BleepingComputer (1 hour ago)
A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a custom malware framework called KeyDrift.
Read the full story on BleepingComputer.
A cleanup script deletes the malware’s own files, making the intrusion harder for the PC’s owner to detect. NordVPN’s Threat Intelligence team discovered malicious repositories posing as the KyttyPS5 and AnyPS5 emulators.
Wired has the story of a superuser cheating scandal.
“We are still going to keep the data, but we will provide the decryption key for the hospital sector only.”
The leaked records include names, phone numbers, job titles, and assignments of thousands of ICE, CBP, and other DHS employees.
An unreleased version of the AI model has found and chained multiple vulnerabilities in Chrome, Safari, Android, Windows, and Linux, Anthropic says.
The latest version of Firefox fixes 167 security vulnerabilities, most of which are of high severity, while the newest version of Chrome patches 52 flaws, four of which are critical.
A fake cryptocurrency trading app called Padre Terminal, previously available on the Apple App Store for iOS devices, has been linked to the theft of approximately $23,000 from 27 Solana wallets.
A massive search-hijacking campaign involving 319 Chrome extensions with a combined 13.4 million reported installations redirected users’ searches through tracking servers to generate advertising revenue from Bing and Yahoo.
Microsoft has resolved a known issue that prevents non-admin users from connecting to devices via Remote Desktop when the “Administrator protection” security feature is enabled.
AI agents can control authenticated browsers, interact with corporate applications, and access sensitive data while appearing to act as legitimate employees.
71 active sources
26 Turkish · 45 English
All sources
