Blahalla

Project Glasswing has uncovered 10,000 vulnerabilities: Anthropic

www.csoonline.com · 5 months ago

There are an estimated 10,000 critical or high severity vulnerabilities surfaced by Project Glasswing, an initiative using the Claude Mythos Preview model with more than 50 partners. Mythos Preview scanned over 1,000 open source projects and found 6,202 high or critical vulnerabilities, 1,752 of which were assessed by six independent firms with 90.6 percent true positives and 62.4 percent confirmed as high or critical; so far 530 high or critical bugs have been disclosed to maintainers, 75 patched and 65 public advisories issued, with plans to disclose another 827. Maintainers report a deluge of low quality AI generated reports and severe capacity constraints, shifting the cybersecurity bottleneck from finding bugs to human driven triage and patching, and Anthropic has launched a Claude Security beta, a Cyber Verification Program, and committed over 100 million dollars in usage credits and 4 million dollars in donations to support remediation.
The War Between Wars: How an IRGC Front Runs Destructive OT and IT Attacks Under Cover of a Ceasefire

profero.io · 5 months ago

An Iranian state-directed persona called Cyber Isnaad Front, assessed to be operated alongside IRGC-affiliated ASA, has been running deniable destructive campaigns against Israeli infrastructure during ceasefires that combine IT intrusions with targeted operational technology sabotage. At one food-production plant attackers reprogrammed refrigeration controllers, changed setpoints and safety limits, switched motorized valves to manual and pinned them open, changed central-controller credentials to lock out engineers, and caused the destruction of three compressors without malware on the controllers themselves. On the IT side the operation deployed a Go Remote Access Toolkit called GRAT, masquerading as fake Microsoft updates and persisting as a scheduled task named OneDrive Update, with modules for VNC, exfiltration, encryption named BigBang, and a disk-wiper that overwrites drives and destroys partition tables while communicating with C2 infrastructure at 84.201.6.131 on ports 7878 and 9988. Indicators include specific SHA-256 hashes, file paths under AppData and ProgramData, and C2 hosts, and defenders are advised to hunt for unsigned binaries in those locations, alert on outbound AMQPS or Redis traffic to the listed host and ports, segment IT from OT, keep offline versioned backups of controller programs, and alarm on out-of-band setpoint or operating-mode changes.
Massachusetts Uber and Lyft Drivers Form First Union for Ride-Share Workers

www.nytimes.com · 5 months ago

Massachusetts has certified the App Drivers Union as the nation’s first union to represent app based rideshare drivers, giving it formal recognition to bargain on behalf of roughly seventy thousand drivers for companies including Uber and Lyft. The certification followed a state process that requires at least twenty five percent support among active drivers, a threshold the Department of Labor Relations found had been met, and the 2024 ballot law creates a structured bargaining process overseen by the department. The union is backed by national labor groups and officials say the major platforms have indicated they will negotiate in good faith as bargaining and any subsequent mediation or arbitration proceed.
WhatsApp Local Storage Claim Raises Apple Privacy Questions

www.techrepublic.com · 5 months ago

Researchers at Mysk allege that WhatsApp stores some decrypted chat data unencrypted in local database files on macOS and iOS in a shared app group container, with files such as Axolotl.sqlite, ContactsV2.sqlite, and LocalKeyValue.sqlite found in the container. Security experts and outlets pushed back, saying the databases reside in a secure container normally accessible only to WhatsApp and that the shared container supports migration between WhatsApp and WhatsApp Business rather than cross access by other Meta apps. The concern is that readable local data could be exposed if a device is compromised, backups are insecure, or an operating system flaw is exploited, with the recently disclosed macOS Archive Utility flaw CVE-2026-28910 cited as a possible escalation scenario. IT teams are advised to treat the problem as an endpoint and mobile device management issue by enforcing strong passcodes and biometric locks, keeping iOS and macOS up to date, and using encrypted device backups.
As A.I. Fever Rises in Silicon Valley, Pope Leo Has a Few Words

www.nytimes.com · 5 months ago

The American-born pope issued a sweeping encyclical titled Magnifica humanitas calling to disarm artificial intelligence and warning that concentrated power in major technology companies threatens democracy, widens inequality, and risks new forms of digital slavery. He said it is not permissible to entrust irreversible lethal decisions to AI and urged removing AI from military and purely commercial control, imposing strict national and international oversight, and ensuring broad public participation in AI governance. The Vatican staged a high-profile launch that included Silicon Valley figures such as the co-founder of Anthropic, signaling both a direct challenge to Big Tech and an effort to draw the technology sector into a moral and regulatory conversation.
Anthropic’s restricted Claude Mythos model may be coming to Claude Code

www.bleepingcomputer.com · 5 months ago

There are signs Anthropic is preparing to roll out the restricted Mythos model into developer products after the model briefly appeared in public listings for Claude Code and Claude Security. Mythos, announced on April 7, shows markedly stronger code reasoning and autonomous capabilities and has been demonstrated to produce functional cyberattacks, leading Anthropic to withhold a full public release until robust guardrails are in place. Through Project Glasswing Mythos has been used with up to fifty partner organizations to hunt vulnerabilities and reportedly uncovered about ten thousand high or critical severity flaws in its first month, but it remains unclear which subscription tiers will receive access as Anthropic finalizes containment and collaboration measures.
Nigel Farage’s Russian hack claim ‘without any merit’, former NCSC chief says

www.theguardian.com · 5 months ago

Nigel Farage said a Russian hack and leak operation was behind disclosure of the five million pound gift he received from crypto billionaire Christopher Harborne, and Reform UK sources said counter espionage experts analyzing his phone reported compromise of his phone, email and bank accounts. Ciaran Martin, founding chief executive of the National Cyber Security Centre, described the allegation as entirely unsubstantiated, said Farage had not provided technical evidence and warned that if true it would amount to an unprecedentedly aggressive intervention requiring a national government response. Martin urged Farage to contact the NCSC, publish any technical evidence and cooperate with security services, noting serious national security implications and saying such claims should not be made without proper investigation.
How credential brokering prevents AI agents from compromising credentials via prompt injection

infisical.com · 5 months ago

There is a growing security practice called credential brokering that inserts a proxy between AI agents and secrets so agents can access services without ever seeing underlying credentials. This approach prevents attacks such as prompt injection and credential exfiltration by routing outbound requests through a broker that authenticates the agent, substitutes placeholders with real tokens, and forwards the request so the agent never sees secret values. Implementations range from managed platform proxies to open source projects like Agent Vault, and recommended design principles include strong isolation, co location to reduce latency, and keeping brokers reachable only from private networks.
CVE-2021-21735: ZTE H168N wizard whitelist exposed PPPoE and WLAN secrets pre-auth

minanagehsalalma.github.io · 5 months ago

CVE-2021-21735 describes an administrative compromise vulnerability found in the ZTE ZXHN H168N device. This security flaw allows an attacker to gain unauthorized administrative access to the equipment. Exploiting this vulnerability compromises the integrity of the device's management functions. Owners must update the firmware immediately to patch this critical security risk.
Hacker Lists 340M OnlyFans User Records for Sale

www.techrepublic.com · 5 months ago

A hacker is selling a 340 million record OnlyFans database on a cybercrime forum for 0.313 BTC, about 76,000 dollars, claiming it contains creator and subscriber details that could link accounts to real identities. The seller advertised entries including usernames, real names, email addresses, phone numbers, join dates, follower and like counts, upload statistics, account types, linked social profiles, and a card field described as the last four digits of a payment card, but sample records were incomplete, contained placeholders, and resembled public profile metrics rather than confirmed internal OnlyFans data. The seller later said no direct breach of OnlyFans occurred and that data was compiled by matching older breach and leak databases and public information from other platforms, while independent researchers found only a small sample that prevents verification of the dataset size. Exposed emails and matched identifiers could be used for profiling, phishing, doxxing, impersonation, account takeover, extortion, or harassment even without leaked passwords.
⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

thehackernews.com · 5 months ago

A poisoned Visual Studio Code extension allowed attackers to compromise developer tooling and exfiltrate roughly three thousand eight hundred GitHub repositories, and the release of Shai-Hulud code has given attackers a reproducible supply chain worm blueprint. Multiple high impact flaws were disclosed or observed in active exploitation, including CVE-2026-46333 in the Linux kernel, CVE-2026-41091 and CVE-2026-45498 in Microsoft Defender, CVE-2026-9082 in Drupal Core, CVE-2026-45585 affecting BitLocker, and CVE-2026-20223 in Cisco Secure Workload. Threat actors are increasingly weaponizing old unpatched devices and development artifacts, with botnets reusing legacy router flaws such as CVE-2018-5999 and phishing campaigns delivering trojanized installers that sideload malware.
Ghost CMS Vulnerability Exploited to Hack Over 700 Websites

www.securityweek.com · 5 months ago

Sites belonging to major universities such as Harvard and Oxford, as well as DuckDuckGo, have been compromised in the attack.
Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

krebsonsecurity.com · 5 months ago

Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and disinformation campaigns inside the European Union. The two men were the focus of a 2025 KrebsOnSecurity story about how their hosting companies had assumed control over the technical infrastructure of Stark Industries Solutions, an Internet service provider sanctioned last year by the EU as a frequent staging ground for cyber mischief from Russia's intelligence agencies.
One Job That Is Growing in the A.I. Era? Cybersecurity Experts.

www.nytimes.com · 5 months ago

There has been a surge in demand for security engineers as AI generates a glut of new code and risk, with job postings rising about eleven percent year over year in the first quarter. Advanced models such as Anthropic's Mythos and new cyber focused GPT variants have accelerated discovery of vulnerabilities and exploit chaining, prompting firms to treat model outputs as potential attack tools and to form private disclosure and mitigation partnerships. The role of human security engineers is shifting toward building review, triage, and remediation systems around AI findings and maintaining human in the loop verification, which is sustaining and reshaping hiring and pay patterns in the industry. Governments and large companies are pursuing vetting programs, restricted access arrangements, and formal coordination with model providers to manage risks and speed patches.
One Job That Is Growing in the A.I. Era? Cybersecurity Experts.

www.nytimes.com · 5 months ago

Demand for security engineers has surged as artificial intelligence creates a glut of new code and increases the speed at which vulnerabilities are discovered and exploited. Models such as Anthropic's Mythos and new cyber-focused versions of other large language models can scan large codebases, identify and chain vulnerabilities, and have prompted companies to expand internal scanning, patching, and hiring of security staff. Government and industry responses include limited releases to vetted partners, expanded internal audit programs, and discussions about granting certain agencies controlled access to these frontier models to manage risks while leveraging their capabilities.
FBI warns of Kali365 phishing service targeting Microsoft 365 accounts

www.bleepingcomputer.com · 5 months ago

The FBI is warning about the Kali365 phishing-as-a-service platform (PhaaS) that is used to hijack Microsoft 365 accounts by abusing OAuth device code authentication to steal session tokens and bypass multi-factor authentication (MFA).
InvisibleFerret Malware Uses .pyd and .so Files to Evade Script Detection

gbhackers.com · 5 months ago

A North Korea-linked threat group, Void Dokkaebi, also known as Famous Chollima, has significantly upgraded its malware delivery techniques by converting its Python-based InvisibleFerret malware into compiled binary modules. InvisibleFerret was previously deployed as readable Python scripts, making it easier for defenders to detect through static analysis and signature-based tools. The latest campaign leverages Cython
AI security needs a shift from models to systems, researchers argue

www.csoonline.com · 5 months ago

Enterprises cannot secure AI agents by making the underlying models more robust and must instead enforce security controls at the system level around them, researchers behind a paper published this month argued, warning that traditional AI-security approaches are increasingly misaligned with how autonomous agents actually operate inside enterprise environments. The paper argues that enterprises should stop treating AI agents as trusted software components and instead secure them as fundamentally untrusted systems operating inside enterprise infrastructure. “The AI model powering the agent must be treated as an untrusted component,” the researchers wrote in the paper, warning that “semantic guardrails” and prompt-level defenses alone cannot reliably secure systems once agents gain access to enterprise tools, memory, APIs, browsers, and execution environments. The authors drew the comparison to operating systems. “Similar to how an operating system treats a process as untrusted, we take the stance that the model powering the agent should be treated as untrusted and security properties should be expressed and enforced outside, at the level of the encompassing system,” they wrote. The paper was written by researchers at Google, the University of California, San Diego, the University of Wisconsin-Madison, and other institutions, including Mihai Christodorescu, Earlence Fernandes, and Somesh Jha. Five principles from systems security The authors distilled five principles from decades of systems security research that they said agentic systems should follow: least privilege, tamper resistance of the trusted computing base, complete mediation, secure information flow, and accounting for the human as a weak link. As evidence, the authors analyzed eleven real-world attacks on AI agents and mapped each to the principles it violated. The attacks included data exfiltration from the ChatGPT macOS app, a Claude Code exfiltration flaw, a Microsoft Copilot exfiltration vulnerability, and the AgentFlayer attack on Cursor through a malicious Jira ticket. Every one of the eleven violated the secure information flow principle, the paper said, while most violated the least privilege principle. The authors rejected the idea that stacking machine-learning guardrails amounts to a defense. “Merely stacking ML models does not constitute true defense-in-depth,” they wrote, because the guard models “often share the same statistical failure modes as the primary agents they monitor.” To put the principles into practice, the authors proposed three security mechanisms, each tied to an open research problem the community has yet to solve. The first is separating instructions from data, because language models mix the two in a single stream of tokens with no source-level distinction between them. The second is verifiable least-privilege policy generation, made difficult because security policies for agents are written in natural language and shift as a task evolves, which makes them hard to translate into rules a system can enforce. The third is information flow control, since tracking how sensitive data moves through a model remains unsolved. Beyond the model The paper challenges one of the dominant assumptions shaping enterprise AI-security efforts over the past two years, that increasingly capable models, alignment techniques, and prompt defenses would eventually make AI systems sufficiently secure for enterprise deployment. Instead, the researchers argue AI agents should increasingly be treated more like operating environments or distributed systems than conventional enterprise applications because they combine reasoning, autonomy, memory persistence, and external tool execution inside a single operational layer. “Security guarantees cannot emerge solely from better prompts, alignment tuning, or model-side mitigations,” the paper said, arguing enterprises instead need stronger runtime isolation, containment boundaries, least-privilege execution, and workflow observability controls around AI agents. That creates situations where prompt injection is no longer simply a content-manipulation issue but potentially a workflow-execution and systems-integrity problem capable of influencing downstream actions across interconnected enterprise environments. The visibility problem The researchers also argue that current enterprise security tooling lacks sufficient runtime visibility into how AI agents actually reason, invoke tools, retain memory, and execute actions across enterprise systems. Another paper published last week also points to a similar problem from a different angle, arguing that traditional endpoint detection and response platforms cannot adequately inspect AI-agent reasoning flows, prompt chains, memory interactions, or dynamic tool execution. The paper proposed what researchers described as an “agentic detection and response or ADR” framework designed specifically for AI-agent environments. “Current security tools are not designed to observe agent cognition or reasoning traces,” the researchers wrote, arguing that existing enterprise security stacks were built to monitor deterministic applications and endpoint activity, not systems capable of autonomous planning, probabilistic reasoning, and dynamic workflow orchestration. The paper described a production deployment monitoring more than 10,000 AI-agent sessions daily across roughly 7,200 hosts, where researchers said the framework identified hundreds of credential-exposure incidents and other agent-related risks spanning 26 attack categories. On a benchmark the team introduced, called ADR-Bench, the system detected 67% of attacks with zero false positives, outperforming three baselines, including Meta’s LlamaFirewall, by two to four times in F1-score, the paper said. On AgentDojo, a public prompt injection benchmark, it detected all attacks with three false alarms out of 93 tasks.
Oncology Institute Discloses Data Breach

www.securityweek.com · 5 months ago

The affected third-party vendor has not been named, but one possible candidate is TriZetto.
Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

thehackernews.com · 5 months ago

Threat actors are exploiting a recently disclosed critical security flaw in Ghost CMS to inject malicious JavaScript code with an aim to fuel ClickFix attacks. According to QiAnXin XLab, the activity involves the exploitation of CVE-2026-26980 (CVSS score: 9.4), an SQL injection vulnerability in Ghost's Content API that could allow an unauthenticated attacker to read arbitrary data from the
Threat Intel: ShinyHunters Leaks 9.4GB Database of 7-Eleven Franchisee Systems Post-Extortion Refusal

www.technadu.com · 5 months ago

An extortion campaign by ShinyHunter exposed customer data belonging to over 185,000 accounts associated with 7-Eleven. The breach specifically compromised customer login credentials. Affected customers have been notified, and the company is currently investigating the full scope of the data leak.
APT Group Patches termsrv.dll to Enable Multiple RDP Sessions

gbhackers.com · 5 months ago

A sustained cyber espionage campaign attributed to the Cloud Atlas advanced persistent threat (APT) group has introduced a stealthy technique that modifies the Windows termsrv.dll library to enable multiple Remote Desktop Protocol (RDP) sessions on compromised systems. Observed throughout 2025 and continuing into 2026, the activity primarily targets government and commercial entities in Russia and
As AI speeds coding, CVE Lite CLI keeps security deliberately AI-free

www.csoonline.com · 5 months ago

As AI coding assistants accelerate software development, one OWASP-backed open-source project is arguing that dependency security tooling still arrives too late to be truly useful. CVE Lite CLI, a JavaScript and TypeScript dependency vulnerability scanner focused on local lockfile analysis, is positioning itself around a simple idea. Developers should see dependency risks while they are still writing code, not hours later inside a failing CI pipeline. “What developers are missing is early feedback at the point where the dependency decision is made,” Sonu Kapoor, creator and maintainer of the project, told CSO. According to Kapoor, traditional CI-centric workflows often disconnect developers from the dependency choices that introduced risk in the first place. CVE Lite CLI scans npm, pnpm, and Yarn lockfiles using OSV vulnerability data and claims to focus heavily on remediation guidance, including separating direct and transitive vulnerabilities, validating upgrade targets, and recommending actionable fix paths. The project is being pitched as a “local-first” developer tool, as opposed to a replacement for enterprise software composition analysis ( SCA ) platforms, much like how developers already use ESLint or unit tests locally before CI runs them again later. CVE Lite CLI targets an overlooked pain point CVE Lite CLI is essentially trying to solve a workflow problem, Kapoor says many developers quietly struggle with. Dependency security checks often arrive after the work is already done. The tool scans JavaScript and TypeScript lockfiles locally across npm, pnpm, and Yarn projects, so developers can understand dependency risk while they are still coding, not later in response to a failing CI pipeline. Instead of just focusing on detection, the tool claims to look into subsequent questions like whether the issue is direct or transitive, whether there is a clean upgrade path, or whether upgrading one package actually removes the vulnerable dependency. “In one real case, CVE Lite CLI skipped 27 package versions before finding a safer version to recommend,” Kapoor said, explaining the granularity of the tool. “That is the kind of work developers should not have to do manually by reading logs and retrying upgrades one by one.” Kapoor said the tool can be configured for JSON, SARIF, or HTML outputs and can also be integrated into CI workflows as a GitHub Action. AI could be making things worse The argument arrives as software supply chain security continues to collide with AI-assisted development practices that allow developers to generate code, integrate packages, and restructure projects much faster than before. Kapoor said this velocity changes the nature of dependency risk itself. “AI coding assistants have made this more important, not less,” he said. “That speed is useful, but it also means dependency decisions can happen quickly and sometimes without the same level of manual review. I do not think AI assistants remove the need for security checks.” On the contrary, they increase the need for fast, local, explainable checks that can be run while the work is happening, he added. One cited example involved scans against lint-staged, a widely used JavaScript tooling package. According to Kapoor, a standard “npm audit, omit=dev” workflow failed to surface a production dependency issue that CVE Lite CLI later identified through lockfile analysis. “Honestly, I don’t think most developers understand those blind spots in detail, and I do not mean that as criticism of developers,” he said. “The dependency graph in a modern JavaScript project is extremely noisy.” A developer meaning to install one direct dependency may end up with hundreds or thousands of transitive packages. CVE Lite CLI isn’t falling for AI The project also deliberately avoids turning itself into a broader AppSec platform, despite growing industry pressure to consolidate security tooling into an AI-enabled ecosystem. “I do think security tooling has become too heavy for the day-to-day developer workflow,” Kapoor said. “That does not mean those platforms are bad. It means they often serve security organizations better than they serve the individual developer trying to make a safe dependency decision during a normal coding session.” This philosophy also extends to the project’s approach toward AI itself. While CVE Lite CLI includes integrations that help AI coding assistants interpret scan results, Kapoor said the underlying vulnerability analysis intentionally remains deterministic. “I do not think AI should decide whether a CVE exists,” he said. “That part needs to be boring, repeatable, and auditable.” Instead, the project uses AI as what the founder described as an “explanation and workflow layer” around scan results rather than as the scanner itself. “CVE Lite CLI includes AI assistant skills that teach tools like Claude Code, Codex CLI, Gemini CLI, Cursor, and GitHub Copilot how to run CVE Lite CLI, read its structured output, and help the developer understand or prioritize the remediation plan,” Kapoor explained. Caution around expansion Kapoor said he has been receiving positive feedback from the companies and developers using CVE Lite CLI in real workflows, asking him whether the same approach could support.NET or Python ecosystems. “That interest is encouraging because it tells me the local-first, remediation-oriented model is resonating beyond the original JavaScript and TypeScript use case,” he said. “But I am cautious about expanding the current tool too broadly.” The explanation he gave was simple. Each ecosystem, he believes, has its own package manager behavior, lockfile format, dependency graph semantics, advisory sources, and remediation patterns. “Adding those directly into CVE Lite CLI could make the tool heavier and less clear for the JavaScript and TypeScript developers it was originally designed to help.” The project has now been adopted into the OWASP foundation ecosystem as an official OWASP project and is available for free to developers on GitHub.
The Alert Firehose Finally Meets Its Match

thehackernews.com · 5 months ago

Ask a cybersecurity pro about Network Detection and Response (NDR) and you might still hear "Noisy," "Too much data." But ask the teams running NDR that includes agentic AI capabilities and you'll hear they're actually using it to catch threats earlier, triage faster, and chase fewer false positives. The old complaint lingers in part because reputations are sticky, and because NDR has evolved
266,000 Affected by Data Breach at Radiology Associates of Richmond

www.securityweek.com · 5 months ago

Threat actors stole files containing names and protected health information from the healthcare organization’s systems.
Anthropic: Mythos Detected 23,000 Potential Vulnerabilities Across 1,000 OSS Projects

www.securityweek.com · 5 months ago

Many findings have been confirmed to be critical or high-severity vulnerabilities and the number will continue to increase.
Laravel-Lang Packages Poisoned for Malware Delivery

www.securityweek.com · 5 months ago

Published within a 15-minute window, the malicious tags introduced backdoors to exfiltrate CI secrets.
WhatsApp Chat Histories Exposed in Unencrypted Storage on macOS and iOS

gbhackers.com · 5 months ago

Security researchers have raised concerns over how WhatsApp stores user chat data on macOS and iOS, revealing that message databases may be stored in unencrypted form within app group containers accessible by other applications from the same developer ecosystem. According to researchers at Mysk, WhatsApp stores chat histories in plaintext within a shared app group
Telegram Channels Fuel Sale of Verified Bank Mule Accounts

gbhackers.com · 5 months ago

Cybercriminal groups are increasingly using Telegram channels and encrypted platforms to sell verified bank and fintech mule accounts, signaling a major shift in how illicit funds are laundered at scale. According to recent threat intelligence findings, money mule operations have evolved into structured Mule-as-a-Service (MaaS) ecosystems, allowing attackers to outsource financial laundering just as easily
Italian Authorities Dismantle CINEMAGOAL App Enabling Unauthorised Access to Streaming Platforms

gbhackers.com · 5 months ago

Italian law enforcement agencies have dismantled a sophisticated piracy operation centered around the CINEMAGOAL application, which enabled unauthorized access to premium streaming platforms including Netflix, Sky, DAZN, Disney+, and Spotify. The operation, codenamed “All Clear,” was led by the Financial Police in Ravenna under the direction of the Bologna Public Prosecutor’s Office. Authorities conducted over
Hackers Actively Scan SonicWall Firewall Interfaces as 597,000 Sessions Observed

gbhackers.com · 5 months ago

A sharp surge in internet scanning activity targeting SonicWall firewall management interfaces has raised concerns among cybersecurity researchers, with GreyNoise reporting nearly 597,000 sessions in a single day. The spike, observed on May 12, 2026, marks the highest volume recorded in the past 90 days and is approximately 46 times higher than the typical daily
DocketWise Data Breach Impacts 143,000

www.securityweek.com · 5 months ago

Hackers accessed names, addresses, Social Security numbers, financial information, and medical data from third-party partner repositories.
Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms

thehackernews.com · 5 months ago

Cybersecurity researchers have shed light on a cross-platform malware called RemotePE that has been put to use by the North Korea-linked Lazarus Group in attacks targeting financial and cryptocurrency organizations. RemotePE, per NCC Group subsidiary Fox-IT, is part of a multi-stage attack chain that involves two loaders tracked as DPAPILoader and RemotePELoader. "DPAPILoader decrypts and
CISA Warns Drupal Core SQL Injection Vulnerability Is Being Exploited in Attacks

gbhackers.com · 5 months ago

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical SQL injection vulnerability in Drupal Core, tracked as CVE-2026-9082, which is now being actively exploited in the wild. The flaw has been added to CISA’s Known Exploited Vulnerabilities (KEV) catalog, signaling a high risk to organizations using affected Drupal deployments.
Hackers Exploit Azure RBAC to Steal Key Vault Secrets

gbhackers.com · 5 months ago

Hackers are increasingly exploiting cloud identity and access management systems, and a methodical, sophisticated, and multi-layered attack, where a threat actor we track as Storm-2949 launched a relentless campaign with a singular focus: to exfiltrate as much sensitive data from a target organization’s high-value assets as possible. The attack, attributed to a threat actor tracked
Hackers Exploit Shared CDNs to Evade Domain Reputation Filters

gbhackers.com · 5 months ago

Hackers are increasingly abusing shared Content Delivery Network (CDN) infrastructure to bypass domain-reputation-based security controls using a newly identified technique called “Underminr.” Underminr is not a conventional software flaw but an inherent weakness in how modern CDNs handle multi-tenant traffic. CDN providers such as Cloudflare, Akamai, AWS CloudFront, and Fastly route traffic for millions of
Over 5,500 GitHub Repositories Infected in ‘Megalodon’ Supply Chain Attack

www.securityweek.com · 5 months ago

Fake automated commits injected GitHub Actions workflows containing payloads to steal credentials, CI secrets, keys, and tokens.
Hackers Hide Linux Malware in SSH-Like Package Filename

gbhackers.com · 5 months ago

Hackers have been observed disguising a malicious Linux payload under an SSH-like filename during software installation, as part of a coordinated supply chain attack targeting developer ecosystems. The attack hinges on a hidden post-install script embedded inside package.json, rather than the expected composer.json used in PHP environments. This subtle placement allows the malicious code to evade detection during routine dependency
To pay, or not to pay: 58% of CISOs say they would pay the ransom for their data

www.csoonline.com · 5 months ago

If you were hit by ransomware tomorrow, would you pay to get your data back? That’s what more than half of CISOs in a recent survey said their organization would do. It’s a situation more companies are going to face in future. “Attacks are increasing and continuing to increase,” said Christy Wyatt, CEO of security vendor Absolute Software, which commissioned the survey. “Companies are better prepared to deal with them: Some of the training is paying off and AI is helping. But remember that attackers have all the tools that defenders have.” In the survey of 750 CISOs in the US and UK, 58% said their organization would be willing to pay to end a ransomware incident. This flies in the face of advice from the authorities in both countries. “It is the UK government’s long-standing position, alongside law enforcement partners, that it does not encourage, endorse nor condone the payment of ransom demands,” said a spokeswoman for the UK National Cyber Security Centre. The FBI, too, warns not to give in to ransomware demands, noting that paying only encourages the perpetrators to attack others. Another reasons law enforcers advise enterprises not to pay is that there is no guarantee they will get their data back if they do. Given the risks, and the disapproval of law enforcement, how many of those CISOs who say they are willing to pay would do so if it came to the crunch? It’s hard to get firm statistics because of the perceived stigma, but the evidence suggests a significant number do so. Among those companies hit by ransomware, 37% paid the ransom, according to an IDC survey last year, but IDC research director for security services David Clemente suspects the proportion is higher. “I’m sure that there are many more who have paid it but don’t want to be open about it,” he said. That wasn’t the end of things for all who paid the ransom, though: about 5% of them found that “the decryption was incomplete,” according to IDC. A late 2025 survey from insurance provider Hiscox found that only 60% of SMEs that paid a ransom successfully recovered all or part of their data as a result. Absolute’s Wyatt warned, “You may get your data back, you may not.” And if you do get your data back, that doesn’t mean you’re the only one who has it: “We have heard instances of companies paying up and finding that their credentials are being shared,” she said. So, does that mean enterprises shouldn’t pay the ransom? IDC looked at that and found that companies that had planned for such attacks would be able to resist, but with ill effects. About 29 percent of companies were able to recover encrypted files from backup,” said Clemente. “However, 33% of companies that didn’t pay, found that they could not recover anything.” UK retailer M&S didn’t pay up when it was hit by ransomware in April 2025, disrupting internal logistics systems and forcing it to close its online store for months. It estimated the cost of the incident at $400 million in lost operating profit. The ransomware payment dilemma remains an issue for CISOs, but the lesson M&S may point to is that, if a ransomware attack happens, your best bet may be to pay the ransom unless you have confidence in the quality and robustness of your backup. Government and law enforcement may not like it, but they won’t be the ones facing the wrath of shareholders.
GitHub Strengthens npm Security With Staged Publishing Protection

gbhackers.com · 5 months ago

Staged publishing is now generally available in npm CLI version 11.15.0, queuing prebuilt package tarballs for manual maintainer approval before release and protecting approval actions with two factor authentication to reduce supply chain risks from compromised accounts, malicious updates, and automated CI CD workflows. The staging queue is visible through both the npm command line and the npm website interface, and combining staged publishing with trusted OpenID Connect publishing lets CI CD pipelines be restricted to stage only while maintainers approve releases from trusted devices. npm 11.15.0 also adds install time flags that support all or none settings to control dependency sources such as local files, remote URLs, local directories, and Git based dependencies via.npmrc or package.json, and the default for Git based installs is expected to change to none in npm CLI version 12.
Iranian APT Uses SEO Poisoning to Spread Fake SQL Developer Malware

gbhackers.com · 5 months ago

A newly observed campaign linked to the IRGC affiliated threat group Nimbus Manticore, also tracked as UNC1549, has adopted SEO poisoning to publish a fake Oracle SQL Developer download site and distribute a trojanized installer. The installer delivers a new 64 bit backdoor called MiniFast that replaces earlier MiniJunk variants and provides full remote control including file exfiltration, command execution, process manipulation, and persistence via scheduled tasks. MiniFast communicates with command and control servers using structured HTTP and JSON exchanges that mimic browser traffic, uses Base64 encoded tasking and opcode based commands, and the campaign shows AI assisted development traits and stealth techniques such as using legitimate signed binaries, AppDomain hijacking, string obfuscation, and sandbox evasion. Targets include aviation, defense, and telecommunications across the United States, Europe, and the Middle East, and the shift from phishing to search engine driven delivery marks a rapid evolution in tactics tied to Operation Epic Fury that began on February 28, 2026.
TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO

thehackernews.com · 5 months ago

A new coordinated cross-ecosystem software supply chain attack campaign has targeted npm, PyPI, and Crates.io to distribute credential-stealing malware. The campaign, codenamed TrapDoor, spans more than 34 malicious packages across over 384 versions. The earliest activity was recorded on May 22, 2026, at 8:20 p.m. UTC, with new packages published to the ecosystems in waves from a cluster of
Kazuar Malware Becomes Modular Spyware for Secret Blizzard Ops

gbhackers.com · 5 months ago

There is a major evolution in the Kazuar malware family linked to the Russian state sponsored group Secret Blizzard also known as Turla and Venomous Bear, with a new modular architecture composed of Kernel Bridge and Worker modules to support long term espionage against government diplomatic and defense targets. The Kernel coordinates tasks communications and configuration and includes anti analysis checks while the malware exposes roughly 150 configuration options enabling AMSI WLDP and ETW bypasses as well as keylogging screenshot capture file harvesting and MAPI based email monitoring. Internal coordination relies on IPC mechanisms such as named pipes Mailslots and hidden Windows messaging while external command and control uses HTTP WebSockets and Exchange Web Services with a leadership election that selects a single node to communicate externally through a Bridge proxy to minimize network noise. Deployment methods include the Pelmeni dropper embedding encrypted payloads and a NET based COM loader for in memory execution, collected data is stored encrypted in a dedicated filesystem and routed internally using Google Protocol Buffers, and defenders are advised to focus on behavioral detection of IPC activity leadership election patterns staged filesystem operations and low frequency encrypted communications.
Hackers Compromise 34 npm, PyPI, and Crates Packages in Major Supply Chain Attack

gbhackers.com · 5 months ago

There is a large scale cross ecosystem software supply chain attack tracked as TrapDoor that began on May 22, 2026 and compromised at least 34 open source packages and more than 384 malicious versions across npm PyPI and Crates io, starting with a PyPI package named eth-security-auditor. The malware is a crypto focused credential stealer that deploys a shared payload called trap core js and executes via npm post install scripts, PyPI remote JavaScript on import, and Rust build rs at compile time, harvesting SSH keys, cloud credentials including AWS access keys and GitHub tokens, crypto wallet data for Solana Sui and Aptos, browser stored login data, and environment variables. Attackers established persistence using Git hooks, shell configuration files, cron jobs, and systemd services, attempted lateral movement with stolen SSH credentials, and abused AI developer tools by injecting hidden instructions into files such as dot cursorrules and CLAUDE dot md using invisible Unicode characters to trick AI assistants. Developers are advised to audit dependencies before installation, use tools that detect malicious package behavior, monitor for unusual post install or build time activity, restrict access to sensitive credentials, and rotate keys regularly.
MiniUpdate RAT Abuses Azure C2 for Targeted Espionage

