MacOS screen sharing vulnerability actively exploited for crypto mining
The vulnerability, identified as CVE-2026-65400, has a severity rating of 7.1 out of 10 and stems from a flaw in macOS' screen sharing capability.
SC Media
20 articles
ExfilSquad data extortion group linked to 13 victim data leaks
ExfilSquad, which emerged on July 26, initially claimed to have exfiltrated data from 15 organizations.
ShinyHunters group claims responsibility for RingCentral data breach
The incident, which occurred in July, was disclosed by RingCentral as the result of a sophisticated social engineering campaign.
Mathematicians, Lazarus, Akira, Computer History, Zoom, LiteLLM, Josh Marpet and More - SWN #607
AI-driven energy buildout raises cybersecurity, supply chain risks
AI-driven energy growth brings new cyber and supply chain risks to critical infrastructure.
White House looks to engage private sector in offensive hacking ops
Trump expands private-sector role in U.S.
What GRC Failure Costs the Business
Effective Assurance Turns Defensible Controls into Business Protection
Build or Buy? Making the Right Application Security Investment
Decision Starts with Trust Boundaries
What Application Security Actually Controls
Six Trust Boundaries Define Application Security Coverage
How to Evaluate DSPM and Data Discovery Platforms
Finding Sensitive Data Is Not the Same as Reducing Risk
The Water Watch Center promises the cyber protection small water utilities need
Here’s the story about the industry’s attempt to offer cyber tools to small water utilities across the U.S.
CISA adds Metabase, Windows and Cisco Secure Firewall flaws to exploited vulnerabilities list
The vulnerabilities added to the KEV catalog include a heap inspection flaw in Cisco Secure Firewall (CVE-2026-20349), a use-after-free vulnerability in the ...
Ukraine shuts down 94 fraudulent call centers in nationwide crackdown
The crackdown, which involved 411 searches, targeted call centers where operators impersonated bank officials, brokers, and law enforcement.
Apple warns users of mercenary spyware attacks on iPhones
Apple's threat notifications are triggered by the detection of mercenary spyware, which is described as sophisticated, expensive, and aimed at a small number...
DPRK’s Lazarus Group exploits Windows zero-day in backdoor campaign
Initial access is gained through fake job offers and PDF viewer downloads.
China-linked Jewelbug group conducts espionage and cryptocurrency theft
Jewelbug operates a single, custom command-and-control (C2) panel to manage its dual operations.
Rubrik rebuilds code review pipeline after AI model finds numerous security flaws
Rubrik gained access to Anthropic's Project Glasswing, which provides early access to the Mythos Preview model, a tool designed to find software flaws and co...
Market for AI watermark removal tools emerges after Anthropic's Claude update
This development includes a GitHub project with over 4,500 stars, various new web tools, and existing AI detection evasion services.
Loongson processors vulnerable to LoongLeak cache attack
German researchers from the Helmholtz Center for Information Security discovered that Loongson processors, which utilize the LoongArch instruction set archit...
Trump allows private companies to conduct cyber operations against criminals
The new policy permits "Cyber Effects Operations," which involve manipulating, disrupting, or destroying information systems and networks.