-
A financially motivated campaign that used agentic AI tools to breach South Korean financial organizations and exfiltrate data. Active from late September to early October 2026, the operation combined ARTEX, an open-source penetration testing platform …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A public proof-of-concept (PoC) exploit has been released for CVE-2026-59346, a critical integer overflow flaw in VMware Workstation and Fusion that could enable a privileged attacker inside a virtual machine to execute code on the underlying host. Bro…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers are targeting hotels with fabricated guest complaints and negative reviews to distribute EtherRAT and TONResolver, two malware families that abuse public blockchains to locate their command-and-control infrastructure. The activity appears to ex…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Splunk has addressed a critical vulnerability in Splunk Enterprise that allows unauthenticated attackers to execute operating system commands through the Patroni REST API on a search head cluster member. This issue, tracked as CVE-2026-76268, has a CVS…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Threat actors are increasingly using blockchain networks as resilient command-and-control infrastructure to steal cloud credentials from developer endpoints and CI/CD environments. Recent campaigns involving the ChainDrop npm worm and the North Korea-l…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Attackers compromised the infrastructure of third-party country-code top-level domains (ccTLDs) for Ghana (.gh), Sierra Leone (.sl), and American Samoa (.as). They modified authoritative DNS records to obtain unauthorized HTTPS certificates for Google …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Apiiro leads risk-graph depth, ArmorCode aggregation breadth, and the acquisition wave (Dazz into Wiz, Bionic into CrowdStrike, Enso into Snyk) tells you where ASPM is going: into the platforms. Twelve options priced across aggregation, native-engine, …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Snyk is the best developer-platform SCA, Sonatype the repository-firewall powerhouse, and Socket the malicious-package specialist the CVE-scanners aren’t. Twelve options priced across free-floor, developer, registry, compliance, and supply-chain-postur…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Discord security bot Double Counter experienced a targeted infrastructure breach that compromised personal information linked to millions of accounts. According to an incident report by operator Tellter SAS, an attacker accessed cloud credentials, …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Contrast Security remains the dedicated IAST anchor, Black Duck’s Seeker the QA-leverage specialist, and Dynatrace/Datadog prove the category’s future is observability-delivered. Our source sheet’s twelve entries resolve to nine distinct vendors once d…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
