Collaborate Disseminate
A new White House memo signed by U.S. President Donald Trump has instructed the National Coordination Center (NCC) to establish a program that would allow private sector companies to take advantage of their “innovative capabilities” to break into forei… Continue reading Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groups
The China-linked threat actor known as Jewelbug has been observed carrying out cyber espionage operations targeting governments and militaries, while simultaneously engaging in cryptocurrency fraud.
“Both missions are administered from a single contro… Continue reading China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud
A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr.
The vulnerability, which has yet to be assigned a CVE identifier, is an SQL injection vulnerability in the open-source platform that can lead to remote … Continue reading GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE
Some weeks have one big security story. Others bring many smaller updates that are easy to miss but still matter. This week has plenty of them, covering cloud services, AI tools, malware, data breaches, scams, and new attack methods.
The latest Threat… Continue reading ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories
Afghan telecom providers and South Asian critical infrastructure organizations have emerged as the target of a new ongoing campaign that delivers a previously undocumented backdoor called PATCHCORD.
According to Acronis Threat Research Unit (TRU), the… Continue reading New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure
Cybersecurity researchers have disclosed details of a new macOS-oriented, Rust-based information stealer called AmnesiaStealer that’s capable of hijacking Chromium web browsers to steal session data.
The multi-stage stealer is spread via a counterfeit… Continue reading AmnesiaStealer Hijacks Chromium Sessions to Give Attackers Live Browser Control on macOS
A previously unseen Android near field communication (NFC) relay malware family dubbed WindRelay is being deployed in conjunction with a known remote access trojan (RAT) called SpyNote as part of a contactless payment fraud scheme.
The purpose-built m… Continue reading WindRelay Android Malware Turns Victims’ Phones Into NFC Relays for Payment Fraud
Companies are used to thinking about attackers as outsiders trying to break in.
North Korean IT workers flip that model. They apply for jobs, pass interviews, receive legitimate credentials, and can end up inside the same systems companies spend milli… Continue reading North Korean Remote Workers Are Infiltrating Government and Businesses: How to Expose Them Before Hiring
Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code.
The vulnerability in question is CVE-2026-55040 (CVSS score: 9.1), which refers to a critical security fea… Continue reading Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a never-before-seen backdoor targeting defense and aerospace companies across … Continue reading Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor