Blahalla

Exploitation of Recent Oracle E-Business Suite Vulnerability Begins

www.securityweek.com · 22 days ago

The critical-severity defect allows unauthenticated attackers to take over the E-Business Suite’s Payments product.

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer

thehackernews.com · 22 days ago

An unknown threat actor has been observed exploiting a recently disclosed maximum-severity security flaw in SimpleHelp to deliver two previously unreported malware families, TaskWeaver and Djinn Stealer. The intrusion involves the exploitation of CVE-2026-48558 (CVSS score: 10.

Insurance giant Aflac discloses data breach after subsidiary hack

www.bleepingcomputer.com · 22 days ago

American insurance giant Aflac has disclosed a new data breach after attackers breached its Japan subsidiary's systems and stole personal and bank account information.

SystemBC Malware Turns Windows Machines Into SOCKS5 Proxies for Ransomware Attacks

gbhackers.com · 22 days ago

SystemBC (also tracked as Coroxy) remains a versatile and persistent Windows malware family that operators routinely deploy to convert compromised hosts into SOCKS5 proxy gateways and to maintain remote access for follow-on operations.

Microsoft adds smarter bot protection to Teams meetings

www.bleepingcomputer.com · 22 days ago

Microsoft has introduced a new Teams admin policy that allows organizers to prevent third-party bots from joining meetings without approval.

Mircosoft adds smarter bot protection to Teams meetings

www.bleepingcomputer.com · 22 days ago

Microsoft has introduced a new Teams admin policy that allows organizers to prevent third-party bots from joining meetings without approval.

6 Best VPNs for Australia in 2026

www.techrepublic.com · 22 days ago

What's the best VPN to use in Australia? Discover the pricing, features, pros and cons of our recommended VPNs for Australia.

USB drives carrying China-linked malware infected Japanese military networks for nearly a year

www.bitdefender.com · 22 days ago

Read more in my article on the Hot for Security blog.

Kali Linux 2026.2 Release With new Hacking Tool and With Updated Desktop Environments

gbhackers.com · 22 days ago

Kali Linux 2026.2 arrives on schedule in the final week of Q2 with a pragmatic blend of desktop environment refreshes, infrastructure hardening, and practical usability refinements that will matter to both pentesters and platform maintainers. The release emphasizes polish and performance rather than headline-grabbing features: GNOME advances to version 50 and KDE Plasma to 6.6.

The AI Token Costs That Can Break Cybersecurity

www.securityweek.com · 22 days ago

As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.

Kali Linux 2026.2 released with 9 new tools, NetHunter updates

www.bleepingcomputer.com · 22 days ago

Kali Linux 2026.2, the second release of the year, is now available for download, featuring 9 new tools and numerous Kali NetHunter improvements.

Blackfield ransomware asks Nidec Corporation for $2 million ransom

www.bleepingcomputer.com · 22 days ago

The Blackfield ransomware gang is asking for a $2 million ransom from Nidec Corporation, a large Japanese manufacturer of electronic components for automotive and computing applications.

Boss Scam Uses DLL Sideloading to Hijack WhatsApp Web and Defraud Enterprises

gbhackers.com · 22 days ago

The new “Boss Scam” is a sharp escalation in CEO fraud: attackers now combine impersonation, Windows DLL sideloading, and WhatsApp Web session theft to turn trusted executive channels into fraud infrastructure.

AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks

thehackernews.com · 22 days ago

Two researchers have found six security flaws in AirDrop and Quick Share, the wireless features that beam files between nearby devices with no cables or shared network. An attacker within wireless range, with just a laptop and no prior connection, can crash the sharing service on a Mac or iPhone set to receive from anyone, with no tap or prompt.

Nissan Employee Data Breached in Oracle PeopleSoft Hack

www.securityweek.com · 22 days ago

Only a handful of the 100 organizations targeted in the PeopleSoft campaign have been confirmed.

CISA: Windows BlueHammer flaw now exploited by ransomware gangs

www.bleepingcomputer.com · 22 days ago

CISA confirmed on Monday that ransomware gangs are now exploiting a Microsoft Defender privilege escalation vulnerability, dubbed BlueHammer, that has previously been abused in zero-day attacks.

Critical SimpleHelp Vulnerability Exploited for Malware Delivery

www.securityweek.com · 22 days ago

The threat actor is focused on collecting credentials, SSH keys, cryptocurrency wallets, and development tooling.