gbhackers.com · 5 months ago

A sophisticated espionage campaign by the Iran-linked advanced persistent threat group Screening Serpens, also tracked as UNC1549 and Smoke Sandstorm, deployed a newly identified remote access Trojan family called MiniUpdate against targets in the United States, Israel, and the United Arab Emirates. MiniUpdate and an evolved MiniJunk V2 share an infection chain that uses targeted spear-phishing, archive lures, DLL sideloading, and Azure-hosted command and control infrastructure, and MiniUpdate leverages AppDomainManager hijacking to manipulate.NET application configuration files and disable runtime security before executing its payload. Unit 42 identified six variants uploaded between mid-February and April 2026, noted extensive opsec techniques including scheduled persistence and a broad opcode set for command execution and exfiltration, and urged defenders to tune endpoint detection to flag DLL sideloading and AppDomainManager hijacking while monitoring for clusters of Azure-hosted subdomains impersonating sector-relevant organizations.
Nginx-poolslip Flaw Exposes Servers to DoS and Code Execution Attacks

gbhackers.com · 5 months ago

There is a critical vulnerability tracked as CVE-2026-9256 in the ngxhttprewritemodule of NGINX that can be triggered by specially crafted HTTP requests to cause a heap based buffer overflow, resulting in denial of service and, under certain conditions, remote code execution. The flaw is caused by improper handling of overlapping unnamed PCRE capture groups in rewrite directives, where ambiguous regular expression patterns and multiple backreferences can produce out of bounds writes. Affected releases include NGINX Open Source up to 1.30.1 and NGINX Plus 37.0.0 with fixes in Open Source 1.30.2 and 1.31.1 and Plus 37.0.1.1, and recommended mitigations are to upgrade immediately, audit rewrite rules to replace unnamed captures with named captures, and enable exploit mitigations such as ASLR.
Hackers Use CypherLoc Kit to Push Fake Microsoft Support Scams

gbhackers.com · 5 months ago

CypherLoc is a sophisticated browser-lock scareware that executes an encrypted, condition-gated payload inside compromised web pages to evade scanners and sandboxes and coerce victims into calling fraudulent technical support numbers. It uses runtime page replacement, developer tools disruption, aggressive full-screen locking, audio pressure, fake login forms, and public IP display to heighten fear, prevent live analysis, and keep victims engaged. Barracuda researchers observed about 2.8 million attacks since the start of 2026 and defenders are advised to prioritize anti-phishing, browser and endpoint protections, and user education because legitimate security alerts do not lock browsers or display phone numbers.
nmap on Linux: Guide to Network Scanning and Discovery

linuxblog.io · 5 months ago

There are instructions for using Nmap on Linux to perform host discovery, port and UDP scanning, service and version detection, operating system fingerprinting, and running Nmap Scripting Engine scripts for enumeration and vulnerability checks. Common commands and options shown include -sn for host discovery, -sS for SYN scans, -sU for UDP scans, -sV for version detection, -O for OS detection, -A for an aggressive combined scan, and --script with categories such as vuln or ftp-anon for targeted checks. The guide also explains output formats including normal, XML, and grepable files, timing templates from T0 to T5, ways to scan ranges or lists of hosts, and cautions to only scan systems you own or have explicit permission to test and to use conservative timing on production networks.
Prompt Injection finally broke my brain a little. My first article as a security student.

www.cmxchat.com · 5 months ago

Prompt injection is a class of attack that lets malicious language in system prompts, retrieved documents, emails, and files manipulate a large language model's reasoning and override intended instructions. There are direct attacks that inject commands into conversations and indirect attacks that poison retrieval pipelines or documents, with real world 2025 to 2026 enterprise examples showing data leakage, moderation bypasses, and tool hijacking when agents and retrieval augmented generation systems pull in poisoned content. Defenses are layered and include separating core system instructions from outside data, sanitizing or filtering retrieved content, applying least privilege to tools, monitoring outputs closely, running regular red and purple team tests, and requiring human approval for high risk actions.
Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

www.bleepingcomputer.com · 5 months ago

A large-scale campaign is exploiting a critical SQL injection vulnerability CVE-2026-26980 in Ghost CMS to steal admin API keys and inject malicious JavaScript that triggers ClickFix social engineering flows. Researchers at XLab confirmed the campaign impacted more than 700 domains, including university portals, AI and SaaS companies, media outlets, fintech firms, security sites, and personal blogs. The attack chain abuses the vulnerability to read database data and obtain admin API keys, then injects a lightweight loader that fetches cloaked second-stage scripts which display a fake Cloudflare prompt instructing victims to paste a command that drops payloads observed as DLL loaders, JavaScript droppers, and an Electron sample named UtilifySetup.exe. Administrators are urged to upgrade Ghost to version 6.19.1 or later, rotate any exposed keys, remove injected scripts using provided indicators of compromise, and retain at least 30 days of admin API logs for retrospective investigation.