VirusTotal has added daily scanning of the public IPv4 space, giving security teams a new way to find command-and-control (C2) servers and track malware…
Tag: Cyber Security News
Top 10 Best Container Image Scanning Tools in 2026 [Ranked & Scored]
Every image scan returns hundreds of CVEs; the question is which ten your containers actually execute and which base image would zero the list entirely.…
Top 10 Best Bug Bounty Platforms in 2026 [Ranked & Scored]
Researchers are testing your perimeter tonight whether you invited them or not bounty platforms decide whether that energy reaches your inbox or the dark…
New Anthropic OSS Scanner Tool to Scan Open-source Repositories for Vulnerabilities
Anthropic has introduced OSS Scanner, a free service that checks critical open-source repositories for security vulnerabilities and sends findings…
MATCHBOIL Malware Uses Cloudflare-Hidden C2 Servers to Deliver Backdoor Payloads
MATCHBOIL, a C# malware downloader linked to UAC-0099, uses command-and-control (C2) servers hidden behind Cloudflare to deliver backdoor payloads. Its…
PoC Released for Telegram Desktop Flaw Enabling One-Click File Account Takeover
A public proof of concept has exposed a flaw in Telegram Desktop that could let attackers steal local files and take over accounts after a user clicks a…
React Server Components Flaw Lets Attackers Freeze Next.js Servers With a Single POST Request
A high-severity denial-of-service flaw (CVE-2026-23870) in React Server Components can allow a remote attacker to freeze vulnerable Next.js servers by…
Malicious PDF Reader With 10,000+ Installs on Google Play Delivers Anatsa Banking Trojan
A malicious Android PDF reader distributed through Google Play has recorded more than 10,000 installs while serving as an installer for the Anatsa banking…
Leaked Chat Logs Show Silent Ransomware Extorted Over $200,000,000 in 6 Months Without Encrypting Data
Alleged internal chats from Silent Ransom Group suggest the criminals collected $206.95 million from 27 firms in roughly six months without encrypting…
Citrix Urges NetScaler ADC and Gateway Customers to Patch for New Critical RCE Vulnerability
Citrix has urged customers to patch a critical security flaw in NetScaler ADC and NetScaler Gateway that could allow remote code execution or cause a…
Anthropic Cyber Mission to Support Defenders with Tools, Research, and Resources
Anthropic launched its Anthropic Cyber Mission on October 8, 2026, to help security teams protect critical infrastructure and open-source software. The…
FBI Seized Vulnerability Scanning and Spear Phishing Tools Used by China-Linked Hackers
The FBI and U.S. Justice Department have seized seven domains tied to Microscan and FishHub, two hacking tools allegedly operated by China-based Integrity…
Critical Sungrow Inverter Vulnerability Lets Attackers Access Solar Plants Without Passwords
A critical Sungrow inverter vulnerability could have allowed attackers to log in to the company’s iSolarCloud management platform without a valid…
Hackers Use Fake Firefox Wallet Extensions to Steal Crypto Recovery Phrases
Hackers have used 16 malicious Firefox extensions to target cryptocurrency users with fake wallet screens that capture recovery phrases and private keys.…
DarkSword iOS Exploit Platform Uses Coruna Malware to Steal Crypto Wallet Recovery Phrases
DarkSword operators are using Coruna malware to steal cryptocurrency wallet recovery phrases from iPhones, turning browser exploits into a ready-to-use…
Microsoft Teams Adds Synthetic Audio and Video Detection to Fight Deepfake Meeting Attacks
Microsoft Teams is preparing to support synthetic audio and video detection to help organizations spot deepfake attacks. The feature will connect Teams…
Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets
A malicious release of the Tensorlake npm package has been published with a Shai-Hulud worm variant that can steal developer secrets and attempt to spread…
Hikvision Camera Vulnerability Targeted in Remote Code Execution Exploitation Attempts
Scanning and remote code execution attempts targeting video surveillance devices in Ukraine rose between September 21 and October 1, 2026. Most activity…
FBI Dismantles Scam Center in Ghana and Seizes 300+ Devices in Operation Blackout
Authorities have dismantled a scam center in Ghana as part of the FBI’s Operation Blackout, identifying 89 victims and seizing more than 300 devices. FBI…
Co-Creator of Dark Web Marketplace “Empire Market” Sentenced to 40 Years in Prison
Raheim Hamilton, co-creator of Empire Market, was sentenced to 40 years in federal prison for running a dark web marketplace that handled more than $430…