Tag: EN

Operation Escaneo Signals Shift in Latin America Cyber Threat Landscape

  Operation Escaneo is a warning sign for Latin America’s cybersecurity ecosystem, showing that financially motivated attackers are adopting more advanced intrusion methods. The campaign, uncovered through an exposed attacker server, targeted government, financial, and critical infrastructure organizations across Mexico,…

AutoJack Reveals New Threat to Autonomous AI Agent Security

Researchers are discovering new security threats that extend well beyond traditional prompt manipulation as artificial intelligence agents acquire the capability of browsing websites, interacting with local services, executing tools, and automating complex workflows.  AutoJack, the newest example of malware that…

Inside GentleKiller: The EDR-Killer Powering The Gentlemen

The Gentlemen equips affiliates with a centralized EDR-killer suite, rapidly weaponizing BYOVD exploits to disable security tools before ransomware attacks. ESET published a detailed breakdown of The Gentlemen‘s technical infrastructure on June 18, the result of months of incident-level investigation…

How to Detect a Keylogger on Your System

Comprehensive detection guide covering API-hook, kernel-mode, form-grabber, and hardware keyloggers on Windows, macOS, and Linux — with step-by-step removal instructions. How to Detect a Keylogger on Your System on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration…

GopherWhisper APT

The APT That Turns SaaS Into a Command Channel This article has been indexed from CyberMaterial Read the original article: GopherWhisper APT

Cybersecurity Leaders Face Growing Workloads as AI Changes the Job

  The responsibilities placed on cybersecurity leaders are becoming increasingly difficult to manage as organizations face a growing number of cyber threats, rapid adoption of artificial intelligence technologies, and increasing demands for security oversight across the business. A recent survey…

Texas TPWD Vendor Breach Exposes 3 Million Customer Records

Texas Cyber Command has disclosed a massive third-party data breach affecting the Texas Parks and Wildlife Department (TPWD), exposing the personal records of exactly 3,087,721 individuals. An unauthorized actor breached this vendor’s network infrastructure, resulting in a severe supply chain…

Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys

Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that’s installed on about 100,000 sites. The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosure flaw that can allow unauthenticated attackers…

CISA Warns of Active Exploitation Following FortiBleed Leak

FortiBleed exposed credentials for 74,000 Fortinet devices, with attackers actively exploiting the leak to target systems worldwide. On June 18, CISA issued an emergency alert after reports surfaced that credentials for approximately 74,000 Fortinet firewalls and VPN gateways had been…