News

A phishing campaign is targeting Signal users by sending fraudulent messages that impersonate Signal Support, aiming to steal backup recovery keys for accessing encrypted message archives. The messages contain red flags such as threats of data loss, requests…

The article discusses the activities and implications of a cybercriminal group known as 'The Com', which is linked to neo-Nazi ideologies and other violent crimes, including child exploitation. It outlines how inadequate cybersecurity practices in…

The article discusses GREYVIBE, a cybersecurity threat group linked to Russia, that is targeting Ukraine using AI-driven cyberattacks. It emphasizes the significance of these AI tactics in modern cyber warfare, showcasing the evolving nature of cyber…

The Digital Intelligence Lab (DIL) launched an observatory focused on analyzing cyber events in the context of broader geopolitical issues. This initiative arose from observed patterns connecting real-world events to significant cyber activities, exemplified…

California's Attorney General Rob Bonta has filed a lawsuit against the genetic testing company, 23andMe, formerly Chrome Holding Co., for allegedly failing to protect sensitive user data in a breach affecting nearly 7 million customers. The 2023 breach…

A researcher known as Chaotic Eclipse publicly disclosed six zero-day vulnerabilities in Windows components, with three being exploited in attacks shortly thereafter. Microsoft criticized this uncoordinated disclosure, arguing it jeopardized customer…

The article discusses the limitations of security stacks as exposed by 2,000 Vibe-coded applications found to be vulnerable. It emphasizes the need for enhanced security measures to address the risks associated with these applications given the increasing…

Google has released Chrome 148, which addresses 151 vulnerabilities, including 22 critical flaws. Notably, CVE-2026-9872 and CVE-2026-9873 were highlighted for their severity, with researchers earning $43,000 rewards for their discovery. The majority of the…

The CyCOS Project, a UK initiative to assist small and medium enterprises (SMEs) with cybersecurity, is expanding from two to seven communities as it transitions leadership to the Chartered Institute of Information Security (CIISec). Launched in late 2023,…

A Romanian hacker, Catalin Dragomir, was sentenced to 56 months in prison for his involvement in cyberattacks targeting U.S. government networks, specifically an Oregon state government office. He gained unauthorized access to the network in June 2021 and…

Microsoft has redesigned its Copilot tool within Microsoft 365, implementing a monochromatic aesthetic that emphasizes legibility and coherence across applications. The interface has been simplified to a text-oriented layout, reducing color and distractions…

The article discusses a malicious NuGet package named 'Sicoob' that targets cloud secrets to steal banking credentials. It highlights how the package is disguised as a legitimate npm package, compromising security in software supply chains. Security experts…

The article discusses a newly discovered PureLogs info stealer campaign targeting enterprise environments, identified by FortiGuard Labs. This multi-stage attack leverages social engineering, sending deceptive emails disguised as urgent corporate purchase…

Chinese hackers are exploiting the ongoing war in the Middle East to target maritime and energy sectors, as highlighted in ESET's APT Activity Report. They are aligning their cyber operations with Beijing's geopolitical interests, focusing on instability in…

The article discusses the escalating threat posed by the Chinese Phishing-as-a-Service (PhaaS) ecosystem, which has shifted tactics to bypass modern security controls, particularly targeting mobile users. Analysts identified that these cybercriminals have…

The article discusses BTMOB RAT, a new Android malware that allows attackers to fully control a compromised device without requiring coding skills. Sold for $5,000 for a lifetime license, it includes a user-friendly APK builder for generating malicious apps…

A newly identified malicious npm package, 'mouse5212-super-formatter', leaked its own hardcoded GitHub token, allowing researchers to observe data theft as it unfolded. Disguised as a sync utility, the package read and uploaded files from victim machines to…

Security researchers from PwC Threat Intelligence have identified a sophisticated cyber espionage campaign by the Chinese threat actor known as Red Lamassu, targeting telecommunications providers across Asia. This group, also referred to as Calypso APT, has…

The article discusses the vulnerabilities and security issues associated with containerization, particularly in relation to Docker. It highlights how attackers can exploit outdated software versions in pre-built images, leading to various risks such as DDoS…

Security researchers from Fox-IT have analyzed a sophisticated cyber espionage operation by a North Korean threat group targeting international financial institutions. This operation involves a new 'Lazarus memory-only toolset' that minimizes digital…

Kimsuky, a North Korean hacking group, has launched a new malware called HTTPSpy while expanding its toolkit to include HelloDoor and VS Code Tunnels. These developments highlight an evolution in their infiltration tactics, as they seek to enhance their…

Oracle has released a significant security patch update for May 2026, addressing critical vulnerabilities across various enterprise product lines. The updates aim to eliminate flaws that could allow attackers to infiltrate corporate data systems. Key areas…

Microsoft has issued an urgent alert regarding a sophisticated supply chain attack targeting npm packages, which compromises cloud infrastructure. An attacker, vpmdhaj, has published 14 malicious packages that use typosquatting tactics to mimic legitimate…

A serious security flaw, tracked as CVE-2026-7374, has been identified in KubeVirt, allowing authenticated users to escape namespaces and potentially control entire Kubernetes clusters. This vulnerability has a high CVSS score of 9.9 and is due to improper…

Microsoft identified a supply chain attack targeting the npm package ecosystem on May 28, 2026, involving a threat actor using the alias vpmdhaj. The actor published 14 malicious packages that typosquatted well-known libraries and, once installed, harvested…

Following Google's announcement to incorporate AI into their search engine, DuckDuckGo has seen a significant rise in user acquisitions, particularly among iOS users in the U.S. This trend aligns with a growing discontent towards Google's enforced generative…

The content provides information about the Internet Storm Center (ISC), specifically noting that Guy Bruneau is the handler on duty. The threat level is currently categorized as green. It includes links to previous diaries and podcasts, as well as resources…

The Samba Team has released urgent security patches to address multiple critical vulnerabilities that threaten enterprise file servers globally. Two severe remote code execution flaws, CVE-2026-4480 and CVE-2026-4408, have been identified with perfect CVSS…

The Jenkins project has released a critical patch addressing multiple security vulnerabilities in its automation ecosystem, including remote code execution (RCE) risks and data exposure through flawed plugins. Key findings include: 1. **Remote Code Execution…

Google has released a significant security update for Chrome, version 148.0.7778.216/217, aimed at fixing 151 vulnerabilities, including critical memory corruption issues. Many fixes were contributed by external researchers, earning them substantial rewards.…

GitLab has issued an urgent set of software modifications to safeguard development pipelines. Specifically, these new GitLab security

Synology has issued a critical security alert regarding vulnerabilities in the Synology Chat Server, particularly affecting DiskStation Manager (DSM). Key issues include a high-severity vulnerability (CVE-2026-40541) that allows authenticated users to read,…

The WP Maps Pro plugin for WordPress recently revealed a critical security vulnerability that allows unauthenticated users to gain administrative control of affected sites. Discovered by Wordfence, this zero-day flaw permits attackers to create new admin…

A developer, Johannes Link, added malicious instructions to version 1.10.0 of jqwik, an open-source Java testing app, to prompt AI coding agents to delete all tests and code associated with jqwik. This 'prompt injection' exploits AI agents’ inability to…

The article by Guy Bruneau analyzes the data collected over the past year from DShield sensors, detailing the types of files uploaded and their trends. It reveals that file uploads peaked during the winter months (December 2025 - February 2026) and decreased…

Carnival Corporation has disclosed a data breach affecting approximately 6 million customers, specifically 5,995,277 individuals, after hackers employed social engineering to gain access to an employee's account. The breach, identified on April 14, 2026,…

The 'Name That Toon Contest' celebrates Dark Reading's 20th anniversary, inviting participants to submit creative captions for a cartoon illustrating cybersecurity's evolution from 2006 to 2026. The contest aims to engage the community in reflecting on…

Dutch law enforcement's recent raid on THE.Hosting, a Russian bulletproof hosting service, seized over 800 servers and arrested two operators, yet failed to disrupt ongoing cybercriminal activities. The action did not dismantle the network's core IP address…