SilkParasite Uses Google Drive as C2 to Hide RAT Traffic Inside Trusted Cloud Services
SilkParasite, a long-running cyberespionage operation targeting government bodies across Central Asia through a compact but highly mature arsenal of remote a...
general
20 articles
A $25 template helped scammers build hundreds of phantom bank domains
A phrase on a suspicious website turned into an investigation of phantom banks built to support scams, according to new research from Allure Security. Molly ...
Nearly half of enterprises have no one leading PQC migration
Enterprises believe they are prepared for the security challenges posed by quantum computing, but gaps in ownership, testing and visibility could complicate ...
New infosec products of the week: August 21, 2026
Here’s a look at the most interesting products from the past week, featuring releases from F5 Networks, Intezer, Netscout, and Tufin. NETSCOUT expands Adapti...
Over 50,000 Stripe API keys exposed, highlighting fraud risks
Over 50,000 Stripe API keys have been exposed across public code repositories, GitHub Actions logs, and misconfigured web servers, demonstrating the immediat...
AI skills in cybersecurity jobs double, but junior hiring lags
The AI Workforce Consortium's report highlights that AI skills are now present in 28.5% of G7 cybersecurity job postings, a substantial increase from 14.
Critical vulnerability in Elementor Pro allows unauthenticated file upload and RCE
The vulnerability arises from a discrepancy between two loops within the File Upload module: one for validation and one for processing.
Report calls for AI sector to be designated critical infrastructure
The report defines the AI sector broadly, encompassing organizations, technologies, and industries involved in the development, training, deployment, and ope...
New attack bypasses AI guardrails by encrypting malicious prompts
The attack, developed by Rony Utevsky, a researcher at Adversa, is dubbed "cryptographic context injection" and exploits a fundamental weakness in how AI mod...
Network of 77 Firefox extensions linked to crypto theft uncovered
Socket researchers identified 40 malicious extensions and 37 others disguised as unrelated utilities, all linked through shared code, infrastructure, and pub...
New Android banking Trojan ToxicPanda 2.0 expands victim targeting
Discovered by Zimperium's zLabs team, ToxicPanda 2.0 leverages the Android Accessibility Service to enable wireless debugging, effectively gaining shell acce...
IT leaders increasingly value gaming skills in hiring and decision-making
Logitech's research reveals that 98.8% of IT decision-makers believe gaming directly impacts their job performance.
Vercel offers $1 million in bounties for sandbox hacks
The two-week program challenges participants to breach an isolated sandbox environment hosted by Vercel.
Security researcher enrolls Linux device in Apple's Find My network
The researcher, known as Zerotistic, devised a method to trick Apple's systems into sending location data, typically reserved for Apple devices, to a Linux m...
Alation confirms cyberattack after reporting system incident
Alation confirmed it identified an isolated incident involving unauthorized activity in one of its systems.
Hackers compromise Rust crate arrayref to inject malware
The attack involved injecting a dependency on a malicious package, proc-macro1, which impersonated the popular proc-macro2 crate.
Rejoice In The Nostalgia - PSW #940
Agentic IAM: How to secure and manage AI agent identities
Explore how Agentic Identity and Access Management (IAM) helps organizations securely manage AI agents as governed non-human identities. Learn how identity, ...
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account published releases tha...
Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals work...