Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware

August 1, 2026 at 11:59AM A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote acc…

Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk

August 1, 2026 at 12:22AM A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting gover…

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm

July 31, 2026 at 10:09PM Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called …

Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations

July 31, 2026 at 12:11PM Anthropic on Thursday became the latest artificial intelligence (AI) company to reveal that three of its…

DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware

July 30, 2026 at 11:48PM Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campai…

FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks

July 30, 2026 at 12:58PM The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inv…

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

July 30, 2026 at 11:35AM Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten mo…

Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data

July 30, 2026 at 10:38AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed se…

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

July 29, 2026 at 11:40PM Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthentica…

Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates

July 29, 2026 at 12:37PM Source code for the Flying Eagle Android remote access trojan (RAT) framework is circulating through cri…

OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach

July 29, 2026 at 12:15PM OpenAI on Tuesday revealed the rogue artificial intelligence (AI) agent that escaped its sealed evaluati…

Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js

July 29, 2026 at 09:50AM Beta release versions of two npm packages in the @joyfill namespace have been compromised to deliver a r…