On May 20, GitHub confirmed that an employee’s device was compromised due to a poisoned VS Code extension, leading to attackers gaining access to approximately 3,800 internal repositories on the platform. The threat group responsible, TeamPCP (also known as UNC6780), …
î „Ravie Lakshmananî ‚May 19, 2026Malvertising / Mobile Security Cybersecurity researchers have revealed details about a new ad fraud and malvertising campaign named Trapdoor that specifically targets Android device users. The operation, as reported by HUMAN’s Satori Threat Intelligence and Research Team, …
Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps Read More »
To address the recent supply-chain incidents that affected OpenAI, Anthropic, and Meta, it is crucial to understand the vulnerabilities in the release pipelines and dependency hooks that were exploited. In a span of 50 days, four incidents highlighted the gaps …
227 Rome, Italy, May 15th, 2026, CyberNewswire Recent high-profile cases have shed light on the legal implications of VPN providers being compelled to hand over user connection records under government orders. RaccoonLine has published a detailed analysis of how subpoenas …
î „Ravie Lakshmananî ‚May 16, 2026Vulnerability / Website Security A significant security vulnerability affecting the Funnel Builder plugin for WordPress is currently being exploited to inject malicious JavaScript code into WooCommerce checkout pages, leading to the theft of payment data. The details …
Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimming Read More »
During an exclusive interview at RSAC 2026, Anthony Grieco, Cisco’s SVP and chief security and trust officer, discussed the increasing prevalence of rogue agent incidents within Cisco’s customer base. Grieco emphasized that these incidents are a significant concern, with authentication …
Agent authorization is broken — and authentication passing makes it worse Read More »
155 Rome, Italy, May 13th, 2026, CyberNewswire RaccoonLine, a decentralized VPN built on VLESS protocol and peer-to-peer node infrastructure, today published a technical explainer on VLESS protocol, covering how it works, why it resists deep packet inspection where other protocols …
î „Ravie Lakshmananî ‚May 13, 2026Vulnerability / Artificial Intelligence Microsoft has introduced MDASH, a cutting-edge artificial intelligence system aimed at automating the discovery and resolution of vulnerabilities on a large scale. The system, currently in a limited private preview, is known as …
Microsoft’s MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday Read More »
It is crucial to treat any development environment that has installed or imported one of the 172 compromised npm or PyPI packages published since May 11 as potentially compromised. The worm, as described in the StepSecurity blog, is capable of …
85 Dubai, UAE, May 11th, 2026, CyberNewswire Dubai-based OTT Cybersecurity LLC has introduced the Agent Trust Protocol (ATP), a revolutionary open cryptographic standard for verifying AI agent identity, scope, and actions. This protocol is set for submission to the IETF. …
