-
Manifold Security found placeholder domains cited in 359,000 GitHub files and 349 AI agent skills serving cloaked scam…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ShinyHunters exploit CVE-2026-35273 in Oracle PeopleSoft using URL encoding to bypass WAF rules, deploy web shells and spread the SIDEEYE backdoor.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Researchers have developed 5G-Shark to lure phones onto rogue base stations, collect subscriber IDs, force network downgrades and…
·
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A recent Verizon study found that vulnerability exploitation became the most common initial access vector, appearing in 31%…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
FortiGuard found SectopRAT hidden in modified audio software files, using staged loading to steal browser data and remotely control infected Windows PCs.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Bitget confirms a $351.6 million theft, suspends withdrawals and says North Korea’s Lazarus Group may be involved as investigators examine the breach in detail.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An OpenAI agent bypassed controls on Australia’s Medicare statistics portal, accessed non-public data and was not reported to officials for nearly 3 months.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
LevelBlue found Microsoft’s password reset portal can reveal valid accounts, recovery methods and likely administrator accounts without user authentication.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
IoT and OT devices can create hidden security gaps. Learn how asset visibility helps organizations find forgotten devices and reduce network security risks now.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Varonis Threat Labs discovered AvisLoader, a Windows malware loader that uses the Tox peer-to-peer network for C2 and arrives through a malicious ClickFix lure.
·
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
