Apple Warns iPhone Users in 110 Countries of Mercenary Spyware Attacks
Apple has issued a new set of high-confidence Apple Threat Notification alerts, warning selected iPhone users in 110 countries that they may be targets of go...
general
20 articles
US Authorizes Private Cyber Firms to Hack Transnational Criminal Networks
Trump authorizes vetted US cybersecurity firms to conduct government-approved cyber operations against transnational criminal networks. President Trump signe...
Hackers Exploiting Unpatched GeoServer Zero-Day
The security defect is described as an SQL injection that could allow attackers to achieve remote code execution. The post Hackers Exploiting Unpatched GeoSe...
PATCHCORD Infrastructure Hosts SuperShell C2 for Remote Commands and Webshell Management
A newly uncovered espionage operation targeting Afghan telecom providers and South Asian critical infrastructure has exposed a layered attacker ecosystem bui...
AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies. The post AmnesiaStealer ma...
Hackers Steal One AI Key, Resell the Compute, and Leave Victims With a Million-Dollar Bill
A rapidly expanding financial cybercrime model called AI token jacking, where threat actors steal developer API keys for popular AI platforms, consume the vi...
Fortinet FortiWeb and FortiClient Flaws Let Unauthenticated Attackers Gain Access and Execute Arbitrary Code
Fortinet has released security updates to address high-severity vulnerabilities in FortiWeb and FortiClient for Windows. These vulnerabilities could allow un...
Aeternum Hides Malware Commands on Polygon Blockchain Where Server Takedowns Can’t Erase Them
A newly analyzed malware operation called Aeternum is turning the public Polygon blockchain into a command-and-control (C2) channel, allowing attackers to di...
Trezor Shipping Provider Data Breach Exposes Personal Data of 13,689 Customers
Hardware wallet manufacturer Trezor has recently disclosed a data breach at ShipMonk, a third-party shipping provider. This breach exposed the personal infor...
The hardest part of agentic AI may be rebuilding the business
Organizations expect AI agents to change how work gets done, driving productivity and growth while allowing employees to focus on higher-value tasks. Few, ho...
Beacon CRM Data Breach Exposes Customer Data via Compromised AWS Access Key
Beacon CRM has confirmed that a threat actor likely downloaded a complete copy of its customer database after gaining access to its Amazon Web Services (AWS)...
New AmnesiaStealer Malware Targets macOS Users via ClickFix Attacks
A newly identified macOS infostealer, named AmnesiaStealer, targets users via ClickFix social-engineering campaigns that impersonate GitHub download pages. T...
Weak IAM affects up to 98% of cloud environments
Misconfiguration remains one of the leading threats to cloud environments because a single configuration error can result in public network access, unrotated...
17 draft Cyber Resilience Act standards are open for comment
A company selling a connected toy in Europe must show by the end of 2027 that the product meets the Cyber Resilience Act. The law states what manufacturers h...
New infosec products of the week: August 14, 2026
Here’s a look at the most interesting products from the past week, featuring releases from A10 Networks, ScienceLogic, Searchlight Cyber, and SelectHub. Scie...
Apple sends new ‘Threat Notification’ alerts over mercenary spyware attacks
You're not alone if you just received an "Apple Threat Notification" saying it detected a "mercenary spyware attack targeted at your iPhone." [.
China-linked Jewelbug group conducts espionage and cryptocurrency theft
Jewelbug operates a single, custom command-and-control (C2) panel to manage its dual operations.
Rubrik rebuilds code review pipeline after AI model finds numerous security flaws
Rubrik gained access to Anthropic's Project Glasswing, which provides early access to the Mythos Preview model, a tool designed to find software flaws and co...
Market for AI watermark removal tools emerges after Anthropic's Claude update
This development includes a GitHub project with over 4,500 stars, various new web tools, and existing AI detection evasion services.
Loongson processors vulnerable to LoongLeak cache attack
German researchers from the Helmholtz Center for Information Security discovered that Loongson processors, which utilize the LoongArch instruction set archit...