In a significant evolution of the Project CAV3RN tooling, a new .NET Native AOT communication module dubbed AzureCommunication.dll has been deployed to replace the framework’s earlier HTTP/WebSocket C2 component. A stealthy channel that abuses Outlook calendar events over Microsoft Graph…
Category: EN
Forescout Report Reveals Surge in AI-Driven Cyber Threats
The Forescout 2026 H1 Threat Review found that more than 37,000 vulnerabilities were published during the first six months of the year, representing a 51% increase year on year. More than half were classified as high or critical severity, while…
Agentic JADEPUFFER Exploits Langflow Flaw to Deploy ENCFORGE AI Ransomware
A ransomware campaign is now targeting the assets behind artificial intelligence systems. The threat actor known as JADEPUFFER has evolved from damaging databases to deploying ENCFORGE, a ransomware strain designed to encrypt AI models, training data, and vector databases. The…
Hackers Hide Malware Commands in Outlook Events Dated 2050 and Use as C2 Channel
A newly identified malware component linked to the Project CAV3RN framework is abusing Microsoft Outlook calendar events scheduled for 2050 to conceal command-and-control (C2) traffic. The tool also uses DNS AAAA responses as a fallback channel to restore Microsoft Graph…
AgentBaiting Campaign Uses 800 Fake AI Skills and MCP Servers to Deliver SmartLoader Malware
Malware operators are increasingly using tools built to extend artificial intelligence as a delivery route. A newly documented campaign called AgentBaiting uses fraudulent AI Skills and Model Context Protocol, or MCP, servers to distribute SmartLoader malware through trusted-looking GitHub projects…
Craneware Data Breach – Hackers Stole Significant Amount of Data
Healthcare financial software provider Craneware has confirmed a cybersecurity incident involving unauthorized access to a portion of its data environment. The company reported that threat actors viewed and exfiltrated a substantial number of file names, along with some employee data,…
Microsoft to Discontinue Podcasts Option on Copilot and to Delete Contents
Microsoft will retire the Podcasts feature in its consumer Copilot app on August 18, 2026, permanently removing access to both the creation tool and all previously generated podcast content. This change affects both free and paid Copilot users, including those…
Cisco’s open-weight Antares models make vulnerability localization cheaper
A security analyst opens an unfamiliar repository, pulls up a vulnerability advisory, and starts hunting for the file where the weakness lives. The naming conventions belong to someone else. Evidence sits in scattered corners of a codebase that runs to…
Druva brings backup, recovery and governance to AI workloads
Druva has announced Druva AI Resilience, a new approach that helps organizations recover, govern, and defend the systems, activity, and context behind AI-powered work. The launch introduces new and expanded capabilities for Microsoft Copilot, Claude Code, Druva Model Context Protocol…
HHS Seeks Input on CLIA Cybersecurity Updates
The Centers for Medicare and Medicaid Services (CMS) and the Centers for Disease Control and Prevention (CDC) have launched a request for information to modernize the Clinical Laboratory Improvement Amendments (CLIA) of 1988, with particular attention to cybersecurity and artificial…
95% of Security Teams Miss Vulnerabilities Between Tests
Enterprise security teams are consistently missing critical vulnerabilities because their testing schedules cannot keep pace with how rapidly their environments change, according to new research from Synack. This article has been indexed from CyberMaterial Read the original article: 95% of…
Iran War Cyber Threat Landscape | A Midyear Assessment on What Matters
In April, SentinelLABS’ Tom Hegel published an initial assessment of the first five weeks of the conflict. Three months later, the evidence supports refinement. This article has been indexed from SentinelLabs – We are hunters, reversers, exploit developers, and tinkerers…
2026 Ransomware Report Reveals 7,551 Victims, 146 Active Groups, and Qilin’s 443% Surge
Ransomware volumes hit a new peak in 2026, with Black Kite tracking 7,551 publicly disclosed victims, 146 active groups, and a 443% year‑over‑year surge in Qilin activity that reshapes the threat landscape. The data points to a structurally higher operating…
A new extortion cocktail: office printers, small ransoms, and BitLocker
We cover two recent cases of BitLocker extortion using RDP, MSSQL, RMM tools, web shells, and printers. The story includes TTPs and recommendations. This article has been indexed from Securelist Read the original article: A new extortion cocktail: office printers,…
Intel fortifies Foundry with an actual customer: Fortinet
Firewall maker looks to safeguard its custom ASIC production with homegrown silicon This article has been indexed from www.theregister.com – Articles Read the original article: Intel fortifies Foundry with an actual customer: Fortinet
Empirical Security Raises $25 Million in Series A Funding
The startup will use the investment to accelerate the development of its threat prediction and discovery products. The post Empirical Security Raises $25 Million in Series A Funding appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…
A New Ransomware Threat Actor Emerges Every Week, Warns Report
Analysis by Black Kite warns that ransomware ecosystem is becoming bigger and more fragmented This article has been indexed from www.infosecurity-magazine.com Read the original article: A New Ransomware Threat Actor Emerges Every Week, Warns Report
FBI Impersonation Scam Targets Previous Victims
The FBI’s Internet Crime Complaint Center has issued an updated warning about scammers impersonating bureau personnel to target previous fraud victims. This article has been indexed from CyberMaterial Read the original article: FBI Impersonation Scam Targets Previous Victims
North Korean ClickFake Campaign Targets Web3 Professionals
Security researchers at SOCRadar have identified a sophisticated social engineering campaign by North Korean threat actors targeting professionals in the Web3 and cryptocurrency sectors. This article has been indexed from CyberMaterial Read the original article: North Korean ClickFake Campaign Targets…
Google Cloud 15-hour outage hits three services
Google Cloud experienced a 15-hour service disruption last week when an electrical fault on the upstream utility grid triggered power and cooling failures at a datacenter serving three specialized services in the europe-west4-a zone. This article has been indexed from…