độc hại Hijack Loader sử dụng chứng chỉ ký mã bị đánh cắp

  Các nhà nghiên cứu an ninh mạng đã tiết lộ một chiến dịch phần mềm độc hại mới phát tán các hiện vật Hijack Loader được ký bằng chứng chỉ ký mã hợp lệ flow Công ty an ninh mạng của

• GitHub, Telegram Bots và Mã QR bị lạm dụng trong làn sóng tấn công lừa đảo mới

  Một chiến dịch phần mềm độc hại mới liên quan đến thuế nhắm vào các lĩnh vực bảo hiểm và tài chính đã được phát hiện bằng cách sử dụng các liên kết GitHub trong các email lừa đảo n

• Hacker chiếm quyền truy cập hệ thống chỉ bằng một chiếc bật lửa

  Một hacker kiêm chuyên gia mod phần cứng có tên David Buchanan vừa chiếm quyền truy cập root (quyền quản trị cao nhất) trên máy tính xách tay chỉ bằng... chiếc bật lửa khiến cộng đ

• Hàng triệu xe ô tô Kia có thể bị tin tặc kiểm soát bằng cách quét biển số xe

  Các nhà nghiên cứu cho biết một lỗ hổng bảo mật khiến hàng triệu chiếc xe Kia sản xuất từ năm 2023 có thể bị chiếm quyền điều khiển, cho phép kẻ tấn công kiểm soát từ xa kia-oto Lỗ

• Hơn 100 triệu công dân Mỹ bị rò rỉ thông tin

  Theo nghiên cứu của các chuyên gia đến từ Cybernews (Lithuania), MC2 Data - một công ty chuyên cung cấp dịch vụ dữ liệu đã bỏ sót một cơ sở dữ liệu trực tuyến khổng lồ chứa 2,2 TB

• 5 cách tin tặc vượt qua xác thực hai yếu tố

  Xác thực hai yếu tố (2FA) từng được xem là lá chắn vững chắc bảo vệ tài khoản của người dùng. Tuy nhiên, với sự tinh vi ngày càng tăng của các cuộc tấn công mạng, lớp bảo vệ này đa

• Mã độc Android.Vo1d cài đặt backdoor trên 1,3 triệu TV box tại 197 quốc gia

  Theo hãng bảo mật Doctor Web (Nga), tin tặc đã sử dụng mã độc Android.Vo1d để cài đặt backdoor trên các TV box, cho phép chúng chiếm quyền kiểm soát thiết bị hoàn toàn, sau đó tải

• Tin tặc Trung Quốc khai thác Visual Studio Code trong các cuộc tấn công mạng ở Đông Nam Á

  Nhóm tin tặc tấn công có chủ đích liên quan đến Trung Quốc, được biết đến với tên gọi Mustang Panda, đã bị phát hiện sử dụng phần mềm Visual Studio Code như một phần của hoạt động

• Kỹ thuật DNS Tunneling

  DNS Tunneling là một kỹ thuật sử dụng giao thức DNS (Domain Name System) để truyền tải dữ liệu thông qua các gói tin DNS. Giao thức DNS được sử dụng để ánh xạ các tên miền thành đị

• Các nguyên lý thiết kế hướng đối tượng – SOLID

  Chào các bạn, như các bạn đã biết thì có 4 tính chất cơ bản của lập trình hướng đối tượng trong Java. Đây là các tính chất rất quan trọng của lập trình hướng đối tượng (OOP) mà hầu

• Google Chrome bổ sung tính năng App-Bound Encryption mới để tăng cường bảo mật

  Google Chrome đã bổ sung tính năng App-Bound Encryption để bảo vệ cookie hiệu quả hơn trên Windows, cải thiện khả năng bảo mật và phòng chống trước các cuộc tấn công bằng phần mềm

• Cách Hacker Bypass AV xâm nhập Windows với Autoit

  Trong thời đại của công nghệ số, khi mà an ninh mạng ngày càng trở nên quan trọng, việc nắm bắt những kiến thức về cách tấn công và phòng ngự là không thể phủ nhận. Với ngôn ngữ lậ

