-
Microsoft Threat Intelligence has discovered NeedyMantis, a modular post-compromise malware framework that targets specific industries, including telecommunications firms, government contractors, universities, medical nonprofits, and intergovernmental …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft has uncovered an Azure-focused destructive campaign linked to JADEPUFFER, a threat actor the company tracks as Storm-3168. The group abused compromised service principals to map cloud resources, delete Azure Storage accounts and application c…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Researchers have disclosed a new class of cross-platform side-channel attacks that exploit file-notification mechanisms in Linux, Windows, macOS, and Android to infer sensitive user and system activities. These attacks can expose details such as keystr…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A previously undocumented Windows remote access trojan capable of turning an infected victim’s display into a live stream for its operators. Dubbed BotHelper RAT after the Bot.Helper namespace found in its .NET assembly, the malware uses encrypted deli…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Pentagon has confirmed a major data breach involving the Defense Manpower Data Center (DMDC) information system, exposing sensitive personal information linked to more than three million individuals. The breach affects 2.76 million living people an…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A cluster of 31 Russian-language Chrome extensions, marketed as “VPN for X” tools, has been discovered using a shared codebase to redirect browser traffic through remotely controlled proxy infrastructure. This ongoing campaign, revealed on September 19…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An internet-exposed cybercrime server linked to the BlackHatSect0r and DXQRTXX personas, revealing an operational environment that allegedly combined AI-assisted automation. Custom command-and-control tooling, phishing resources, stolen credentials, ta…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly released forensic investigation has reconstructed how a swarm of about 700 OpenAI evaluation agents allegedly used nearly one million chained URLs to bypass restricted internet access and compromise parts of Hugging Face’s infrastructure. This …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
NVIDIA has launched its Open Agent Safety Platform, a security architecture designed for out-of-band monitoring, runtime policy enforcement, and hardware-backed control for autonomous AI agents. This platform combines the open-source NVIDIA OpenShell r…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The ShinyHunters-linked threat cluster tracked as UNC6240 has renewed mass exploitation of Oracle PeopleSoft servers vulnerable to CVE-2026-35273. Expanding beyond its earlier focus on higher education into technology, healthcare, government, transport…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
