Collaborate Disseminate
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild.
The vu… Continue reading CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises
Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part of a sophisticated, targeted software supply chain attack targeting Chin… Continue reading 18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users
Malware running as an ordinary user on a Windows machine can sign into a victim’s passkey-protected accounts without a fingerprint, a PIN, or anything at all appearing on the victim’s screen.
Unit 42 detailed three attack paths against Chrome’s Google… Continue reading Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts
The INC Ransomware operation has emerged as the “dominant threat actor” exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances.
In a report published over the weekend, Resecurity said it obs… Continue reading INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws
This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder around. Public systems, package feeds, hotel networks, and login flows all gave away more than intended.
Some of it was cle… Continue reading ⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks
AI is moving incredibly fast, and every security leader is feeling the pressure to keep up.
AI platforms like Claude, Codex and Cursor are already helping security teams write detections, investigate alerts, summarize incidents, and automate repetitiv… Continue reading FOMO in the SOC: Where AI Platforms like Claude Actually Fit
An unknown Chinese-threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit.
Attack surface management platform Censys said it identified the threat actor runnin… Continue reading Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS
The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web.
The data included names, organisations and work email addresses belonging to police officer… Continue reading PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web
Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification software that could allow data files to be altered before analysis software loads them.
The vendor’s July 31 security bulletin says nearly undetectable chang… Continue reading Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable
N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers.
Its first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 202… Continue reading N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete