-
Google says its Android scam-detection capabilities now flag more than 5 million suspected scam calls and text messages each month, as mobile fraud operators increasingly use caller-ID spoofing, fake banking alerts, conversational phishing, and AI-enab…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
More than 20,000 malicious Cloudflare Pages subdomains used by Help TDS, a longstanding traffic distribution system that funnels victims into fraudulent technical support call centers. Researchers assess with high confidence that Hotejka, a Russian-lan…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A suspected China-nexus espionage group exploited a critical zero-day in BeyondTrust Remote Support, tracked as CVE-2026-102764. It then deleted logs to hide its activity. BeyondTrust patched the flaw in advisory BT26-05 and disclosed it on October 15,…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A critical unauthenticated OS command injection flaw in Collabora Online’s built-in CODE Server app for Nextcloud lets remote attackers run commands as the web server user. The advisory rates it 9.2 on CVSS v4. Collabora Online vulnerability Acco…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A likely Russian-speaking threat actor used hundreds of AI agents to exploit PaperCut NG/MF servers, steal Windows credentials and establish reusable access to internal networks. GreyNoise identified at least 440 compromised instances belonging to 395 …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft and international partners have disrupted infrastructure supporting CoGUI. This phishing kit Proofpoint says generates more than 100 million malicious emails monthly. The coordinated action targeted a Chinese-speaking fraud ecosystem encompas…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Researchers at pwn.ai used an AI-assisted research harness to find a critical Linux kernel networking flaw, tracked as CVE-2026-99999 and nicknamed “PwnEscape”. It lets an untrusted guest virtual machine leak host kernel memory and, in lab …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
NowSecure and Data Theorem mobile security lead automated mobile testing, Guardsquare owns shielding/obfuscation, and Corellium’s virtual devices changed what deep mobile research costs. Twelve options across testing, shielding, virtualization, and run…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Anchore’s Syft SBOM generator is the free generation standard, FOSSA and Cybeats lead SBOM management, and Finite State owns the embedded/OT depth regulators now demand. Twelve options across generation, management, and monitoring lanes with CycloneDX …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Your CI platform’s native controls (GitHub Advanced Security, GitLab Ultimate) are the baseline, Cycode and Legit lead dedicated pipeline posture, and StepSecurity owns the runner-hardening niche attackers actually exploit. Twelve options across native…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
