Archive
All articles, newest first. Page 7.
Ransomware Hits IDCF Cloud: Japanese Control Plane Collapses in 7 Minutes
A ransomware attack struck IDC Frontier's IDCF Cloud on October 7, 2026, compromising 239 hypervisors and 16,000 VM disks. The control…
"Prometheus" Arrested: The ATM Malware Funding the Venezuelan Cartel
Anibal Canelon Aguirre, alleged creator of the Ploutus-D malware and member of the Venezuelan Tren de Aragua cartel, has been arrested…
NVIDIA DCGM Bug: 2,100 GPU Servers Exposed, Unauthenticated DoS
CVE-2026-47483 hits NVIDIA GPU monitoring: 2,100 internet-exposed servers, 12,000 GPUs vulnerable to DoS via /debug/pprof endpoint. Th…
FakeGit Resurrects 17,610 Repositories: Reactive Cleanup on GitHub Is No Longer Enough
The FakeGit campaign returned on October 4, 2026 with 17,610 GitHub repositories. SmartLoader delivers StealC, leveraging legitimate a…
Shai-Hulud Worm Hits Tensorlake: AI SDK Turned Attack Vector
The npm package tensorlake@0.5.144 was compromised by the Shai-Hulud worm. Installing the AI SDK executes malware with a valid provena…
Citrix NetScaler: Third Zero-Day in 10 Days, CISA Sets Oct. 7 Deadline
CVE-2026-88779 hits the NetScaler ADC/Gateway SAML parser with a CVSS 4.0 score of 8.7. It is the third actively exploited zero-day on…
Attackers Steal ASOS Employee Credentials, Weaponize Push Notifications for Extortion
On October 6, 2026, ASOS app users received a push notification titled "ASOS HACKED" — not a security alert, but the extortion vehicle…
Midnight Mimosa: Malware Preinstalled on Thousands of Android Smartphones
The Midnight Mimosa campaign has infected the firmware of thousands of budget Android devices. The malware generates ad fraud and turn…
UAC-0099 Weaponizes Notepad++: How a Fake Plugin Becomes a Backdoor
The Russia-aligned UAC-0099 group deploys the MATCHBOIL.V2 loader by exploiting Notepad++'s plugin architecture. The LUNCHPOKE-BURNYBE…
AI Used to Attack South Korean Banks: 68,000 Records Exposed, Chinese Links Found
CrowdStrike attributes an AI-driven campaign against South Korean financial institutions to a Chinese-speaking actor with moderate con…
Malware Learns to Speak to AI Analyzers: Four Families Under the Microscope
Cisco Talos documents the A3 archetype: four malware families embed natural-language instructions to hijack LLM-based automated triage…
Oracle Health Breach Tally Climbs to Nearly 20 Million People
A Texas Attorney General report reveals nearly 20 million individuals were affected by the breach of legacy Cerner servers. Oracle has…
Bitget Loses $388 Million in Zero-Day Attack on Third-Party Security Products
On September 24, 2026, cryptocurrency exchange Bitget lost approximately $387.5 million after attackers exploited a zero-day vulnerabi…
Medical Devices Exposed: Only 6% Ready for Post-Quantum Cryptography
Forescout research across 2.5 million devices in over 50 healthcare organizations reveals IoMT and OT are the most vulnerable categori…
Blockchain Turns Arsenal: Smart Contracts Command Supply-Chain Worms
Unit 42 documents two campaigns that weaponize Ethereum, TRON, and BSC smart contracts to control npm worms. Over 400 infected package…
Unit 42 Uncovers Blockchain-Based C2: Smart Contracts Become Botnet Backbone
Palo Alto Networks Unit 42 has documented two campaigns — ChainDrop and PolinRider — that use Ethereum and multi-chain TRON, Aptos, an…
MonsterCloud CEO Indicted for Fraud: Sold 'Proprietary' Recovery But Secretly Paid Ransoms
Zohar Pinhasi, 50, CEO of Florida-based MonsterCloud LLC, appeared in the Eastern District of New York federal court on October 7, 202…
From Endpoints to Smart Contracts: How Botnets Are Upgrading C2
Unit 42 documents real-world campaigns using blockchain smart contracts for command-and-control, bypassing traditional detection on op…
U.S. Offers $10 Million for Zhang Yu, Hafnium’s Manager
The State Department places a record bounty on Zhang Yu, director of Shanghai Firetech and Chinese APT operator. Xu Zewei’s extraditio…
Arizona Courts Hacked: 1.3 Million People's Data Stolen in Phishing Attack
A phishing attack on the Arizona judicial system exposed foster care records and protective orders. No ransomware was deployed, raisin…
Denmark: 8.8 Million CPR Records Exposed via Compromised Corporate Account
Unauthorized access to a private Danish company's legitimate credentials enabled the extraction of roughly four out of five records fr…
Ransomware Targets Backups: 94% of Attacks Now Aim at Recovery Infrastructure
Ransomware groups have turned backup destruction into standard operating procedure. Sophos confirms 94% targeting rate: the resilience…
PoeLLM: The Malware Hiding C2 Servers in a GitHub Poem
The PoeLLM botnet has compromised over 3,400 AI servers by exploiting CVE-2026-42271. Command-and-control addresses are concealed in a…
Southern Company Notifies 400,000 Customers of Portal Breach, Offers No Technical Details
Southern Company has notified roughly 400,000 customers of Georgia Power, Alabama Power, and Mississippi Power that an unauthorized th…