• Nghiên cứu lỗ hổng trong cơ chế mã hóa ransomware Rhysida

  Ransomware là một loại phần mềm độc hại được thiết kế để tấn công máy tính hoặc hệ thống mạng bằng cách mã hóa dữ liệu quan trọng của người dùng và yêu cầu một khoản tiền chuộc để

• Các cách để tối ưu hoá truy vấn SQL

  SQL là một ngôn ngữ không còn xa lạ với mọi lập trình viên và đối với với lập trình viên backend việc làm chủ được SQL là một điều rất quan trọng. Trong quá trình làm việc của mình

• Những tính năng cao cấp trong Laravel mà có thể bạn chưa biết

  Laravel tuy một PHP framework mạnh mẽ khi cung cấp rất nhiều tính năng hay ho cho developer. Nhưng thực tế, nhiều bạn developer mới chỉ sử dụng Laravel như một framework MVC đơn th

• Con trỏ và cấp phát động trong C++

  Con trỏ và cấp phát động trong C++ Con trỏ (pointer) là một khái niệm quan trọng và khó nhất trong C++, nó thường được dùng để đánh giá mức độ thành thạo C++ của bạn. Việc sử dụng

• 10 tỷ mật khẩu bị phát tán trên mạng

  Một tệp tin chứa 10 tỷ mật khẩu ở dạng văn bản thuần túy đã bị phát tán trên mạng và được xem là vụ rò rỉ mật khẩu lớn nhất từ trước đến nay. pass.jpg Tệp dữ liệu này có tên RockYo

• Xây dựng Chatbot đơn giản với Python

  Python là ngôn ngữ lập trình quen thuộc trong phát triển AI, đặc biệt là trong lĩnh vực xử lý ngôn ngữ tự nhiên (NLP). Sự linh hoạt của Python cùng với một loạt thư viện mạnh mẽ là

• Lập trình gửi Email với Java

  Để gửi một email sử dụng Java khá là đơn giản, và để bắt đầu, bạn nên có JavaMail API và Java Activation Framework (JAF) được cài đặt trên thiết bị của bạn. Bạn có thể tải phiên bả

• Network Footprinting

  1. Xác định Network Range Cơ quan Internet Assigned Numbers Authority (IANA) đã dành ba khối của không gian địa chỉ IP cho mạng nội bộ: 10.0.0.0 – 10.255.255.255 (10.0.0.0/8), 172.

• Tấn công HID là gì?

  1. Khái niệm HID là viết tắt của Human Interface Device là một phân lớp trong tiêu chuẩn USB cho các thiết bị máy tính được vận hành bởi con người. Nói theo cách chi tiết hơn, HID

• Email Footprinting – Truy vết email

  Email footprinting là gì? Email tracking (truy vết email) có nghĩa là giám sát email của một người cụ thể. Loại theo dõi này có thể thực hiện được thông qua các bản ghi được gắn ti

• Tìm hiểu về Windows Forensics - Part 3

  1. Windows Recycle Bin Windows recycle artifact lưu giữ thông tin có giá trị liên quan đến các mục đã xóa như tên của mục đã xóa, vị trí ban đầu của mục trước khi xóa, kích thước c

• Tìm hiểu về Windows Forensics - Part 2

  Nối tiếp phần trước thì phần này mình sẽ giới thiệu về Event Log và Registry, đây là 2 artifact mà mình thường gặp nhất trong các challenge CTF nên mình tách hẳn nó ra để có thể tì

• Xác thực sử dụng JWT với NodeJS

  Giới thiệu JWT (JSON Web Token) là một tiêu chuẩn mở cho việc trao đổi thông tin an toàn giữa các bên. Nó thường được sử dụng để xác thực người dùng và trao đổi dữ liệu an toàn giữ

