News

The article discusses the emergence of E4del and PINHOLE RATs, which exploit FTP banners to act as dead drops for malware commands. It covers the implications of this finding in terms of cybersecurity threats presented by malware and social engineering…

Kaspersky researchers have discovered the first malware specifically targeting car head units, linked to the BadBox botnet. The malware exploits a vulnerability in software update systems of an Android-based infotainment system from the Chinese company…

The article discusses the transformative role of Frontier AI in vulnerability management within cybersecurity. It emphasizes how AI can enhance the speed and effectiveness of identifying and mitigating vulnerabilities, changing the landscape of threat…

The Australian Cyber Security Centre (ACSC) has issued a warning regarding the active exploitation of a critical vulnerability (CVE 2026-63077) affecting TeamCity On-Premises servers. This flaw allows unauthenticated attackers to bypass authentication checks…

The article discusses the ongoing threat of WeedHack malware targeting Minecraft players. Despite the takedown of the original infrastructure, McAfee researchers reported over 6,300 attempts to access malicious sites linked to the campaign. WeedHack,…

The content discusses a critical security vulnerability (CVE-2026-77136) in TYPO3 Powermail that allows remote code execution (RCE) due to improper access control, currently being exploited by attackers. TYPO3 developers have issued a warning for users to…

In August 2026, Take-Two Interactive, publisher of the Grand Theft Auto (GTA) series, issued a subpoena to Microsoft and Discord following a leak of GTA 6 game footage. The subpoena demands user data from three Discord servers, potentially exposing personal…

Palo Alto Networks' report discusses the state of AI-enabled malware, highlighting that while AI integration in malware is real, its actual deployment in the wild is limited. The study analyzed 405 malware samples, revealing that only 12 samples were…

The article discusses the issue of "silent patches"—vulnerability fixes released without public disclosure. Such practices, intended to prevent attackers from exploiting vulnerabilities, actually risk leaving defenders, such as penetration testers and IT…

OpenAI has disrupted a covert Russian influence operation, involving the creation of a fraudulent think tank named the International Burke Institute (IBI). The group, suspected of being Russian operators, spread disinformation using AI-driven accounts on…

A critical vulnerability has been identified in Weidmueller routers, impacting products IE-SR-2TX-WL and IE-SR-2TX-WL-4G. Two flaws, CVE-2026-63586 and CVE-2026-63587, have a maximum CVSS score of 9.8, allowing unauthenticated remote code execution and…

ReliaQuest has denied claims that it was compromised during a recent social engineering attack linked to the ShinyHunters group. The company revealed that the attack briefly exposed its identity dashboard when a team member was deceived into providing access…

The US has imposed sanctions on nearly 60 individuals and entities, including members of the Mabna Institute, a hacking group associated with the Iranian regime, as part of "Operation Economic Outcast." This initiative aims to disrupt financial support to…

Attackers are exploiting vulnerabilities in the miniOrange SAML plugin, which could potentially allow unauthorized access to WordPress admin accounts. This flaw emphasizes the need for heightened security measures and regular updates for web applications to…

Taiwanese prosecutors have charged nine individuals, including employees from Nvidia and Super Micro, for illegally exporting advanced AI servers to mainland China. This issue arises amid intensified U.S.-China competition over AI infrastructure,…

The article discusses TikTok phishing scams and how to recognize fraudulent login and verification pages. Phishing often begins with messages claiming account issues, prompting users to click malicious links that mimic TikTok's official site. Key indicators…

The article discusses ongoing threats from the WeedHack malware campaign, despite the takedown of its command-and-control (C2) servers. McAfee Labs reported that malicious websites are still active, spreading the malware by impersonating legitimate Minecraft…

Core Werewolf, a suspected cyberespionage group, deployed a remote access trojan (RAT) named CoreRAT against Russian defense and public sector entities from June to July 2026. The attackers utilized two droppers to spread CoreRAT, disguised as military…

The article discusses the Balonx Sistema, a Phishing-as-a-Service platform operating in Mexico, identified by Group-IB. This platform has targeted over 20 Mexican banks, exploiting more than 1,100 victims to potentially siphon off $99,384 USD. Key features…

The article discusses a critical vulnerability in Oracle WebLogic that allows unauthenticated attackers to access sensitive data. It emphasizes the urgency for enterprises to address this flaw due to ongoing exploitations. Additionally, the article…

A recent issue for ASUS ROG laptop users arises from a conflict between Windows 11 and the Armoury Crate software. Users report that when ECO mode is activated for an extended period, Windows 11 fails to automatically reinstall NVIDIA graphics drivers after…

The cybersecurity sector is facing an increase in fake AI proof-of-concept (PoC) submissions on public code-sharing platforms, according to a report by VulnCheck. While researchers have reviewed over 17,800 PoCs in 2026, the quality has plummeted, with…

Over 28,000 Git repositories have been discovered exposed on public servers, affecting 3.5 million hosts. These repositories risk data theft and cloud infrastructure takeover by leaking sensitive data like AWS keys and Stripe secrets due to misconfigured…

A recent ruling by the Dutch Data Protection Authority imposed a fine of 824.9 million euros ($966 million) on Uber due to its automated system that suspended driver accounts without human review. This practice was found to violate the European General Data…

YouTube Premium is set to increase subscription prices in various European and Asian countries starting September 23, 2026. Affected countries include Spain, Portugal, Italy, Finland, Romania, Netherlands, Hungary, Ukraine, and Singapore, with price hikes…

Microsoft has released a controversial application called 'Microsoft Recommended Search Settings' that forces Bing to become the default search engine across various browsers. This program, utilizing the WinUI interface, injects an extension into browsers…

The ISC Stormcast for August 25, 2026, is presented by Didier Stevens, with a current threat level categorized as green. The content includes links to prior diaries, podcasts, and additional SANS resources and classes taught by Dr. Johannes Ullrich. Users…

A critical alert highlights the discovery of multiple vulnerabilities affecting TP-Link Archer routers. The most severe is CVE-2026-9254, an unauthenticated OS command injection flaw that allows attackers to gain root access and potentially compromise…

The content discusses the discovery of a critical vulnerability (CVE-2026-53365) in the Linux kernel, which allows unprivileged local privilege escalation through a proof-of-concept exploit named VsockDrop. This exploit operates via the io_uring zerocopy…

CISA has set a three-day deadline for federal agencies to address a significant security flaw in the Zimbra communications suite, identified as CVE-2026-73570. This vulnerability allows potential attackers to execute unauthorized code remotely, threatening…

The article discusses a new malware loader called WordlistLoader that utilizes ordinary English words to hide malicious code, specifically targeting the Amatera infostealer. This malware prepares the victim's environment and reconstructs hidden code,…

AliExpress has been found using an outdated fingerprinting technique that involves sending inaudible sounds to browsers, impacting users' experience with Bluetooth headphones. Researcher Matthew Callaghan discovered this while investigating odd audio…

Cloudflare recently redesigned its blog and migrated to a new CMS called EmDash. This migration included significant performance improvements and a modern interface aligned with Cloudflare's visual identity. Key highlights include: 1. **Customer Zero**:…