-
Attackers compromised the infrastructure of third-party country-code top-level domains (ccTLDs) for Ghana (.gh), Sierra Leone (.sl), and American Samoa (.as). They modified authoritative DNS records to obtain unauthorized HTTPS certificates for Google …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Discord security bot Double Counter experienced a targeted infrastructure breach that compromised personal information linked to millions of accounts. According to an incident report by operator Tellter SAS, an attacker accessed cloud credentials, …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The U.S. Department of State is offering a reward of up to $10 million for information regarding Zhang Yu, a Chinese national accused of participating in cyberattacks that targeted American COVID-19 research. This initiative, part of the Rewards for Ju…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Attackers are exploiting CVE-2026-88771, a critical pre-authentication command-injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway, to deploy reverse shells, create privileged accounts, and establish persistent access. LevelBlue’s Thr…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers are abusing GitHub Actions to steal SSH keys, cloud credentials, and access tokens through malicious workflows disguised as security checks. The workflows targeted 2,577 secrets, but targeting did not always translate into theft. Researchers co…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A cryptocurrency mining campaign dubbed PoeLLM has compromised more than 3,400 servers by targeting exposed AI infrastructure and other internet-facing applications. Active since April 2026, the operation combines vulnerability exploitation, cryptocurr…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
MALFEX, a persistent npm supply-chain campaign distributing Windows malware through eight malicious packages. Linked to an apparent single operator active since August 2023, the campaign delivers Overlord RAT, the movinlike information stealer, and a s…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Ernst & Young (EY) has warned that a data breach exposed personal and financial information belonging to clients of Goldman Sachs’ wealth management division and Man Group. The incident involved a platform supporting EY’s tax services, not the fina…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Progress has disclosed a critical command injection vulnerability in the Early Access Release of its DataDirect Autonomous REST Connector AI Model Generator agents. This vulnerability, tracked as CVE-2026-91140, allows specially crafted OpenAPI or Swag…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
CyberXero, a Russian-speaking initial access broker combining conventional exploitation tools with AI agents to pursue global website compromises and targeted intrusions against Ukrainian energy infrastructure. The findings describe an active, financia…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
