News

The AI Threat Landscape Digest for March-April 2026 outlines significant advancements in the use of AI technologies for cyber-attacks. Key points include: 1) AI attacks have shifted from experimental state-sponsored applications to practical criminal…

Scammers impersonating Microsoft have received assistance from executives of a call tracking company. Two former executives from C.A. Cloud Attribution Ltd pleaded guilty for selling infrastructure to tech support scammers and coaching them on evading law…

Authorities in the Netherlands have arrested two men for allegedly providing bulletproof hosting services to Russian threat actors, evading EU sanctions. An investigation revealed that Youssef Z. and Andrey N. facilitated cyberattacks against EU targets by…

A recent cyber espionage operation targeted public safety organizations in Pakistan through a spear-phishing campaign, notably affecting the Punjab Safe Cities Authority. The attackers used customized emails that mimicked internal communication, leading…

The Internet Systems Consortium (ISC) has released urgent updates for BIND 9 to address critical flaws affecting DNS infrastructure. Key vulnerabilities include severe memory leaks (CVE-2026-3039, CVE-2026-3593) that could allow unauthenticated remote…

The article discusses CERT-In's mandate for a 12-hour patching requirement for Internet-facing vulnerabilities due to the rising threat of AI-assisted cyber attacks. This initiative aims to bolster the security of organizations against rapidly evolving…

A recent report from security firm zLabs highlights a significant mobile cyberattack involving Android carrier billing fraud, affecting thousands of users globally. The fraud primarily exploits malicious applications that trick users into incurring…

The Lazarus APT group, linked to North Korea, has introduced a sophisticated fileless remote access Trojan (RAT) called RemotePE, designed to avoid detection and forensic analysis. This malware operates entirely in memory, utilizing a three-stage toolchain,…

Cybersecurity researchers have identified a global operation distributing trojanized software to corporate networks, significantly impacting over half of monitored customers. Known as the Tampered Chef malware, these deceptive applications masquerade as…

Security researchers from Seqrite Labs have unveiled a sophisticated phishing campaign, Operation Dragon Whistle, targeting academic institutions in China, particularly focusing on Changzhou University. The attackers utilize social engineering tactics,…

The Oncology Institute reported a data breach related to a third-party vendor, confirmed on May 20, 2026. The breach potentially exposed patient information following a 2025 cyberattack, linked to the software provider, TriZetto. Despite the investigation…

The article discusses a recent vulnerability identified in the KnowledgeDeliver Learning Management System (LMS), which has been exploited to deploy two well-known threats: Godzilla and Cobalt Strike. It emphasizes the critical importance of securing…

The handler on duty is Brad Duncan, with a current threat level classified as green. The ISC Stormcast program for May 26th, 2026, is highlighted, along with a link to learn about classes taught by Dr. Johannes Ullrich. Additional resources include various…

The article discusses a critical vulnerability related to Dell Container Storage Modules, which requires verification for full access to the report. Users are urged to contribute to support access. The page also references related security issues, including…

The Apache Software Foundation has released critical updates for the Apache CXF web services framework, addressing newly discovered vulnerabilities, including LDAP injection, XML External Entity (XXE) risks, and remote code execution. These vulnerabilities…

Memcached, a high-performance key/value cache store for distributed systems, has recently fixed a significant SASL vulnerability (CVE-2026-47783 and CVE-2026-47784). This vulnerability includes two critical timing side-channel flaws related to username…

The article discusses a recently discovered XSS vulnerability, tracked as CVE-2026-45249, in the Apache ECharts JavaScript library, particularly affecting its tooltip rendering component. This security flaw allows attackers to execute arbitrary code in…

Security researchers have identified a critical heap buffer overflow vulnerability in 7-Zip version 26.00, tracked as CVE-2026-48095. Discovered by Jaroslav Lobačevski from GitHub Security Lab, this flaw allows attackers to execute arbitrary code or crash…

The article discusses the discovery of malicious webpages impersonating a program called "Claude" that are distributing the ACR Stealer malware. These pages are often found through malicious ads on Google and disguise themselves as legitimate download sites.…

A hacker known as "Euphoric_Reply_5727" is selling a dataset containing 340 million OnlyFans user records, reportedly compiled from existing breaches and public data rather than a direct hack into OnlyFans. The seller's post on a cybercrime forum claims the…

Didier Stevens discusses Microsoft Access VBA code and its analysis limitations due to the lack of official documentation from Microsoft for the Access file format. He highlights the ineffectiveness of traditional tools like oledump.py on Microsoft Access…

The weekly recap on cybersecurity highlights several significant issues: 1. Vulnerabilities found in Linux systems pose critical threats, warranting immediate attention. 2. New zero-day exploits targeting Microsoft Defender have emerged, increasing the risk…

The Oncology Institute (TOI) confirmed that a cybersecurity incident involving a third-party software services provider has impacted patient information. In a recent SEC filing, TOI disclosed that unauthorized access to its data systems was detected by…

The article discusses the need for enhanced threat detection systems in the context of cybersecurity, particularly focusing on the challenges posed by a deluge of alerts. It highlights that traditional systems struggle to manage overwhelming amounts of…

Radiology Associates of Richmond (RAR) reported a data breach that compromised the protected health information of 266,183 individuals. The breach occurred on approximately July 25, 2025, and involved unauthorized access to internal systems. Although RAR…

The SOCRadar Dark Web Team reported several significant data leaks this week, including: 1. **WhatsApp Data Dump**: An alleged dump of 3 billion records containing sensitive information primarily from UK users. 2. **Ramen Kuroda Leak**: Compromise of 7.1…

Anthropic's Claude Mythos model has identified over 23,000 potential vulnerabilities in more than 1,000 open source software (OSS) projects. Out of these, 1,726 vulnerabilities have been confirmed, including over 1,000 rated as 'high' or 'critical'. With…

The Laravel-Lang organization experienced a supply chain attack where four of its popular Composer packages were compromised by hackers who maliciously altered Git tags within a 15-minute window on May 22, 2026. The affected packages, used for localization…

A newly identified malware campaign named **TrapDoor** has targeted developer ecosystems by distributing malicious packages across **npm**, **PyPI**, and **Crates.io**. This coordinated attack aims to steal developer secrets, particularly focusing on crypto…

A recent zero-click attack has compromised WhatsApp accounts of iPhone users running iOS 16 in Italy, allowing attackers to send messages asking for money transfers without user consent or knowledge. The investigation by digital forensics firm Forenser found…