-
Golden Chickens, tracked as TAG-195 and also known as Venom Spider, has launched four new modular malware families designed to enhance credential theft, browser session hijacking, and post-exploitation flexibility. The newly identified families TinyEgg…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
SourTrade turns the browser itself into a malware build system, deliberately sidestepping the industry’s reliance on hash-based file fingerprints and traditional network-centric detection. SourTrade has been active since late 2024, abusing programmatic…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
JetBrains has addressed a series of security vulnerabilities affecting IntelliJ IDEA and TeamCity, including several critical flaws that could allow code execution or unauthorized actions in development and continuous integration environments. The upda…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Origin Energy Limited has confirmed a cybersecurity incident involving unauthorized access to and disclosure of customer data, representing a significant data security event for one of Australia’s largest energy providers. The company identified the br…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Apache Syncope has released versions 4.1.24.1, 4.1.24.1.2, and 4.0.74.0.7 to address six security vulnerabilities affecting the 4.1, 4.0, and 3.0 release branches. These vulnerabilities include a self-service privilege escalation bug, multiple post-aut…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Adversaries are silently hijacking Microsoft 365 accounts by compromising hotel and conference-center Wi-Fi gateways and poisoning DNS no phishing emails, malicious attachments, or endpoint malware required. ReliaQuest assesses that the tradecraft clos…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google Chrome version 150.0.7871.186 has addressed four high-severity vulnerabilities that affect core browser components, including Codecs, WebMCP, Blink, and Input. While Google has not reported any evidence indicating that these vulnerabilities are …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A highly targeted Lampion malware campaign abusing localized phishing lures to compromise users in Portugal. The activity reflects a continued evolution of the Brazilian-origin banking trojan, first documented in 2019, which has consistently focused on…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly revealed sandbox escape vulnerability affecting Anthropic’s Claude Cowork could allow untrusted content processed by the AI agent to access sensitive files on a macOS host. This includes SSH private keys, cloud credentials, and other data that …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A comprehensive and proactive security posture is non-negotiable for organizations in 2026. With a rapidly evolving threat landscape and a global shortage of cybersecurity talent, relying on an internal team alone to provide round-the-clock protection …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
