-
An internet-exposed cybercrime server linked to the BlackHatSect0r and DXQRTXX personas, revealing an operational environment that allegedly combined AI-assisted automation. Custom command-and-control tooling, phishing resources, stolen credentials, ta…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly released forensic investigation has reconstructed how a swarm of about 700 OpenAI evaluation agents allegedly used nearly one million chained URLs to bypass restricted internet access and compromise parts of Hugging Face’s infrastructure. This …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
NVIDIA has launched its Open Agent Safety Platform, a security architecture designed for out-of-band monitoring, runtime policy enforcement, and hardware-backed control for autonomous AI agents. This platform combines the open-source NVIDIA OpenShell r…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The ShinyHunters-linked threat cluster tracked as UNC6240 has renewed mass exploitation of Oracle PeopleSoft servers vulnerable to CVE-2026-35273. Expanding beyond its earlier focus on higher education into technology, healthcare, government, transport…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A surge of lookalike domains targeting users of TypeSafe AI’s newly launched Jev decision model, with roughly 670 “jev”-branded domains obtaining TLS certificates within eight days of the product’s debut. Several sites are already operating as unoffici…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
TrustSink, a post-compromise credential-phishing technique that abuses Microsoft Entra External Authentication Methods (EAMs) to place a rogue password prompt inside an otherwise legitimate Microsoft sign-in flow. The attack enables an adversary with e…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Infostealer malware is increasingly becoming the bridge between a compromised developer workstation and an enterprise cloud environment, with Lumma, RedLine, and Vidar emerging as major threats to credentials, API keys, and active browser sessions. Ide…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
“Operation Master,” an end-to-end cybercrime operation that combined GlobalProtect VPN exploitation, web-application attacks, credential theft, data monetization, and an industrial-scale invoice-fraud platform. The campaign illustrates how enterprise i…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Python-based information stealer that targets data from 17 Chromium-based browsers, alongside Firefox, to harvest saved credentials, payment-card details, browsing history and active session cookies. The malware is delivered through a builder framewo…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Kiteworks has lifted its emergency shutdown recommendation after advising customers to temporarily take their systems offline in response to credible intelligence indicating that a threat actor may target its platforms. The company clarified that this …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
