Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight
The spyware-equipped Manic, a persistent Grandoreiro campaign in Latin America and Europe, and an expanded ToxicPanda 2.0 malware.
general
20 articles
Critical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command Execution
A critical flaw (CVSS 9.4) in NASA/JPL’s AIT-GUI let anyone send unauthenticated commands to spacecraft instruments.
Chinese Hacker Uses DeepSeek and Hermes Agent to Launch Autonomous Cyberattacks
A Chinese-speaking threat actor has been observed using DeepSeek through the Hermes Agent framework to automate reconnaissance, vulnerability research, explo...
Apollo Global Management Data Breach Exposes Social Security Numbers and Personal Data
Apollo Global Management has disclosed a cyber incident in which attackers gained unauthorized access to cloud platforms and may have acquired highly sensiti...
Zero-Click Grok Attack Lets Hackers Steal Chat History Using Encrypted Prompt Injection
A newly disclosed prompt-injection technique could turn a routine request to summarize a webpage in xAI’s Grok web chat into a silent data-exfiltration attac...
U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog
U.S.
768 Leaked AWS Keys Still Active With Full Admin Access to Corporate Accounts
A large-scale investigation has uncovered 768 publicly exposed AWS access keys that remain active and grant full administrative privileges to corporate cloud...
TrueConf flaws enabling attacks on meeting participants added to KEV catalog
The flaws have been used by the Head Mare APT hacktivist group to spread PhantomCore malware.
Secure AI agent identity in private cloud and hybrid environments
Ping Identity adds self-managed identity controls to secure and govern AI agents in regulated environments.
Friday Squid Blogging: Neon Flying Squid
The neon flying squid can fly in formation. The shoal of about 100 squid rose unexpectedly from a patch of the Pacific Ocean around 370 miles from Tokyo and ...
Navy warns of multi-pronged adversary campaign targeting personnel and installations
The campaign includes direct threats and harassment via social media, doxing, drone activity near Navy assets, ground-level surveillance, physical attacks, a...
Surveillance, Murder Hornets, Portmantau, TrueCONF, Siemens, N-Able and More - SWN #609
New Agent Tesla malware version uses emoji obfuscation to evade detection
The latest Agent Tesla campaign utilizes a JScript dropper that incorporates Unicode emoji characters to disrupt signature-based detection and obscure the ma...
Army seeks AI agents for cyber defense amid evolving threats
Project Griffin, also known as the Intelligent Response and Orchestration Node (IRON), is a pilot program designed to create an ecosystem of AI agents capabl...
Researchers find way to weaponize Windows Defender's own driver
Check Point Research disclosed a technique that uses Microsoft Defender's boot-time remediation driver, BTR.sys, to perform arbitrary kernel-level file and r...
Senator Wyden seeks review of federal law enforcement hacking tools
Wyden has formally requested the U.S.
New malware targets Android car head units for ad fraud and botnet creation
Kaspersky discovered the threat in June 2026, noting that the malware spreads through the built-in updaters of the head unit firmware.
Attackers use FTP banners to hide new E4del and PINHOLE RATs
The attack chain begins with a ZIP archive, likely distributed via phishing, which initiates an LNK-based infection.
Hospital for Sick Children discloses employee data breach due to third-party software flaw
SickKids confirmed that clinical systems and patient records were not affected, though its public-facing Careers website was temporarily taken offline.
Thousands of active AWS access keys remain publicly exposed
Truffle Security has been tracking this exposure for four years, finding that 817 of the exposed keys were linked to companies, with 526 being AWS root keys.