FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure
FBI seizes QScan and QTRouter, China-linked platforms used to hide intrusions and target U.S.
general
20 articles
OWASP updates top 10 security risks for LLM applications
OWASP’s 2026 LLM Top 10 highlights prompt injection, AI agents and emerging RAG security risks.
FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations
The U.S.
Meta agrees to $18 billion settlement over teen social media harms
Meta has reached a proposed settlement worth up to approximately $18 billion with a bipartisan coalition of 52 attorneys generals over allegations that Faceb...
US takes down alleged Chinese hacking tools used against Federal Reserve, DOJ and Senate
The DOJ said it disrupted Chinese state-backed tools used to scan, infect and exploit IoT devices for attacks on federal agencies and multiple industries.
Iran-linked hackers expand infrastructure across Europe and Middle East, report says
Researchers said they identified servers and domains associated with several countries in Europe and the Middle East, potentially pointing to a broader targe...
Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler
Cybersecurity researchers have discovered additional infrastructure and previously undocumented malware associated with Nimbus Manticore, an Iranian state-sp...
AI Speeds Up Malware Development, Not Its Success Rate: Analysis
Palo Alto Networks Unit 42 analyzed 405 AI-linked malware samples and found only 12 reached production endpoints. The post AI Speeds Up Malware Development, ...
Boston Scientific says cyberattack disrupted operations globally
Medical technology company Boston Scientific has been targeted in a cyberattack that disrupted some of its IT systems, causing operational disruptions global...
LACMA data breach exposes customer and employee information
The Los Angeles County Museum of Art (LACMA), one of the largest art museums in the western United States, has announced that a data breach last year exposed...
Fake recruiter scams target corporate credentials on mobile devices
Researchers at Zimperium's zLabs have identified these campaigns, tracked as RecruitTrap, impersonating major companies such as Amazon, Apple, and Deloitte.
Hackers target Microsoft SharePoint RCE chain with PoC exploit
Attackers are now targeting a chain of two Microsoft SharePoint vulnerabilities that can allow them to execute arbitrary code on unpatched servers, according...
Nucleus Security unveils AI engine to enhance exposure management
Nucleus Helix integrates with the company's existing Data Core, which stores asset, vulnerability, and ownership information.
AnonyMousKIT phishing service targets Apple credentials and Activation Lock
AnonyMousKIT is specifically designed to circumvent Apple's Activation Lock, a security measure that links an Apple device to its owner's Apple ID, making st...
Tortoiseshell Expands Malware Toolset With New Backdoor, SSH Tunnel
Group-IB uncovered new Tortoiseshell infrastructure, including a backdoor and SSH tunneling tool
WhatsApp enhances account security with passkeys and stronger verification
WhatsApp has introduced the ability for users to create multiple passkeys, allowing separate secure logins for different devices and platforms.
Russian hackers use 'zero-click' email attacks against organizations
The "beehive" attacks, attributed to the Russian group Laundry Bear (also known as TA488 and Void Blizzard), exploit a flaw in Zimbra webmail, allowing attac...
Nvidia NemoClaw vulnerability allows full control of AI agent's local model server
The vulnerability, identified as CVE-2026-65105, can be exploited by visiting a malicious website.
Why human-speed defense has failed
Defenders need AI today so they can run at the same speed as the attackers.
Apple reverses Hide My Email domain change after user backlash
Users expressed concerns that the shift to @private.icloud.