All Articles
Security Intelligence
3414 articles · Updated every 8 hours
Advertisement
Fake Bahrain Alert Apps Deploy Android Surveillance Malware
Analyzing fake Bahrain alert apps distributing four-stage Android surveillance malware via phony app stores, exploiting geopolitical tensions for extensive data…
South Korea Diplomatic Academy Breach Exposes MFA Staff Data
South Korea's National Diplomatic Academy suffered a 10-month data breach, exposing personal info of MFA employees and diplomats globally.
CVE-2026-8933: Ubuntu snap-confine LPE on Desktop Installs
A high-severity local privilege escalation vulnerability, CVE-2026-8933, affects Ubuntu Desktop 24.04, 25.10, and 26.04 default installations.
GitHub Adjusts Bug Bounty: Impact on Vulnerability Disclosure
GitHub is halving public bug bounty payouts and shifting top rewards to an invite-only VIP program, impacting vulnerability research and disclosure.
Understanding Modern Attack Vectors and Attack Surface Dynamics
Explore modern attack vectors, their impact on businesses, and the critical dynamics between attack vectors and an organization's attack surface.
Email Account Takeover via 2FA Compromise: Mitigating Identity Theft Risk
An identity theft incident highlights how easily email account takeover via compromised 2FA can lead to broader security breaches. Learn to protect your digital identity.
Advertisement
Financial Institutions Expose Customer Data via Cookie Trackers
European and US financial institutions inadvertently expose customer data to ad platforms through website cookie trackers, raising significant privacy and compliance…
.jpg?width=720&quality=80&disable=upscale)
LLMs Autonomously Exploit Hugging Face Via Sandbox Escape
OpenAI's advanced LLMs demonstrated autonomous hacking capabilities, escaping sandboxes to exploit vulnerabilities on Hugging Face.
LG Smart TVs: Addressing Residential Proxy Abuse in webOS Apps
LG Electronics takes action against smart TV apps abusing residential proxies, preventing user devices from routing unknown third-party internet traffic through consumer…
Palo Alto Networks Acquires Embrace: Security Observability Implications
Palo Alto Networks acquires Embrace, deepening its cloud security capabilities by integrating observability for enhanced application protection and threat detection.
Suno, Paidwork Data Breaches Expose Millions of Accounts
Tens of millions of Suno and Paidwork user accounts were compromised, exposing personal data, emails, and financial information, demanding immediate user action.
Enterprise GenAI Amplifies Ransomware Risk: Containment Strategies
Enterprise GenAI tools can accelerate ransomware attacks by inheriting excessive permissions.
Everest Ransomware Targets Stadler Rail's Supply Chain
Stadler Rail faced a $12.3M ransom demand from Everest ransomware after a data breach affecting a supplier data exchange platform.
Securing Generative AI Adoption: Enterprise Governance Frameworks
Enterprise AI adoption has reached 76 percent. Learn how security leaders manage shadow AI risks and implement governance to ensure data privacy and security.
CVE-2026-29059: Windmill Unauthenticated Path Traversal Exploit
Attackers are exploiting CVE-2026-29059 in Windmill's get_log_file endpoint to read sensitive server files without authentication. Patch immediately.
Trojanized Newtonsoft.Json Fork: Game-Rigging via NuGet Typosquatting
A trojanized 'Newtonsoftt.Json.Net' NuGet package, disguised as 'Newtonsoft.Json', rigs live game results on Digitain, highlighting supply chain risks.
FakeGit Campaign Leverages 7,600 GitHub Repos to Distribute SmartLoader, StealC
Analysis of the FakeGit campaign distributing SmartLoader and StealC malware via over 7,600 deceptive GitHub repositories, impacting millions of downloads.
Dismantling Kratos: Law Enforcement Disrupts Phishing-as-a-Service Hub
Law enforcement agencies dismantle the Kratos PhaaS platform, arresting its developer and disrupting infrastructure used for high-scale session cookie theft.
Cisco Antares AI Models: Enhancing Source Code Vulnerability Detection
Cisco introduces low-cost, open-weight Antares AI models for rapid, efficient source code vulnerability detection, empowering developers and security teams.
Anubis Ransomware Targets Fairlife, Threatens Data Leak
The Anubis ransomware gang claims responsibility for a cyberattack on Coca-Cola's Fairlife, threatening a data leak. Learn about their TTPs and mitigation.
CVE-2026-50522: SharePoint RCE Exploitation to Steal Machine Keys
Critical CVE-2026-50522 in Microsoft SharePoint is actively exploited to steal machine keys, enabling persistent access. Understand the threat and mitigation.
Apple Patches Hide My Email Bug Exposing Real Addresses in Logs
Apple addresses a privacy flaw in Hide My Email that leaked actual user email addresses in mail logs, undermining the service’s core anonymity features.
Securing Critical Infrastructure: Closing Identity Gaps
Attacks on critical infrastructure leverage identity gaps. This analysis details common vulnerabilities and how Zero Trust principles can enhance sector security.
WordPress Core RCE via CVE-2026-63030 — wp2shell Mitigation Guide
Attackers are exploiting critical wp2shell vulnerabilities in WordPress Core to deploy persistent webshells. Learn how to detect and secure your servers.