Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
The FBI is investigating a claimed cyberattack involving its jobs portal after ShinyHunters said it had obtained sensitive data. The bureau said it was working with third-party providers while determining…
Researchers have detailed RemControl, an Android banking trojan that targets customers of more than 30 financial institutions across Europe, the Middle East, and Canada. The malware combines fake app-download pages,…
GitLab released critical security updates for self-managed Community and Enterprise Edition installations, including fixes for two vulnerabilities reported as capable of enabling authenticated remote code execution through malformed regular expressions…
cPanel has released fixes for CVE-2026-68490, an incorrect-permissions issue in its CalDAV/CardDAV functionality. The vulnerability can allow a local user on a shared server to read calendar events and contact…
Check Point disclosed CVE-2026-93616, a critical pre-authentication path traversal vulnerability in Security Management Server that the company says was used in a small number of targeted attacks in July. A…
F5 has issued engineering hotfixes for CVE-2026-94127, a critical vulnerability in BIG-IP Access Policy Manager (APM) that has been exploited in the wild. The key scoping detail is configuration: the…
Japan dismantled its first North Korean laptop farm while the United States, Japan, Germany and Australia published a joint report on the broader WaterPlum campaign, SecurityWeek reported. The activity underscores…
Attackers used a compromised BigCommerce application key held by Ribon to access customer data, according to SecurityWeek. The incident highlights the access risk created when third-party applications hold broad or…
A malicious npm package named indexed-btree, presented as the legitimate sorted-btree package, accumulated millions of downloads, SecurityWeek reported. The package reportedly hid a malware trigger in a prototype method. Development…
A Chinese threat actor has targeted vulnerable Zyxel GS1900 switches worldwide for sensitive-information exfiltration, SecurityWeek reported. The activity follows reporting on active exploitation of a flaw affecting the switch line.…