Collaborate Disseminate
Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) called ChainScript.
“ChainScript has appeared under multiple build names, including ComponentTask33, UpdateDigital, HostShared, and Orchid… Continue reading ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based “much smaller organization” in the information technology (IT) services industry, once again highlighting how the adversary continues to target de… Continue reading Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial access vectors in breach research, including Verizon’s annual Data Breach Investigations Report…. Continue reading Identity Visibility in 2026: The Foundation of Identity Security
Three researchers at the security firm Hacktron used Anthropic’s Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository.
The chain began with a… Continue reading Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability.
The vulnerability, tracked as CVE-2026-28326… Continue reading SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet.
The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated re… Continue reading Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
Google’s Gemini model has become the latest artificial intelligence (AI) system to access the internet and break into other companies during a cybersecurity evaluation. The development was first reported by The Wall Street Journal.
The incidents occur… Continue reading Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
An attacker copied about 170 of CrowdSec’s private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September 18.
The French security company had kept his GitHub access open. CrowdSec says his lap… Continue reading CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The vulnerabilities are list… Continue reading CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level of access on a machine.
Kernel maintainers have fixed all four over the past few weeks, so a system running an … Continue reading Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root