News

The Mycelium Framework is a newly identified AI-as-a-Service botnet targeting enterprise infrastructure through automated exploits and brute-force attacks. Developed by unknown actors, it employs over 20 remote code execution modules aimed at various…

The content discusses CVE-2026-49844, a security flaw in Apache Log4j affecting multiple versions (2.13.1, 2.26.0, and 3.0.0-alpha1). This vulnerability allows improper serialization of non-finite floating-point numbers in JSON output, which can disrupt log…

Karen Serobovich Vardanyan, a 34-year-old Armenian national, pleaded guilty in the U.S. to his involvement in Ryuk ransomware attacks targeting American organizations from 2019 to 2020. Extradited from Ukraine following his arrest in 2025, he admitted to…

Progress Software has issued an urgent advisory to customers of its ShareFile Storage Zone, urging them to immediately shut down internet-facing Windows servers due to a credible external security threat. This warning came in an email sent on July 10,…

The Security Affairs Malware Newsletter Round 105 features a compilation of key articles and research on malware from around the world. Highlights include: the QuimaRAT targeting multiple operating systems, Avalon’s transition to ransomware, an analysis of…

The security vulnerability CVE-2026-53486 affects the @xhmikosr/decompress npm package, allowing crafted archives to write files outside the extraction directory, with a CVSS score of 9.1. The affected versions include < 10.2.1, >= 11.0.0, < 11.1.3, and <=…

The Security Affairs newsletter Round 585 highlights critical security issues and updates, including: recent vulnerabilities listed by the U.S. CISA, major data breaches involving Accenture and Medtronic, ongoing ransomware trends with over 9,000 confirmed…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities in iCagenda and Balbooa Forms to its Known Exploited Vulnerabilities (KEV) catalog. These include CVE-2026-48939, which involves unrestricted file upload allowing for…

A recent release of the jscrambler 8.14.0 npm package was compromised, resulting in the distribution of Rust-infostealer malware during installation. This incident highlights vulnerabilities in the software supply chain and emphasizes the importance of…

The article discusses a cyber espionage campaign where hackers exploited the Balochistan Police Portal as a tool for intelligence operations. The attack demonstrates a significant breach in cybersecurity, as it involved multiple hacker groups targeting…

Binarly has identified six critical vulnerabilities in U-Boot, an open-source bootloader integral to many devices, including routers and smart cameras. These flaws range from allowing arbitrary code execution during boot image verification to causing…

The article reports on the misuse of the GitHub API by threat actors to systematically identify organizations, repositories, and user accounts, as observed in a recent Datadog report. The attackers are utilizing dormant 'ghost' accounts to send API traffic,…

On July 11, 2026, version 8.14.0 of the `jscrambler` npm package was released, containing a malicious preinstall hook that deploys a platform-specific native binary on Linux, Windows, and macOS. This version, used for JavaScript obfuscation and web-app…

The page reports the release of Wireshark version 4.6.7, which addresses 12 vulnerabilities and 16 bugs. The publication is by Didier Stevens, a senior handler at SANS, and it includes a link to detailed release notes. The threat level is noted as green.…

The article discusses a critical vulnerability in Zimbra that could allow attackers to execute malicious code through crafted emails in user sessions. This flaw poses significant risks to email security and user data integrity. Additionally, the article…

In Q2 2026, 75 vulnerabilities were added to the CISA's Known Exploited Vulnerabilities (KEV) catalog, marking a 5.6% increase from the previous quarter. Notably, 21 of these vulnerabilities had a critical CVSS score of 9.0 or higher, indicating high…

The article discusses the emergence and activities of The Gentlemen ransomware group, a Ransomware-as-a-Service (RaaS) operation active since 2025. It highlights their use of various programming languages to develop ransomware variants and their notable…

Zimbra has released version 10.1.19 to address a critical stored XSS vulnerability in its Classic Web Client, which allows malicious emails to execute harmful code when opened. This vulnerability can lead to unauthorized access to mailbox information,…

The article discusses "ScamBuster," an open-source, AI-driven system designed to combat phishing scams by engaging with attackers using victim personas. Developed by Laurent Giovannoni, ScamBuster aims to collect data from scammers to identify their…

Jen Ellis, recently awarded the Member of the Order of the British Empire (MBE), has made significant impacts in cybersecurity policy, particularly advocating for security researchers. Her journey began after witnessing her friend HD Moore face legal threats…

The article discusses a recent compromise of Injective Labs' GitHub, resulting in the deployment of malicious npm packages designed to steal wallet keys. This incident highlights vulnerabilities in the software supply chain and the continuous risks posed by…

In the first half of 2026, cyberattacks on the healthcare sector increased by 14%. Notably, attacks on healthcare businesses surged by 110% compared to the same period last year. A ransomware attack on the University of Mississippi Medical Center caused…

Progress Software has issued an urgent recommendation for ShareFile customers to shut down their Storage Zone Controllers due to a critical security threat. Customers are being advised to take immediate action to prevent potential breaches. The announcement…

The July 2026 progress report on Microsoft's Secure Future Initiative (SFI) highlights advancements in cybersecurity driven by AI and the importance of proactive defense against evolving cyber threats. The report is structured around three themes: secure…

The US Cybersecurity and Infrastructure Security Agency (CISA) addressed its internal incident response to exposed AWS GovCloud keys, which were found in a public GitHub repository owned by a contractor. No sensitive data was compromised, and CISA took…

The article discusses six newly discovered vulnerabilities in U-Boot, a widely used bootloader for embedded devices. These security flaws could potentially allow malicious images to crash devices or execute unauthorized code during the boot process. The…

Microsoft has identified a new malware called GigaWiper, which combines espionage and destructive capabilities, marking a significant shift in cyber-attack strategies. This multi-purpose backdoor allows attackers to conduct espionage while also executing…

SecurityWeek's cybersecurity news roundup covers key developments including the guilty plea of Armenian national Karen Vardanyan for involvement in Ryuk ransomware attacks, the emergence of the QuimaRAT remote access trojan on dark web forums, and Canada's…

The article highlights a critical vulnerability in the Tangem wallet, where a laser attack can reset passwords on cards that cannot be patched. This issue poses a significant risk to users, as these types of hardware wallets rely on their security features…

The article discusses a recent study detailing an attack chain that exploits three OpenClaw vulnerabilities to access WhatsApp and then pivot to host systems. Conducted by a prominent security researcher, the investigation reveals specific techniques used in…