• Tìm hiểu về Windows Forensics - Part 1

  1/ Windows Forensics là gì ? Windows Forensics là một nhánh trong Digital Forensics, nó liên quan tới việc thu thập, phân tích và giải mã các thông tin trên hệ điều hành windows. Đ

• Một Số Khái Niệm Cơ Bản Trong Mật Mã Học

  1. Cryptography Cryptography ( mật mã học) là ngành khoa học nghiên cứu về mã hóa và giải mã thông tin với mục đích nghiên cứu các phương pháp, cách thức để chuyển đổi một thông ti

• 10 thuật toán Machine Learning cơ bản mà các kỹ sư IT cần biết

  Không còn nghi ngờ gì nữa, lĩnh vực học máy / trí tuệ nhân tạo (AI) đã ngày càng trở nên phổ biến hơn trong vài năm qua. Một nhánh nhỏ của nó là Big Data đang là xu hướng hot nhất

• 11 thuật toán mà lập trình viên nên biết

  Thuật toán là một thuật ngữ khá là quen thuộc trong kỹ thuật, bạn chắc chắn đã từng nghe qua rồi. Nhưng để hiểu rõ khái niệm, đặc điểm và các thuật toán mà một lập trình viên nên b

• Giả mạo thông báo lỗi Google Chrome để lừa người dùng chạy các tập lệnh PowerShell độc hại

  Một chiến dịch phát tán mã độc mới đang giả mạo các thông báo lỗi của Google Chrome, Word và OneDrive để lừa người dùng chạy các “bản sửa lỗi” PowerShell nhằm cài đặt phần mềm độc

• Cách tạo hiệu ứng Parallax Scrolling cực đơn giản với CSS

  Parallax Scrolling là một xu hướng trang web trong đó hình nền được di chuyển ở tốc độ khác với nội dung nền trước trong khi cuộn. Bạn có thể xem demo hiệu ứng TẠI ĐÂY ❗Lưu ý: Tính

• Lỗ hổng Microsoft Outlook nghiêm trọng thực thi khi mở email

  Gần đây, các chuyên gia an ninh mạng đã phát hiện lỗ hổng bảo mật nghiêm trọng trong Microsoft Outlook có mã CVE-2024-30103 được đánh giá độ nghiêm trọng cao, cho phép kẻ tấn công

• Cách ẩn thông báo Cookie trên trình duyệt

  Trong thời đại số, việc các trang web yêu cầu người dùng chấp nhận sử dụng cookie để cải thiện trải nghiệm người dùng là điều phổ biến. Tuy nhiên, không phải lúc nào người dùng cũn

• Phát hiện lỗ hổng trên bộ định tuyến TP-Link Gaming khiến người dùng có thể bị tấn công bằng mã từ xa

  Một lỗ hổng bảo mật ở mức điểm nghiêm trọng tối đa đã được phát hiện trong bộ định tuyến TP-Link Archer C5400X gaming có thể dẫn đến việc thực thi mã từ xa trên các thiết bị bằng c

• Cảnh báo lỗ hổng trên máy chủ WebLogic của Oracle đang bị khai thác tích cực

  Mới đây, Cơ quan An ninh mạng và Cơ sở hạ tầng Hoa Kỳ (CISA) đã bổ sung một lỗ hổng bảo mật ảnh hưởng đến Máy chủ WebLogic của Oracle vào danh mục Các lỗ hổng bị khai thác đã biết

• Hướng dẫn cài đặt iOS 18 Beta để dùng thử tính năng mới 2024

  Bạn đã có thể thử iOS 18 Beta Ngay sau sự kiện ra mắt, Apple đã giới thiệu bản beta dành cho nhà phát triển của iOS 18, một phiên bản thử nghiệm sơ bộ trước khi được phát hành rộng

• Cách tắt tất cả iMessage trên các thiết bị Apple để không bị Hack

  iMessage là dịch vụ nhắn tin độc quyền của Apple, cung cấp khả năng gửi tin nhắn qua Internet. Tuy nhiên, đôi khi người dùng cần tắt hoàn toàn iMessage để chuyển sang thiết bị khác