Archive
All articles, newest first. Page 16.
North Korea Turns Job Interviews Into an Attack System
On September 18, 2026, four intelligence and law-enforcement agencies — Japan's NPA, the FBI, Australia's ACSC, and Germany's BND/BfV…
CrowdSec: Source Code Stolen from 170 Private Repos — Offboarding Wasn't Enough
On September 16, 2026, source code from roughly 170 private CrowdSec repositories appeared on a criminal forum. The exfiltration occur…
Mirai Expands From IoT Devices to Servers: Active Exploitation of cPanel Auth Bypass CVE-2026-41940
Threat actors are exploiting the CVE-2026-41940 authentication bypass in cPanel/WHM to compromise hosting servers and deploy Mirai mal…
PAYLOAD: A Malicious GPO Replaces Ransomware on Windows
The PAYLOAD group used an Active Directory Group Policy Object to distribute ransom notes and alter wallpapers across all workstations…
Google Confirms Gemini AI Accidentally Accessed Three Real Companies
During a May 2026 cybersecurity test by Israeli firm Irregular, Google's Gemini model interacted with three real companies' systems. G…
Jade Sleet Breaks Out of Crypto Tunnel: macOS Backdoors Found in Indian IT Provider
SentinelOne reveals North Korean threat actor Jade Sleet compromised an Indian IT services provider using the FLATROOF and ROOFDECK ma…
How Intent Injection Threatens 6G AI-Native Network Automation
A paper from the University of Ottawa and Nokia Bell Labs exposes adversarial intent injection in 6G AI-native networks: malicious JSO…
Sonoma: The Mac Malware Turning iCloud CalDAV Into a Criminal CDN
The Crazy Evil gang is distributing Sonoma, a macOS infostealer that abuses iCloud CalDAV as a staging CDN and uses in-process PAM to…
JADEPUFFER Encrypts AI Weights with ENCFORGE: Phantom Ransom, Broken Payment Mechanism
The agentic ransomware group JADEPUFFER struck Langflow infrastructure with ENCFORGE, a payload that encrypts AI models without a func…
Infected PHP Themes on Streaming Sites: The iOS Chain That Empties Crypto Wallets
Thirteen compromised Packagist packages turn Vietnamese streaming sites into vectors for a WebKit-to-kernel exploit chain on iPhone, s…
Two Bugs in OpenAI Codex Break the Strictest Sandbox in Read-Only Mode
Oren Yomtov of Accomplish AI discovered and demonstrated two sandbox-escape vulnerabilities in OpenAI Codex — Heapjack and Overpatch —…
npm Package indexed-btree Evades Install-Time Defenses With Runtime Payload
The npm package indexed-btree, masquerading as the legitimate sorted-btree library and pulling nearly 2 million weekly downloads, hide…
RansomHouse Hits Namibia's Defence Ministry: The September 19 Case
Nam-CSIRT has confirmed the RansomHouse ransomware attack on Namibia's Ministry of Defence and Veterans Affairs. The leak-site listing…
Plugin4Shell: First Supply-Chain Vulnerability in AI Agent Plugin Ecosystem
The Plugin4Shell vulnerability bypasses SHA pinning in plugins for four AI agents. Two vendors have patched; Microsoft and Google have…
BragJack: A Malicious Extension Hijacks Five AI Agents in Chromium Browsers
A proof-of-concept demonstrates how a pre-installed malicious extension can control AI agents in Chrome, Edge, Opera, Perplexity, and…
ShinyHunters Defaces Clop Leak Site: Cybercrime Feud Goes Public
ShinyHunters breached the Clop ransomware gang's Tor leak site on September 18, 2026, uploading a text file and replacing the homepage…
SolarWinds Patches Hard-Coded Cryptographic Key in ARM: CVE-2026-28326
SolarWinds released patch 2026.2.1 for Access Rights Manager. CVE-2026-28326 enables unauthenticated RCE via a hard-coded cryptographi…
CISA Adds Three Linux Kernel CVEs to KEV With Three-Day Deadline for US Agencies
CISA added three Linux kernel vulnerabilities to the Known Exploited Vulnerabilities catalog on September 18, 2026, giving federal civ…
Settra: The Log Typo That Confirmed Traces of a New Ransomware
The Settra ransomware variant, observed since June 2026, hit two targets in the retail and manufacturing sectors using rigorously stan…
Four Linux Exploits Published: Local Root via Bugs 10–21 Years Old
Security researcher Asim Manizada released working proof-of-concept exploits for four Linux kernel vulnerabilities on September 18, 20…
Gyazo Breach Exposes 23.6 Million Records: The Failure of Security by Obscurity
On September 11, 2026, Helpfeel detected unauthorized access to Gyazo servers. An attacker exploited a vulnerability in the image uplo…
Xreader PDF RCE: Unguarded C Union Exposes Linux Mint to Remote Attack
ZDI-26-715 reveals a type confusion in Xreader's PDF parser that enables arbitrary code execution simply by opening a malicious PDF. T…
TraderTraitor Moves Beyond Crypto: macOS Backdoors Found at Indian IT Firm
SentinelOne has identified a new TraderTraitor victim — an Indian IT services company with no cryptocurrency ties — compromised by the…
Microsoft-Signed Driver Kills 145 Antivirus Products: The Rapuncel Campaign
An active malware campaign since August 13, 2026 impersonates LastPass and at least 39 other companies on SEO-optimized GitHub reposit…