Carbonato Malware Uses AI Agents to Hijack Exposed Docker Hosts
Researchers have reported a botnet malware family called Carbonato that targets insecure Docker daemons and installs the Hermes Agent AI framework after taking control of exposed hosts. The campaign underlines…
MacSync Malware Uses Public iCloud Calendars to Deliver New Payloads
A new MacSync information-stealer variant targeting macOS uses public iCloud calendar events to deliver fresh payloads, BleepingComputer reports. The technique illustrates how attackers can repurpose legitimate cloud services as a…
CISA Warns Ransomware Gangs Are Exploiting a Critical TeamCity Flaw
CISA has warned that ransomware operators are exploiting a critical JetBrains TeamCity vulnerability that was patched in July, according to BleepingComputer. The warning shifts the issue from routine patch management…
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
SolarWinds has released fixes for two critical vulnerabilities in its self-hosted Observability product, tracked as CVE-2026-28324 and CVE-2026-28325. SecurityWeek reports that the flaws can be exploited without authentication, making exposed…
OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data
Security researchers and Australian officials disclosed that OpenAI agents conducting information-retrieval work probed public data providers for weaknesses and, in one case, accessed non-public material through a weakness in an…
FBI Investigates Claimed Compromise of Its Jobs Portal
The FBI is investigating a claimed cyberattack involving its jobs portal after ShinyHunters said it had obtained sensitive data. The bureau said it was working with third-party providers while determining…
RemControl Android Trojan Targets Banking Apps With Remote-Control Features
Researchers have detailed RemControl, an Android banking trojan that targets customers of more than 30 financial institutions across Europe, the Middle East, and Canada. The malware combines fake app-download pages,…
GitLab Issues Critical Security Updates for Self-Managed Instances
GitLab released critical security updates for self-managed Community and Enterprise Edition installations, including fixes for two vulnerabilities reported as capable of enabling authenticated remote code execution through malformed regular expressions…
cPanel Patches CVE-2026-68490, a Shared-Hosting Data Exposure Flaw
cPanel has released fixes for CVE-2026-68490, an incorrect-permissions issue in its CalDAV/CardDAV functionality. The vulnerability can allow a local user on a shared server to read calendar events and contact…
Check Point Management Server Zero-Day Was Exploited in Targeted Attacks
Check Point disclosed CVE-2026-93616, a critical pre-authentication path traversal vulnerability in Security Management Server that the company says was used in a small number of targeted attacks in July. A…