#and


US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access

Sep 30, 2026 // 13:51

ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United States. Technology, manufacturing, government, and […]

Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT

Sep 30, 2026 // 11:30

Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North […]

OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions

Sep 29, 2026 // 13:10

OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial intelligence (AI) model that was planned for an October launch, after it failed […]

⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats

Sep 28, 2026 // 19:19

A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving malicious lures. That is the […]

Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI

Sep 28, 2026 // 15:00

AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling data, calling APIs, and acting across […]

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

Sep 26, 2026 // 21:27

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The […]

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Sep 26, 2026 // 14:47

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The […]

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

Sep 26, 2026 // 13:38

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities […]

Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

Sep 25, 2026 // 17:47

Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the […]

PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence

Sep 25, 2026 // 16:27

Cybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered using a server-side decryption chain. The […]

Previous 1 2 3 4 5 … 55 Next