Collaborate Disseminate
Cisco Talos found hackers using simple authorization claims to bypass AI guardrails, build DDoS attack tools, steal credentials and access live camera services. Continue reading “I’m Allowed”: Hackers Use Simple Claims to Bypass AI Guardrails
Brazil’s SISVISA health surveillance system left 102,215 files totaling 79GB open online, including tax IDs and identity documents, without password protection. Continue reading Brazil Health Surveillance Database Exposed 79GB of Sensitive Records
Shai-Hulud npm worm spreads through Keyv and hundreds of packages with 2 billion monthly downloads, stealing npm, GitHub, cloud and CI credentials in real time. Continue reading Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages
Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files. Continue reading Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software
A fake FIFA World Cup 2026 T-shirt giveaway scam is spreading Voidrift malware through personalized emails using company logos and trusted websites to bypass security filters. Continue reading Hackers Use Fake FIFA World Cup 2026 T-Shirt Offers to Spread Voidrift Malware
A new phishing-as-a-service (PHaaS) platform called Bluekit is letting cybercriminals steal user accounts using a tricky method. While… Continue reading Bluekit Phishing Kit Uses Browser-in-the-Middle Attacks to Evade Detection
Canadian hacktivist Aubrey Cottle, known as Kirtaner and once linked to Anonymous, gets 18 months for a 2021 Texas GOP website cyberattack. Continue reading Anonymous-Linked Hacktivist Aubrey Cottle Jailed Over Texas GOP Cyberattack
Woodgnat Hackers use Backdoor.Mistic, a stealthy RAT, to let brokers compromise networks and sell entry points to ransomware groups, putting firms at risk. Continue reading Woodgnat Hackers Use Mistic RAT to Broker Access for Ransomware Gangs
A macOS XPC flaw let regular users disable CrowdStrike and Kandji tools, exposing security gaps that vendors patched after XM Cyber reported the security issue. Continue reading macOS Flaw Allowed Standard Users to Disable CrowdStrike and Kandji Security Tools
GTA 6 scams are luring fans with fake early access, crypto payments and malware downloads. Learn why PC and Android gamers face the biggest risks online today. Continue reading Fake GTA 6 Early Access Websites Target Gamers with Malware and Crypto Scams