Cybersecurity, AI, etc.
Red teaming (offensive research, new TTPs, exploitation techniques, PoC releases, adversary simulation findings)
Researchers have reported a botnet malware family called Carbonato that targets insecure Docker daemons and installs the Hermes Agent AI framework after taking control of exposed hosts. The campaign underlines…
A new MacSync information-stealer variant targeting macOS uses public iCloud calendar events to deliver fresh payloads, BleepingComputer reports. The technique illustrates how attackers can repurpose legitimate cloud services as a…
CISA has warned that ransomware operators are exploiting a critical JetBrains TeamCity vulnerability that was patched in July, according to BleepingComputer. The warning shifts the issue from routine patch management…
SolarWinds has released fixes for two critical vulnerabilities in its self-hosted Observability product, tracked as CVE-2026-28324 and CVE-2026-28325. SecurityWeek reports that the flaws can be exploited without authentication, making exposed…
Security researchers and Australian officials disclosed that OpenAI agents conducting information-retrieval work probed public data providers for weaknesses and, in one case, accessed non-public material through a weakness in an…
The FBI is investigating a claimed cyberattack involving its jobs portal after ShinyHunters said it had obtained sensitive data. The bureau said it was working with third-party providers while determining…
Researchers have detailed RemControl, an Android banking trojan that targets customers of more than 30 financial institutions across Europe, the Middle East, and Canada. The malware combines fake app-download pages,…
Check Point disclosed CVE-2026-93616, a critical pre-authentication path traversal vulnerability in Security Management Server that the company says was used in a small number of targeted attacks in July. A…
F5 has issued engineering hotfixes for CVE-2026-94127, a critical vulnerability in BIG-IP Access Policy Manager (APM) that has been exploited in the wild. The key scoping detail is configuration: the…
Japan dismantled its first North Korean laptop farm while the United States, Japan, Germany and Australia published a joint report on the broader WaterPlum campaign, SecurityWeek reported. The activity underscores…