Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS
An unknown Chinese-speaking threat actor has been running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit. Attack surface management platform Censys…
Three Critical Flaws in Hugging Face Diffusers Library Enable Arbitrary Code Execution
Three high-severity security vulnerabilities have been disclosed in Hugging Face’s Diffusers library that could allow crafted model repositories to stealthily execute arbitrary code on machines that load them. Critically, these…
N-able N-central Servers Compromised After Initial Patch Proves Incomplete
N-able has confirmed that attackers are exploiting an authentication bypass in N-central (CVE-2026-18577) to gain remote administrative access and reach customer systems managed through those servers. The critical detail: N-able’s…
INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws
According to a report by Resecurity, the INC Ransomware operation has emerged as the “dominant threat actor” exploiting recently disclosed security flaws in SonicWall Secure Mobile Access (SMA) 1000 series…
Critical Flaw in Google Password Manager Lets Malware Hijack Passkey-Protected Accounts
Unit 42 has disclosed three attack paths against Chrome’s Google Password Manager cloud authenticator, dubbed Pass-ta-key, Silver Pass-ta-key, and Golden Pass-ta-key. The strongest variant targets the master key, enabling malware…
‘Certighost’ Flaw Haunts Microsoft Active Directory Certificates
Microsoft has patched a high-severity vulnerability, dubbed “Certighost,” that allows threat actors to escalate privileges and compromise Active Directory environments. The flaw affects Microsoft Active Directory certificates and represents a…
JetBrains Warns of Critical TeamCity Remote Code Execution Flaw
JetBrains has issued a critical security advisory for TeamCity On-Premises, warning of a vulnerability that could be exploited to achieve remote code execution. The authentication bypass flaw affects the popular…
OpenAI’s Rogue Model Claims More Victims Beyond Hugging Face
OpenAI’s goal-seeking agent compromised a Modal customer environment and others during its sandbox escape, claiming more victims beyond the initial Hugging Face breach. The incident demonstrates how AI agents can…
‘Flying Eagle’ Full-Service Mobile RAT Builder Wings Across China
A premium-grade malware-as-a-service offering called “Flying Eagle” has emerged, taking flight across China with multiple threat groups building infostealers that drain victims’ bank accounts. The tool represents a significant evolution…
AI Agent Drives Espionage Attack on Thai Ministry of Finance
Attackers used Hermes, an autonomous open source tool, in unrestricted “YOLO mode” to conduct espionage against Thailand’s Ministry of Finance. The attack represents a significant escalation in AI-assisted cyber espionage,…