New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials

thehackernews.com · 22 days ago

Convince an AI browser that it is playing a game, and it can hand over your login details. That is the finding behind BioShocking, a technique from security firm LayerX that tricked six AI browsers and assistants into copying a user's credentials and sending them to an attacker. The targets included OpenAI's ChatGPT Atlas, Perplexity's Comet, and Anthropic's Claude browser extension.

Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth

thehackernews.com · 22 days ago

A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API. The flaw, tracked as CVE-2026-8037, carries a CVSS score of 9.8 according to ZDI. A patch is available. If you run LoadMaster with the API enabled, update now.

[ Removed by Reddit ]

www.reddit.com · 22 days ago

[ Removed by Reddit on account of violating the content policy.

Japan Hotel Industry Targeted With TONResolver RAT and Guest Complaint Phishing Emails

gbhackers.com · 22 days ago

Japan’s hotel sector is the latest target of a sophisticated phishing and remote-access trojan (RAT) campaign that leverages guest-complaint lures and an unusual resilience mechanism: a TON blockchain, based dead-drop resolver. Beginning in late May 2026, attackers sent highly targeted emails to Booking.

Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs

thehackernews.com · 22 days ago

Apple on Monday released security updates for iOS, macOS, and the Safari web browser to address over three dozen flaws, including four vulnerabilities in WebKit that were discovered using artificial intelligence (AI) tools like Anthropic Claude and OpenAI Codex Security.

Quantifind Raises $200 Million for AI-Native Risk Intelligence

www.securityweek.com · 22 days ago

Quantifind will accelerate international expansion and extend its platform’s localized risk intelligence capabilities.

Mustang Panda Targets India’s Government and Energy Sectors With ZOHOMURK and MINIRECON

gbhackers.com · 22 days ago

Two concurrent espionage campaigns by Mustang Panda targeting Indian government and energy-sector organisations, deploying a novel malware suite that includes SHARDLOADER, MINIRECON and ZOHOMURK.

Malicious Chromium Extension Spoofs Perplexity AI to Hijack Browser Searches

gbhackers.com · 22 days ago

A malicious Chromium extension that impersonated the Perplexity AI brand to intercept browser searches and capture keystrokes before delivering users to legitimate search results. The extension, listed as “Search for perplexity ai” (ID flkebkiofojicogddingbdmcmkpbplcd, version 2.2), used Manifest V3 capabilities, declarativeNetRequest (DNR) rules, and a typosquatted domain perplexity-ai[.

New Controller Flaws Expose Highway Signs and Billboards to Remote Hacking

www.securityweek.com · 22 days ago

CISA has published an advisory to inform organizations about three vulnerabilities found by a researcher in Daktronics controllers.

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

thehackernews.com · 22 days ago

A critical security flaw impacting Oracle E-Business Suite has come under active exploitation in the wild, according to Defused Cyber. The vulnerability, tracked as CVE-2026-46817 (CVSS score: 9.8), refers to an improper privilege management and authentication flaw in Oracle Payments that could be abused to take over susceptible instances.

Mistic Malware Blends Into Microsoft Endpoint Components Using Malicious EndpointDlp.dll

gbhackers.com · 22 days ago

A newly identified Windows backdoor, dubbed Mistic, that has been observed in intrusions since April 2026 and appears designed for stealthy, long-term access. The malware uses DLL sideloading, in-memory execution, and self-deletion to blend into enterprise environments and minimize forensic traces.

NIST Enrichment Reductions Impact CVE Coverage, Accuracy

www.darkreading.com · 22 days ago

The National Institute of Standards and Technology (NIST) scaled back the number of CVEs it selects for in-depth analysis, but the move has produced mixed results, according to researchers.

DOJ Seizes 400 Illegal FIFA World Cup Streaming Domains

www.techrepublic.com · 22 days ago

Officials from the US Department of Justice seized nearly 400 domains linked to illegal World Cup streams and warned viewers about the risks of malware, phishing, and data theft.

Japanese Telecom Giant Says Breach May Expose 14.2 Million Email Accounts

www.techrepublic.com · 23 days ago

KDDI says a breach may have exposed email addresses and passwords for up to 14.2 million ISP accounts across six providers.

'Djinn' Stealer Targets Cloud, AI Credentials

www.darkreading.com · 23 days ago

The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp, targeting credentials linking development and admin environments to wider enterprise systems.

Vulnerabilities Expose Private Data in Indian Government Systems

www.darkreading.com · 23 days ago

One critical vulnerability, among many discovered by a researcher, could have allowed anyone to walk in and take over a national government portal.

Nissan discloses employee data breach linked to Oracle zero-day attacks

www.bleepingcomputer.com · 23 days ago

Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle PeopleSoft vulnerability in data theft attacks previously linked to the ShinyHunters extortion group.

NAIC says public data stolen in ShinyHunters' PeopleSoft breach

www.bleepingcomputer.com · 23 days ago

The National Association of Insurance Commissioners (NAIC) says the ShinyHunters extortion group stole only publicly available data, outdated logs, and configuration files after breaching its systems by exploiting a zero-day vulnerability in an Oracle PeopleSoft server.

Can Clothes Make You Invisible to Facial Recognition?

www.darkreading.com · 23 days ago

Does life feel Orwellian sometimes? One researcher has a solution for you: graphic tees that confuse the neural networks in surveillance cameras.

Iran, Russia, China Target Water Systems for Sabotage

www.darkreading.com · 23 days ago

Nation-state attackers breach water systems through weak passwords, exposed PLCs, and poor segmentation, not sophisticated malware.

Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input

thehackernews.com · 23 days ago

Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for. It routed every query and every character typed into the address bar through an attacker-controlled server before redirecting users to real results. Microsoft says Google removed it from the store after responsible disclosure. The extension was called "

WhatsApp rolls out usernames to help users hide their phone number

www.bleepingcomputer.com · 23 days ago

WhatsApp is finally allowing users to reserve usernames, a privacy feature that lets them hide their phone numbers from people not in their contact list.

AI-Driven Identity Attacks Are Surging, PwC Warns

www.techrepublic.com · 23 days ago

AI has given cybercriminals a big advantage in attacking organizations, which they are using to go after weaknesses on edge devices

Microsoft extends Windows Server 2022 hotpatching until October 2027

www.bleepingcomputer.com · 23 days ago

Microsoft has extended Windows Server 2022 hotpatching until October 2027, one year after the mainstream end date of October 2026.

Chromium extension uses AI‑related branding to redirect browser search

www.microsoft.com · 23 days ago

A malicious Chromium-based extension that spoofs the AI-powered answer engine Perplexity AI redirects browser search traffic using MV3 APIs and intermediary infrastructure.

Inside the Advisory Database and what happens when vulnerability volume breaks records

github.blog · 23 days ago

The GitHub Advisory Database is processing more vulnerability reports than ever before. Here's what's driving the surge, how we're responding, and how the community can help.

WhatsApp is Finally Getting Usernames to Help Keep Phone Numbers Private

thehackernews.com · 23 days ago

WhatsApp on Monday officially announced the start of global reservations of usernames with an aim to protect the privacy of more than three billion users on the messaging platform. The optional feature is designed to help users connect with someone on the service through usernames, as opposed to directly sharing their phone numbers.

North Korea-Linked macOS Malware Uses Prompt Injection to Evade AI Analysis

www.techrepublic.com · 23 days ago

SentinelOne says macOS.Gaslight uses prompt injection to mislead AI-based malware analysis, steal data, and use Telegram for C2.

Factoring RSA Keys with Many Zeros

www.schneier.com · 23 days ago

Interesting research on a new class of weak RSA keys: keys with lots of zeros. It turns out that these keys are out in the wild. The badkeys project is an open-source service that checks public keys for known vulnerabilities.

In San Francisco’s A.I. Era, Even $180,000 Tech Salaries Are No Longer Enough

www.nytimes.com · 23 days ago

As OpenAI and Anthropic prepare to go public, tech workers making six figures are grousing that they cannot compete with the new A.I. elite. Some doubt they can afford to stay.

WhatsApp Rolling Out Username Feature to Bolster Phone Number Privacy

www.securityweek.com · 23 days ago

An optional ‘username key’ adds another layer by requiring a secondary credential before someone can message users.

U.S. offers $10 million for hackers targeting WhatsApp, Signal users

www.bleepingcomputer.com · 23 days ago

The U.S. Department of State is offering up to $10 million for information that helps identify or locate members of the UNC5792 and UNC4221 hacker groups, which are linked to Russia's intelligence and military services.

Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks

thehackernews.com · 23 days ago

The China-aligned espionage group Mustang Panda is running two campaigns against the Indian government and hydropower targets, deploying new malware and turning a legitimate cloud service into its command channel.