Flying Eagle Android RAT source code circulates on Telegram
The Flying Eagle framework is being distributed as a fake "公安一网通办" Public Security service application targeting Android users in China.
SC Media
20 articles
Health-ISAC warns of ShinyHunters' increasing attacks on healthcare SSO accounts
ShinyHunters primarily targets cloud SaaS and storage platforms through supply chain and identity attacks.
SplitVPN 'no logs' claim contradicted by massive data leak
The leaked database contains approximately 23.4 million user records, 13.
Navy advances network consolidation with new prototype project request
The goal of the 1/4 Initiative is to modernize and unify the Naval Surface Warfare Center Corona Division's IT and data architecture, transitioning from a fr...
Andrea Carcano returns as Nozomi Networks CEO
According to SDx Central, Andrea Carcano has returned to Nozomi Networks to assume the role of CEO, replacing Edgard Capdevielle.
Spur Intelligence secures $200 million investment
Founded in 2017, Spur Intelligence provides real-time intelligence to help organizations identify anonymized, proxied, and obfuscated web traffic, thereby re...
Zscaler and Schwarz Digits partner for sovereign cloud security in Europe
The new service is designed to combat AI-driven cyber threats and enhance cyber resilience for organizations operating within the European Union.
ArmorxAI's Sudesh Kumar: Finding stillness amidst the chaos
Why slowing down and gaining clarity may be the best way to manage a crisis.
Effective incident response plans elusive for most cybersecurity teams
Experts say untested incident response plans leave firms unprepared.
New Tengu botnet uses hardware watchdog for advanced persistence
A new Mirai-derived botnet, dubbed Tengu, was identified with advanced persistence and self-defense mechanisms, including the ability to use a compromised Li...
AI model discovers cryptographic weaknesses in HAWK and AES
The HAWK attack exploits a previously unknown symmetry in the lattice structure of the signature scheme, enabling a key recovery in approximately three hours...
Cyberattacks on emergency systems have become a tool of psychological warfare
Emergency communications systems are an oft-neglected part of protecting critical infrastructure.
CubePilot hit by DNS hijacking attack, warns of potential credential theft
The attack, which occurred on July 24, involved an unauthorized individual gaining control of CubePilot's cubepilot[.]org domain DNS settings.
New AI security approach analyzes model internals
Offensive-security researchers are presenting a model-agnostic method for activation analysis at Black Hat USA 2026.
US effectively bans foreign-made advanced robots over security concerns
The Federal Communications Commission (FCC) has added foreign-made advanced robotic devices to its Covered List, prohibiting their import due to unacceptable...
Stack Sports notifies users of payment card data exposure
Stack Sports discovered suspicious activity on June 8, 2026, after its internal security monitoring systems detected unauthorized activity affecting the Spor...
Gen Z shows low cybersecurity awareness, Kaspersky study finds
A Kaspersky study of 7,200 respondents across 18 countries highlights that only 27% of Gen Z use mobile antivirus software, and a mere 28% regularly back up ...
CAF Bank suspends online services due to third-party software vulnerability
As outlined in The Register, CAF Bank, which serves approximately 14,000 charities, temporarily suspended its online banking services to address a security v...
University of Pennsylvania breach highlights SSO security risks
As detailed in Bleeping Computer, the University of Pennsylvania experienced a significant data breach in 2025 due to a compromised single sign-on (SSO) acco...
New 'PleaseFix' vulnerabilities expose agentic browsers to widespread attacks
Based on information from Dark Reading, security researchers identified a new class of vulnerabilities, dubbed "PleaseFix," that significantly compromise the...