Compromised GitHub Actions re-enabled, posing supply chain risks
The compromised GitHub Actions were originally disabled on May 18, 2026, after being found to execute malicious code that harvested sensitive credentials fro...
general
20 articles
New PamStealer variant uses server-side decryption for macOS malware
The latest PamStealer variant, observed by Jamf Threat Labs, continues to use a JavaScript for Automation (JXA) dropper but has updated its lure and delivery...
Rydox marketplace operator pleads guilty to identity theft and money laundering
Ardit Kutleshi, the operator of the Rydox marketplace, has pleaded guilty to aggravated identity theft and money laundering conspiracy.
3 zero-day flaws in ViewSonic's vCast software allow remote screen viewing, app installation
The vulnerabilities affect ViewSonic ViewBoards, interactive displays commonly used in educational and enterprise settings.
Vulnerable OBS overlay and Chromium flaw enable Twitch chat message code execution
The attack targets streamers using OBS Studio version 32.2.
Elementor plugin vulnerability allows admin account creation
Threat actors can exploit this flaw by tricking a logged-in administrator into clicking a malicious link.
New Carbonato botnet uses AI framework to target insecure Docker daemons
Carbonato exploits Docker hosts with unauthenticated API access on port 2375.
Cloudflare Containers vulnerability allowed data leakage
The flaw resided in Cloudflare's use of thin provisioning for container disks, where deleted container blocks were returned to a shared pool without being wi...
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S.
Kiteworks urges 6-hour server shutdown over potential zero-day attacks
Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on Saturday for a six-hour window after r...
New bill proposes federal board to investigate AI-driven cyberattacks
The proposed legislation, introduced by Sen. Ed Markey, D-Mass.
Senate leaders introduce bill for voluntary telecom cybersecurity practices
The Telecommunications Cybersecurity and Resilience Act, proposed by Sens. Mark Warner and Ted Cruz, seeks to create a collaborative effort between governmen...
Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies
Cameron Wagenius was involved in some of the most high-profile attacks of 2024 while on active duty. The post Army soldier sentenced for spree of attacks on ...
Asus eShop customers warned of data breach
Asus disclosed that an intruder gained access to a portion of its online eShop environment, potentially compromising customer order information, including co...
Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee
I feel like someone who reads this blog will want to go to this: Families are invited to dive into the fascinating world of marine biology during an exciting...
U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog
U.S.
AI butterfly effects, Chuds, CISA, FBI, FreeBSD, Ghost Accounts, Pervs, Josh Marpet - SWN #619
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through an unpatc...
Kiteworks urges customers to stop using platform after warning from federal intelligence agencies
Frank Balonis, CISO at Kiteworks, told Recorded Future News that the company “received credible threat intelligence from federal intelligence authorities ind...
From Data to Decisions to Action: Why Exposure Management’s Next Chapter Runs Through Validation
Confirmed exploitability — not severity scores — is emerging at the strongest signal for deciding what to fix first.