Archive
All articles, newest first. Page 11.
Suspected KillSec Leader Arrested: He's 16
Operation KillSwitch on September 30, 2026 led to the provisional arrest of a 16-year-old identified as the suspected main administrat…
Warlock: The Chinese Ransomware That Weaponizes Active Directory
The Warlock group exploits Active Directory's SYSVOL replication to spread its payload. This living-off-the-land technique makes the a…
543,699 Active Credentials Still Exposed on GitHub: The Revocation Black Hole
On July 27–28, 2026, Truffle Security verified in real time that 543,699 unique credentials remain active, found across 224,553,295 pu…
Clean, Signed ScreenConnect Installer Turns Trojan: How RMM Tools Become Weapons
Threat actors are distributing a legitimate, digitally signed ScreenConnect installer preconfigured to connect to an attacker-controll…
AI-Discovered Vulnerabilities Draw Attackers: RCE at Twice the Rate
Google Threat Intelligence Group data shows AI-discovered vulnerabilities are twice as likely to be exploited for remote code executio…
Google Promises Automated Patching With Argon, But the Model Remains Inaccessible
Google announces Gemini 4 Argon, a language model it says can autonomously find, validate, and patch critical software vulnerabilities…
Linux Emulated Mainframe Driver Becomes a Path to Root Escalation
A Linux kernel vulnerability allows local privilege escalation via an emulated SMC-D compatibility driver, with a public exploit demon…
OFAC Sanctions TdA Jackpotting Network: 7 TRON Addresses Targeted
The U.S. Treasury hit 10 targets linked to the Venezuelan Tren de Aragua cartel over $40 million stolen from ATMs. Seven TRON addresse…
Citrix NetScaler Zero-Day: WHIPSHOT and SLAPSHOT Malware Active Since September
Two critical Citrix NetScaler vulnerabilities were exploited as zero-days starting September 1, 2026, three weeks before Citrix publis…
WatchGuard FireWare OS: RCE Vulnerability in spamd Service Rated CVSS 8.6
A stack-based buffer overflow in the spamd (spamBlocker) service of WatchGuard FireWare OS allows authenticated administrators to achi…
Star Blizzard Launches RedFlick: One Email, One Interaction
Star Blizzard has replaced ClickFix with RedFlick, an infection chain requiring a single click. Since January, 13 mass campaigns have…
DarkSword: iPhone Exploit Kit Delivered via Watering-Hole Attacks on Ukrainian Sites, SSSCIP Reveals
Ukraine's SSSCIP details DarkSword, an iOS exploit kit targeting military and government iPhones through compromised news, court, and…
Cisco Leaves New SD-WAN Zero-Day Unpatched: The Exploit Chain That Bypasses Authentication to Root
Cisco confirmed active exploitation of CVE-2026-20245, a command injection flaw in Catalyst SD-WAN Manager with no patch or workaround…
Chrome 154 and Firefox 157 Patch Over 100 Vulnerabilities Combined
Google and Mozilla released Chrome 154 and Firefox 157 on September 30, 2026, addressing more than 100 combined security flaws that en…
TeamViewer Mandates 15.82 Patch for Five High-Severity Cross-Platform Flaws
TeamViewer released version 15.82 on September 30, 2026, to fix five high-severity vulnerabilities affecting Windows, Linux, and macOS…
Anthropic's Mythos AI Autonomously Discovers and Weaponizes RCE in HFS
Anthropic's Mythos model, integrated into Horizon3's vulnerability research pipeline, independently identified and built a full exploi…
UK Cybersecurity Skills Gap: 57% of British Businesses Lack Confidence in Basic Defenses
The 2026 DSIT/Ipsos report finds 808,000 UK businesses lack confidence in fundamental cybersecurity technical skills, up from 49% in 2…
Malware Found in South African ATNS OT Network: 10% of Global Airspace at Risk
Air Traffic and Navigation Services (ATNS), the South African state-owned entity managing roughly 10% of the world's airspace, has dis…
From npm to AWS: 91.7 GB of European Commission Data and the Framework Shifting the Perimeter
The EC breach documents a disturbing pattern: install-time malware on npm packages steals cloud credentials before execution, turning…
Citrix NetScaler: Two Actively Exploited Zero-Days Patched After Disclosure Delay
Citrix released patches for eight NetScaler ADC and Gateway vulnerabilities on September 27, 2026. Two critical zero-days rated CVSS 9…
Wiz's Blue Agent Reconstructs GitHub-to-AWS Attack Chain in Minutes
An autonomous AI investigator correlated signals across three platforms in minutes to reconstruct a cross-platform data exfiltration c…
Autonomous AI Agent Hits DIVD: Operational Errors Leave Forensic Trail
The Dutch Institute for Vulnerability Disclosure suffered a breach carried out by an automated AI agent that operated autonomously dur…
CVE-2026-94127: F5 BIG-IP APM Zero-Day Triggers Three-Day CISA Deadline
F5 patched CVE-2026-94127, a critical heap-based buffer overflow in BIG-IP APM already exploited for remote code execution. CISA gave…
Pentagon: DMDC Data Breach Exposes 3 Million People's Data
The Defense Manpower Data Center confirmed a breach that exposed unencrypted PII of roughly 3 million individuals for nine months. The…