-
Threat actors are exploiting two zero-day vulnerabilities in Ahsay Cloud Backup Server (AhsayCBS) to compromise exposed backup servers without authentication and execute commands with SYSTEM privileges. Observed intrusions have deployed web shells and …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers used AI agents to turn an exposed application endpoint into full administrative control of a server in under 24 hours. The intrusion involved hundreds of commands, credential theft, and Windows privilege escalation without new malware or a zero…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly disclosed attack chain in Amazon Bedrock AgentCore that could turn a single malicious prompt into credential theft and compromise of other AI agents within the same AWS account and region. Dubbed AgentCorruption, the research linked metadata ac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A security vulnerability has been identified in React Server Components deployments using specific vulnerable releases of React 19. An attacker can exploit this flaw to create a denial-of-service condition through specially crafted HTTP POST requests, …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
CastleStealer, a C# information stealer first publicly identified in April 2026, has expanded its capabilities beyond credential theft. New samples analyzed by Flashpoint bypass Chromium app-bound encryption, support remote command execution, and trans…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cisco Talos warns that coordinated AI agent swarms could radically shorten the time needed to run sophisticated cyberattacks, compressing operations that traditionally require months of red-team planning, reconnaissance, and infrastructure work into ho…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A campaign in July 2026 using a trojanized Terraform provider to deploy cross-platform malware against developer environments. The operation delivers FLATROOF for credential theft and initial access, followed by ROOFDECK for broader remote control. Att…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The FBI has announced another disruption of scam centers in Ghana as part of Operation Blackout, resulting in the arrest or detention of over 130 individuals and the seizure of more than 300 devices. FBI Director Kash Patel said investigators have iden…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Warden Stealer as a rapidly growing malware-as-a-service operation targeting data stored by AI assistants and coding agents, including Claude, Codex, Grok, and Cursor. The Rust-based infostealer is among the first malware families observed systematical…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers targeted Hikvision surveillance devices in Ukraine during a concentrated surge of remote command execution attempts that coincided with Russian missile and drone strikes. GreyNoise documented a nine-day increase in exploitation activity from Se…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
