Collaborate Disseminate
Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection curve.
The operation has been attributed to a cyber espion… Continue reading Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection
Security teams have become exceptionally talented at finding vulnerabilities. Now, it’s time to turn our attention to optimizing the process for determining which of those vulnerabilities actually create a path to compromise.
A critical vulnerability … Continue reading Your Critical Vulnerabilities Might Not Be Your Biggest Risk
Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted servers and plant backdoors, cloud security company Wiz said in a report.
Wiz saw the atta… Continue reading Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors
A China-linked hacking group exploited a flaw in Sogou Input Method, one of the most widely used tools for typing Chinese characters on Windows, to install a backdoor on victims’ computers, security company Gen Digital said in research published T… Continue reading China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor
PaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches that were pushed to address two security flaws that have come under active exploitation.
The software development company said Pa… Continue reading PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws
Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC) vulnerabilities.
The attacks leverage CVE-2026-20079 (CVSS score:… Continue reading Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware
A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?”
An extension asks for access and takes too much. A trusted service becomes part of a phishing chain. An old bug still gets results. An expo… Continue reading ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories
Bad actors are misusing Google Play’s Early Access program to push deceptive apps that claim to offer money, rewards, casino winnings, and premium content.
Early Access apps are apps that haven’t been released on the official Android app marketplace. … Continue reading Google Play Early Access Abused to Push Thousands of Deceptive Android Apps
Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The company says both could allow an unauthenticated remote attacker to run code, but only “under specific conditions” that it… Continue reading Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE
A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence (AI) to devise exploits targeting a recently disclosed pair of security flaws in PaperCut NG/MF and break into hundreds of instances.
According to indep… Continue reading PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances