-
Warden Stealer as a rapidly growing malware-as-a-service operation targeting data stored by AI assistants and coding agents, including Claude, Codex, Grok, and Cursor. The Rust-based infostealer is among the first malware families observed systematical…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers targeted Hikvision surveillance devices in Ukraine during a concentrated surge of remote command execution attempts that coincided with Russian missile and drone strikes. GreyNoise documented a nine-day increase in exploitation activity from Se…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
MATCHBOIL’s evolution from a basic C# downloader into a more evasive implant supporting recurring command-and-control communication. Operated by UAC-0099, the malware now incorporates sandbox checks, commercial .NET obfuscation, deceptive interfaces, a…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Anthropic launched its Cyber Mission, a long-term initiative aimed at helping defenders secure critical infrastructure and open-source software. This initiative utilizes frontier Claude models, offers engineering support, conducts threat research, and …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Citrix has disclosed a critical memory overflow vulnerability in NetScaler ADC and NetScaler Gateway that could enable remote code execution or denial of service under specific configuration conditions. This vulnerability, tracked as CVE-2026-107406, c…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft is urging enterprises to prepare for post-quantum authentication by testing certificate dependencies before attempting broad infrastructure migration. Its Post-Quantum Cryptography Transport Layer Security Pilot Program, launched on August 27…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft Teams to Introduce Deepfake Detection to Identify AI-Generated Audio and Video in Meetings
Microsoft Teams will support third-party detection of synthetic audio and video, allowing organizations to identify potentially AI-generated or manipulated media during meetings. Microsoft’s roadmap indicates this new capability is in development…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A critical authentication bypass vulnerability in Sungrow’s iSolarCloud management platform allowed researchers to access user and administrator accounts without valid passwords. This flaw potentially exposed connected solar plants, inverters, and batt…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The FBI and international cybersecurity agencies have warned about hackers linked to the Chinese government who use automated vulnerability scanning, large-scale botnets, and hands-on exploitation to steal sensitive information worldwide. A joint advis…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A threat actor published a malicious version of the tensorlake npm package on October 8, 2026, embedding a new variant of the self-replicating Shai-Hulud supply-chain worm. The compromised release, tensorlake version 0.5.144, can steal developer secret…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