-
OpenSSL has released security updates addressing nine vulnerabilities that could allow remote attackers to crash QUIC, DTLS, CMS, CMP, and TLS-enabled applications through malformed network packets or cryptographic messages. The advisory dated August 2…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Threat actors behind ClearFake campaigns are using a newly identified loader, WordlistLoader, to deliver the Amatera Stealer to Windows systems. The loader disguises executable shellcode as sequences of ordinary English words, helping malware evade sta…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft confirmed that some customers were unable to use multiple features of Microsoft Teams. However, the company reported that monitoring indicated the disruption was largely under control. In a customer update posted at 7:26 a.m. IST on August 26…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
CISA’s latest red team assessment shows how common failures in Active Directory, cloud identity, and SOC processes can turn a phishing foothold into an enterprise-wide compromise. The August 25 advisory contrasts two critical-infrastructure organizatio…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Core Werewolf espionage cluster has introduced a previously undocumented remote access trojan dubbed CoreRAT in targeted attacks on Russian public-sector bodies and defense-industry organizations. The shift is notable because Core Werewolf, previou…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
WhatsApp has announced that over one billion people now use passkeys to secure their accounts, enhancing phishing-resistant authentication across one of the world’s largest messaging platforms. This update, revealed on August 25, introduces suppo…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ToxNetV2, an AArch64 Linux peer-to-peer botnet, integrates a large language model into its controller workflow to turn botnet and host telemetry into proposed operational actions. The implementation connects NVIDIA NIM-hosted z-ai/glm-5.2 model output …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A multi-agent AI framework, utilizing Hermes and OpenClaw agents, was employed to compromise government entities in Asia, stealing thousands of personnel records, cracking employee credentials, and establishing persistent access to state infrastructure…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A cluster of fraudulent websites impersonating Microsoft is using fake “security scans” to pressure victims into uninstalling antivirus products, disclosing personal and banking information, and granting remote access to their computers. The sites, bra…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ASOS has started notifying affected customers in the U.S. after detecting unauthorized access to accounts linked to login credentials obtained from outside its systems. According to a breach notification issued by ASOS US Sales LLC, unusual activity wa…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
