Collaborate Disseminate
Threat actors have been observed exploiting a recently disclosed critical security flaw impacting BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) products to conduct a wide range of malicious actions, including deploying VShell and&n… Continue reading BeyondTrust Flaw Used for Web Shells, Backdoors, and Data Exfiltration
In yet another software supply chain attack, the open-source, artificial intelligence (AI)-powered coding assistant Cline CLI was updated to stealthily install OpenClaw, a self-hosted autonomous AI agent that has become exceedingly popular in the past … Continue reading Cline CLI 2.3.0 Supply Chain Attack Installed OpenClaw on Developer Systems
Cybersecurity researchers have disclosed details of a new ClickFix campaign that abuses compromised legitimate sites to deliver a previously undocumented remote access trojan (RAT) called MIMICRAT (aka AstarionRAT).
“The campaign demonstrates a high le… Continue reading ClickFix Campaign Abuses Compromised Sites to Deploy MIMICRAT Malware
With one in three cyber-attacks now involving compromised employee accounts, insurers and regulators are placing far greater emphasis on identity posture when assessing cyber risk.
For many organizations, however, these assessments remain largely… Continue reading Identity Cyber Scores: The New Metric Shaping Cyber Insurance in 2026
A 29-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for his role in facilitating North Korea’s fraudulent information technology (IT) worker scheme.
In November 2025, Oleksandr “Alexander” Didenko pleaded guilty to w… Continue reading Ukrainian National Sentenced to 5 Years in North Korea IT Worker Fraud Case
The U.S. Federal Bureau of Investigation (FBI) has warned of an increase in ATM jackpotting incidents across the country, leading to losses of more than $20 million in 2025.
The agency said 1,900 ATM jackpotting incidents have been reported since 2020,… Continue reading FBI Reports 1,900 ATM Jackpotting Incidents Since 2020, $20M Lost in 2025
Two former Google engineers and one of their husbands have been indicted in the U.S. for allegedly committing trade secret theft from the search giant and other tech firms and transferring the information to unauthorized locations, including Iran.
Sama… Continue reading Three Former Google Engineers Indicted Over Trade Secret Transfers to Iran
Cybersecurity researchers have discovered what they say is the first Android malware that abuses Gemini, Google’s generative artificial intelligence (AI) chatbot, as part of its execution flow and achieves persistence.
The malware has been codenamed Pr… Continue reading PromptSpy Android Malware Abuses Gemini AI to Automate Recent-Apps Persistence
An international cybercrime operation against online scams has led to 651 arrests and recovered more than $4.3 million as part of an effort led by law enforcement agencies from 16 African countries.
The initiative, codenamed Operation Red Card 2.0, too… Continue reading INTERPOL Operation Red Card 2.0 Arrests 651 in African Cybercrime Crackdown
Microsoft has disclosed a now-patched security flaw in Windows Admin Center that could allow an attacker to escalate their privileges.
Windows Admin Center is a locally deployed, browser-based management tool set that lets users manage their Windows Cl… Continue reading Microsoft Patches CVE-2026-26119 Privilege Escalation in Windows Admin Center