î „Ravie Lakshmananî ‚Oct 12, 2026Cybersecurity News / Hacking Some recent events have highlighted the rapid nature of cyber threats. Attackers wasted no time exploiting a newly discovered vulnerability, showcasing the need for swift action in the face of evolving risks. However, …
Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More Read More »
Cybersecurity experts have unveiled details about a new variant of the DarkSword iOS exploit kit known as P7 DarkSword. The P7 variant of DarkSword differs from previous versions by reducing its on-device footprint, incorporating on-device keychain and crypto-wallet theft, and …
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands Read More »
In environments studied for the 2026 State of Agent Security Report, approximately 1,280 third-party products now incorporate AI. Among them, about 282 are accessible through single sign-on, while the remaining thousand remain unseen by identity infrastructure by default. This is …
Why Security Built for AI You Chose Misses the Agents You Didn’t Read More »
A recent cybersecurity report has revealed details of an ongoing credential-theft operation that has compromised two prominent open-source maintainer accounts, leading to the insertion of a malicious workflow into over 340 repositories. According to StepSecurity, the attacker utilized the accounts …
Hackers linked to a Chinese cybersecurity firm have been accused of stealing emails from various organizations in Southeast Asia, including government agencies, law enforcement, healthcare facilities, and religious institutions. This revelation was made by the FBI and six other international …
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails Read More »
According to a recent announcement by Google on October 6, attackers were able to compromise three country-code top-level domains (ccTLDs) and acquire unauthorized HTTPS certificates for various Google domains. Although Google’s own systems remained unaffected, domains ending in .gh (Ghana), …
Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains Read More »
Cybersecurity experts have uncovered details of a deceptive “human-operated phishing platform” that masquerades as advertising products for AI chatbots such as Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus. These products, which claim to provide campaign optimization, …
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes Read More »
î „Ravie Lakshmananî ‚Oct 05, 2026Vulnerability / Email Security Microsoft recently released urgent security updates to fix a critical vulnerability in Microsoft Exchange Server that could potentially allow an attacker to elevate privileges in specific scenarios. The vulnerability, identified as CVE-2026-96940, has …
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes Read More »
A member of the digital extortion group ShinyHunters, known online as “Rey,” has reportedly been arrested in Jordan. According to Reuters, the individual, whose real name is Saif al-Din Khader, was taken into custody on September 29, 2026. He is …
By Ravie Lakshmanan | Oct 03, 2026 Cyber Espionage / Artificial Intelligence The U.K.’s domestic intelligence and security agency has issued a warning regarding the involvement of more than 100 academics in aiding China’s intelligence gathering efforts for the Chinese …
MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics Read More »
