-
Iran-linked APT42 is escalating its espionage operations with AI-assisted phishing and an expanded TAMECAT backdoor, enabling long-lived access to defense and government identities rather than just endpoints. Recent activity shows tightly integrated so…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Abbott has disclosed a cybersecurity incident involving unauthorized access to a limited number of internal systems used by its Cancer Diagnostics business. Upon discovering the activity, the company acted swiftly by launching an investigation, engagin…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Linux kernel security team published approximately 440,440 CVE advisories over 24 hours, reflecting a significant release of vulnerability records linked to fixes already incorporated into the upstream kernel tree. These notices were distributed th…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
AgentBaiting is the clearest sign yet that AI agents and their capability ecosystems have become a first‑class malware delivery surface, with FakeGit’s 7,600‑repo operation pushing SmartLoader and StealC directly into AI Skills and MCP workflows. By tu…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Gitea administrators are strongly encouraged to upgrade their systems following the discovery of a critical authorization vulnerability. This flaw allows public-only API tokens to modify private pull request branches and potentially trigger Gitea Actio…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Fileless stealer and PureRAT operators are abusing a WebDAV‑backed “malware delivery lab” to raid browser passwords, Telegram sessions, and cryptocurrency wallets in a campaign that blends fileless info‑stealing with a modular .NET RAT. The incident be…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Passwork Europe, a Spain-based password manager used by European public sector bodies, universities, and private organizations, is facing scrutiny after an investigation led by OCCRP uncovered technical and historical connections to a Russian counterpa…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Bit2Watt is a newly disclosed cyber‑physical attack class that weaponizes AI and GPU workloads in modern data centers to destabilize nearby power grids, turning compute infrastructure itself into a grid‑scale threat surface. Measurements on NVIDIA acce…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Gig-economy platform Paidwork has been linked to a significant data breach that affects 23.3 million accounts. This breach, involving an approximately 11GB dataset, was publicly released in July 2026. The incident was added to the Have I Been Pwned (HI…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
HOLLOWGRAPH, a Windows malware implant that transforms Microsoft 365 calendar events into a covert command-and-control channel. This malware, which is highly likely linked to the Cavern modular backdoor framework, utilizes the Microsoft Graph API to re…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
