Mass scanning campaign targets Vite development servers for cloud credentials
The operation utilizes an exploit for CVE-2026-39364, a critical flaw affecting Vite versions 7.1.
general
20 articles
BambooToken Malware Uses MQTT to Control Windows and Linux Systems
Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communi...
Nintendo patches critical Nintendo Switch vulnerability
The vulnerability, identified as CVE-2026-82079, affects Switch systems running firmware versions prior to 23.0.
OpenAI’s Astra restrictions are another warning shot for security teams
Here are five ways teams can stay resilient as adversaries gain access to frontier AI models.
Most Fraudulent Hires Receive Credentials Before Detection
A new report highlights the vast growth in fraudulent candidates, presenting significant insider threat challenges to organizations
Zelensky appoints former police chief to lead Ukraine’s cyber coordination center
Ihor Klymenko, who has experience in law enforcement and as interior minister, will run Ukraine's National Cybersecurity Coordination Center.
DDRop attack bypasses Intel and AMD confidential computing defenses
The DDRop attack requires an adversary with existing software control of a server and brief physical access to install a custom interposer circuit board betw...
BambooToken malware controls Windows and Linux systems via MQTT
A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol t...
Dataminr and Crisis24 integrate AI threat detection into risk management platform
The integration embeds Dataminr's Multi-Modal Fusion AI into Horizon, processing text in 150 languages, along with image, video, audio, and sensor data from ...
Hackers target WordPress sites via third-party WooCommerce plugin
Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress to upload a PHP backdoor. [.
Malicious Twitch browser extension leaks OAuth tokens for nearly 31,000 users
The extension, named "Twitch Enhanced Viewer | JeetBot," was available on both the Google Chrome Web Store and Mozilla Firefox Add-Ons store, with approximat...
Homebrew 7.0.0 released with built-in vulnerability scanner and improved security
Homebrew, widely used on macOS, is frequently targeted by threat actors to distribute info-stealer malware.
Most Firms Unable to Recover Quickly from Ransomware
Fenix24 found only four of more than 800 clients came close to stated ransomware recovery targets of 24-48 hours
Electric and gas utility CenterPoint Energy warns of data breach after dark web post
Houston-based CenterPoint Energy notified federal regulators about an incident that exposed some customer data on the dark web.
F5 Bot Defense uses real-time risk scoring to detect fraud and abuse
F5 has announced enhancements to F5 Distributed Cloud Bot Defense, introducing new device intelligence capabilities and specialized agentic AI protections. T...
What Zero-Day Response Should Be in the Post-Mythos Era
AI is shrinking the time between vulnerability disclosure and exploitation, leaving defenders less time to wait for patches or public exploits. Picus Securit...
Black Axe Members Extradited to US Over Internet Fraud Claims
Alleged Black Axe leaders extradited to the US over romance scams, BEC and money laundering claims
Google Search Makes It Harder to See Where a Link Really Goes Before You Click
Google has begun routing some organic Search result links through opaque google.com/goto?
Postman Passport controls API access without exposing credentials
Postman has announced the general availability of Passport by Postman, marking the company’s expansion into API security with a standalone product that gives...
UltraViolet Cyber Equinox measures detection coverage against MITRE frameworks
UltraViolet Cyber has announced the launch of Equinox, its proprietary detection engineering platform, built and operated by the Threat Intelligence & Detect...