-
CrowdStrike and Deloitte Spain announced an expanded cybersecurity alliance. This new phase of their collaboration focuses on AI-powered risk advisory. The partnership integrates executive security strategy with the implementation and day-to-day operat…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Ubuntu has published fixes for CVE-2026-98432, a critical Linux kernel flaw in IPv4 TCP connection handling. It carries a CVSS 3.1 score of 9.8 and can lead to remote code execution. The fixes for Ubuntu 22.04 LTS and newer are in the -proposed pocket,…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers Exploit DLL Sideloading in Signed OpenAI and Anthropic Binaries to Deploy YobaLoader Malware
A campaign tracked as Yoba abuses interest in generative AI to push cryptocurrency-mining malware through fake GitHub projects. Check Point Research published its findings on October 27, 2026, after about two months of tracking. The operators pair legi…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Attackers exploited the critical StyleSmuggler vulnerability in Magento and Adobe Commerce to deploy PSK Agent, a remote access trojan enabling command execution, traffic proxying, and persistent server access. The campaign ran September 9–13, 2026, ta…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Linux kernel flaw that sat unnoticed for nearly five years can let an unprivileged local user take full root control of a system. Tracked as CVE-2026-31695, the bug was found and fixed by researcher Alexander Popov. He has now published a working exp…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
DarkBlinders has compromised a high-profile Israeli individual associated with the security sector and a government cloud environment in Iraqi Kurdistan, combining credential phishing, a fake meeting application, and GitHub-based backdoors. Dream Secur…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google has announced a $250,000 reward, called the “Root-in-Cloud” program, for researchers who can demonstrate complete administrative takeover of arbitrary Google Cloud projects or organizations without prior access. Google announced the …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
IBM has disclosed seven vulnerabilities in Langflow OSS, including critical flaws such as authentication bypass and code injection that attackers can exploit remotely without credentials. The bulletin addresses Langflow versions 1.0.0 through 1.12.8 an…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A campaign by the BITTER threat group that delivers a custom remote access trojan (RAT) called PapRAT to South Asian organizations. FortiGuard attributes the activity to the group with high confidence, based on lure filenames, command-and-control (C2) …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google Dismantles XCPE Botnet That Infected 1.3 Million Android TV Devices With Preinstalled Malware
Google and industry partners have dismantled the XCPE botnet. This firmware-level backdoor enrolled more than 1.3 million Android set-top boxes. Google Threat Intelligence Group (GTIG) assesses with high confidence that Android OEM and ODM Videostrong …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