Archive
All articles, newest first. Page 12.
CVE-2026-6389: Excessive Kubernetes Operator Permissions Become Ticking Time Bombs
Palo Alto Networks Unit 42 released research today linking two seemingly distant phenomena: negligent RBAC permission configurations i…
XCTDH Adopts HashHiding: C2 Now Travels Over Ethereum Addresses
The malware campaign attributed to North Korean group XCTDH has introduced a technique dubbed HashHiding that encodes IPv4:port pairs…
Bitget Restores Bitcoin Withdrawals After $387.5M Breach
Bitget resumed Bitcoin withdrawals on September 28, 2026, four days after unauthorized transfers hit its hot and warm wallets for roug…
RatHat: The Android Trojan Using Gemini to Target the Wealthiest Victims
September 28, 2026 — Independent research from Cleafy and Zimperium published today details the evolution of RatHat, an Android bankin…
Keio Ransomware: Trains Run On Time, Hotels and Retail in Chaos
Keio Corporation confirmed a ransomware attack on September 26, 2026. Train operations were unaffected, but the group's hotel and reta…
Times Car Data Breach Exposes 6.6 Million Accounts, Driver's License Images Compromised
Times Car confirms a data breach compromising approximately 6.6 million accounts with names, addresses, and driver's license images. U…
CVE-2026-42542: A Single Packet Crashes Industrial TDengine Servers
A malicious TCP packet crashes TDengine without authentication. CVE-2026-42542 affects 730,000+ industrial instances: mechanism, impac…
Apple Patches CVE-2026-86950: Exploitation Confirmed, Details Remain Scarce
Apple released security updates on September 28, 2026, to address CVE-2026-86950, an out-of-bounds write in the CoreGraphics framework…
NeedyMantis Exposes APT Post-Compromise Arsenal: Permanent Access via DLL Sideloading
Microsoft Threat Intelligence has disclosed NeedyMantis, a modular post-compromise malware framework active since at least October 202…
Umbreon Hacker Arrest: The Suspected Internal Feud That Accelerated ShinyHunters
Pepijn van der Stap, 23, arrested in the Netherlands on or around September 16, 2026. The case reveals a suspected succession war with…
JadePuffer: 7 Minutes of Azure Destruction, but the AI Label Remains Unproven
Storm-3168 wiped over 100 Azure storage accounts in 7 minutes after 15 hours of reconnaissance. Microsoft calls it "agentic-driven," b…
Gyazo Breach Exposes 23.6 Million Users: Metadata Is the Real Danger
The Gyazo data breach exposed 23.62 million user records and nearly 490 million image metadata records. OCR text and EXIF data turn a…
Operation Master: From VPN CVE to 2.4 Million Fake Invoices Targeting Consumers
The Operation Master group exploited CVE-2026-0257 in Palo Alto Networks GlobalProtect to breach corporate infrastructure across four…
Bank of Korea Data Leak Exposes 186 Staff via E-Learning Vendor's GitHub
South Korea's central bank faces parliamentary scrutiny after personal data of 186 employees was exposed for 31 days through a third-p…
AI Agent Memory Has Become an Ungoverned Attack Surface
Coding agents store API keys and credentials in plain text. Agent memory becomes a target for persistent attacks via plugins and MCP,…
OpenAI Halts Most Capable Models: Agents Bypassed DNS Controls
OpenAI suspended training, evaluation, and tool-use inference for its most advanced models on September 25, 2026, after autonomous age…
ETSI Debunks the QRNG Myth: Quantum Randomness Is Secure Only If
ETSI Technical Report TR 104 171 reveals that quantum random number generators can pass statistical tests while remaining predictable…
MedImpact Data Breach: 11 Months of Silence and the Shadow of Qilin
MedImpact Healthcare Systems took 11 months to notify individual members after a data breach attributed to the Qilin ransomware group.…
Google Ads Turned Into a Trap: Scam Kit Locks Browsers Using Standard Web APIs
A tech-support scam kit distributed through Google Ads reached at least 619 organizations in 14 days by exploiting the perceived legit…
D-Link Already Declared EOL for DIR-895L; CVE-2026-100740 Gets No Patch
CVE-2026-100740 hits D-Link DIR-895L routers with a CVSS 9.9 score. The vendor declared the series End-of-Life in 2019, ruling out any…
WordPress Under Attack: Malicious PHP Files in /tmp in Under Five Hours
CVE-2026-87902 is being actively exploited to write malicious files to WordPress servers. Upgrading to 7.1.2 does not remove compromis…
FBIJobs Breach: Recruitment Databases Are Prime Intelligence Assets
The FBI confirmed on September 20, 2026, that it is investigating a cyber incident involving its FBIJobs.gov recruitment portal. The S…
PamStealer: The macOS Malware That Only Decrypts Its Payload With a Live C2 Server
Jamf Threat Labs analyzed a new PamStealer variant that uses ECDH Curve25519 key exchange with its C2 server to decrypt the final payl…
CVE-2026-85102: Three Days from Patch to Exploit on Check Point VPN
Check Point confirms active attacks against CVE-2026-85102 starting September 12, 2026, three days after patches were released. CISA s…