A look at 2025 state-sponsored threats, exploring how actors linked to China, Russia, North Korea, and Iran use vulnerabilities, identity, and trusted access paths to achieve their goals. This article has been indexed from Cisco Talos Blog Read the original…
Mirax Android RAT Hijacks Infected Phones as Residential Proxies
A new Android banking trojan called Mirax is rapidly gaining traction in the cybercrime ecosystem, combining powerful remote access features with residential proxy capabilities to turn victims’ smartphones into high-value infrastructure nodes. Mirax is marketed as a premium Android RAT and banking…
US, UK and Canada disrupt $45M crypto theft in Operation Atlantic
US, UK and Canada ran Operation Atlantic, uncovering $45M in crypto theft and freezing $12M to return to victims. An international law enforcement operation from the US, UK and Canada, codenamed Operation Atlantic, has targeted large-scale cryptocurrency theft schemes. Authorities…
How AI Can Deliver Clear and Defensible SOC Verdicts
The post How AI Can Deliver Clear and Defensible SOC Verdicts appeared first on AI Security Automation. The post How AI Can Deliver Clear and Defensible SOC Verdicts appeared first on Security Boulevard. This article has been indexed from Security…
Claroty advances CPS security with Visibility Orchestration in xDome
Claroty has revealed new Visibility Orchestration capabilities in its Saas offering Claroty xDome, transforming visibility from a vague concept into a quantifiable measurement that proves the value of a strong CPS protection program. Visibility Orchestration elevates organizations across the industrial,…
New Janela RAT Campaign Uses Fake MSI Installers and Malicious Browser Extensions to Steal Data
A new malware campaign involving a Remote Access Trojan called Janela RAT has been actively targeting financial institutions and cryptocurrency platforms across Latin America. The threat actors behind this attack are using fake MSI installer files and malicious browser extensions…
CISA Warns of Fortinet SQL Injection Vulnerability Actively Exploited in Attacks
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical security flaw in Fortinet products. On April 13, 2026, the agency added a severe SQL injection vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. This…
Codex Hacks Samsung TV to Root by Exploiting World-Writable Driver Interfaces
OpenAI’s Codex AI model successfully escalated privileges to root on a real Samsung Smart TV by exploiting world-writable kernel driver interfaces — a finding that raises serious questions about how hardware vendors handle device security on consumer electronics. The experiment,…
Hackers Leave Credential Stuffing Botnet Wide Open With Full Worker Access and Root Passwords
A live credential stuffing botnet targeting Twitter/X accounts has been found completely exposed to the internet, with no password required to access its control panel, worker server credentials, or real-time attack data. The exposed system, running under the name “Twitter…
New PlugX USB Worm Spreads Across Multiple Continents Using DLL Sideloading
A newly discovered variant of the PlugX worm is silently crossing borders by hiding inside USB drives, and it has already been detected on multiple continents spanning nearly ten time zones. First spotted in Papua New Guinea in August 2022,…
Oligo enables real-time exploit detection and blocking at application runtime
Oligo Security has unveiled Runtime Exploit Blocking, a new capability that stops exploit attempts at the application layer in real time. By providing visibility into how applications execute and behave, Oligo identifies and blocks malicious activity at the point of…
PlugX USB Worm Hits Multiple Continents via DLL Sideloading
A new PlugX USB worm variant is driving fresh infection waves across several continents, using DLL sideloading and stealthy USB-based propagation to evade detection. First observed in Papua New Guinea in August 2022, the same strain resurfaced months later not…
No honor among thieves as 0APT threatens rival ransomware gang Krybit
Honey, the skids are fighting again Two rival ransomware gangs have locked horns after 0APT threatened to expose people affiliated with Krybit.… This article has been indexed from The Register – Security Read the original article: No honor among thieves…
Europe’s Largest Gym Chain Says Data Breach Impacts 1 Million Members
Basic-Fit has reported that hackers have stolen names, dates of birth, and even bank account details. The post Europe’s Largest Gym Chain Says Data Breach Impacts 1 Million Members appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
‘Mythos-Ready’ Security: CSA Urges CISOs to Prepare for Accelerated AI Threats
CISOs face a shrinking window to prepare as AI models like Mythos collapse the gap between vulnerability discovery and exploitation, driving a new era of high-velocity cyberattacks. The post ‘Mythos-Ready’ Security: CSA Urges CISOs to Prepare for Accelerated AI Threats…
Pavel Durov Says Russia VPN Restrictions Triggered Banking Disruption
In spite of the fact that the Russian government is intensifying its efforts to reaffirm its control over digital communication channels, unintended consequences of that strategy are becoming evident in a number of critical sectors beyond social media. Significant disruptions…
JanelaRAT Malware Attacks Banks in Brazil and Mexico, Steals Data
Banks in Latin American countries such as Mexico and Brazil have been victims of continuous malware attacks by a strain called JanelaRAT. An upgraded variant of BX RAT, JanelaRAT, can steal cryptocurrency and financial data from financial organizations, trace mouse…
Basic-Fit hack compromises data of up to 1 million members
Basic-Fit, a European gym chain, disclosed that hackers breached one of its internal systems, exposing members’ personal data in several countries. The company operates more than 2,150 clubs in 12 countries under two brands, with more than 5.8 million members.…
DavMail 6.6.0 patches a regex flaw and advances its Microsoft Graph backend
Organizations that run DavMail to bridge standard mail clients to Microsoft Exchange or Office 365 received an update this week. Version 6.6.0 addresses a code-scanning alert tied to a regex vulnerability, adjusts OAuth redirect handling to match a recent Microsoft…
FIFA World Cup 2026 Partners Expose Email Fraud Risk
A recent study by cybersecurity firm Proofpoint highlights a significant vulnerability among the partners and sponsors of the FIFA World Cup 2026. This article has been indexed from CyberMaterial Read the original article: FIFA World Cup 2026 Partners Expose Email…
Triad Nexus Evades Sanctions
Triad Nexus, a significant player in the cybercrime world, has developed strategies to evade international sanctions and prevent takedowns. This article has been indexed from CyberMaterial Read the original article: Triad Nexus Evades Sanctions
Australia Social Media Ban Faces Questions
Australia’s recent social media ban, aimed at restricting access for users under 16, is facing significant scrutiny following a new study that questions its effectiveness. This article has been indexed from CyberMaterial Read the original article: Australia Social Media Ban…
Cybersecurity of Critical Sectors Handbook
ENISA has released a new handbook designed to assist national and sectorial authorities in managing cybersecurity and resilience for critical sectors. This article has been indexed from CyberMaterial Read the original article: Cybersecurity of Critical Sectors Handbook
Patchstack Bug Bounty Program
Patchstack has introduced a Bug Bounty program designed to engage cybersecurity researchers, developers, and bug bounty hunters in identifying and reporting security vulnerabilities in WordPress plugins. This article has been indexed from CyberMaterial Read the original article: Patchstack Bug Bounty…