The Hacker News (30 minutes ago)
The threat actor known as Blind Eagle has resurfaced with a new campaign targeting organizations in Latin America through judicial and administrative-themed phishing lures to deliver a remote access trojan (RAT) that shares its lineage with AsyncRAT and DCRat.
Read the full story on The Hacker News.
Michael LoSapio could inherit a depleted workforce and a political headache or two, courtesy of his current employer
Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant.
Binance is warning about a vulnerability in Apple’s iOS 26.7.1, 27.0.1, and 27.2 that could allow third-party apps to read private files stored by other apps, including cryptocurrency seed phrases, secret keys, and login credentials.
The remote access giant also urged its self-hosted customers to take down their own servers amid a “critical security incident,” fearing the possibility of cyberattacks.
Fireworks AI disclosed on Monday that its investigation into a security incident first reported early last month uncovered further malicious activity, affecting account and billing information, alongside secrets, datasets, and incomplete models for a “limited set of accounts.”
The Sega breach is part of a much larger supply chain attack that struck a digital marketing company called Arara.
An iOS sandbox escape published on GitHub lets an app read other apps’ files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login credentials at risk of exposure to malicious apps, Binance warned today.
At some point your security will fail. This isn’t pessimism. It’s not because your team and tools aren’t sophisticated enough. It’s the reason we have detections in the first place.
An iMessage flaw could let a remote attacker join a group chat and receive its messages, Apple said yesterday, and it released updates to fix it. The updates also fix a separate iMessage flaw that could let someone added to a group access messages sent before they joined.
The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that’s used to break into victims’ Microsoft Exchange servers with an aim to surreptitiously collect emails.
65 active sources
20 Turkish · 45 English
All sources
