DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware

July 30, 2026 at 11:48PM Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campai…

FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks

July 30, 2026 at 12:58PM The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inv…

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

July 30, 2026 at 11:35AM Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten mo…

Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data

July 30, 2026 at 10:38AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed se…

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

July 29, 2026 at 11:40PM Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthentica…

Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates

July 29, 2026 at 12:37PM Source code for the Flying Eagle Android remote access trojan (RAT) framework is circulating through cri…

OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach

July 29, 2026 at 12:15PM OpenAI on Tuesday revealed the rogue artificial intelligence (AI) agent that escaped its sealed evaluati…

Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js

July 29, 2026 at 09:50AM Beta release versions of two npm packages in the @joyfill namespace have been compromised to deliver a r…

Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack

July 29, 2026 at 12:29AM Anthropic says Claude Mythos Preview helped derive an end-to-end key-recovery attack against HAWK-256 an…

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

July 28, 2026 at 10:13AM A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) h…

NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework

July 27, 2026 at 11:40PM NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open tech…

Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption

July 27, 2026 at 10:46PM Dysphoria, an Internet of Things (IoT) botnet line tracked by CNCERT and XLab, has adopted blockchain-ba…