Trojanized Pyrogram Forks Unleash Backdoor on Telegram Bot Servers
A campaign dubbed 'Operation Navy Ghost' has been distributing trojanized Pyrogram packages on PyPI since November 2025, giving attackers remote code execution on compromised Telegram bot servers.
The Latest
Inside the BEC Ecosystem: How Organized Crime Drives Email Fraud
BEC is a multistage operation involving reconnaissance, AI powered scams, underground call centers, and mule networks that defenders must understand…
AI Hallucinated Domains Become a New Vector for Phishing Attacks
Attackers are registering fake web addresses hallucinated by AI models before anyone else can, then using them to host phishing…
Android Developer Verification Mandate Takes Effect in Four Countries This September
Android devices in four countries will block standard installations of apps from unverified developers starting September 30, 2026, pushing open…
New Permanent SecureROM Exploit Targets Apple A12 and A13 Chips
The usbliter8 exploit achieves permanent arbitrary code execution inside Apple A12 and A13 SecureROM by exploiting a hardware flaw in…
Microsoft Teams Gains Bot Detection to Curb Unwanted Meeting Access
Microsoft Teams now detects and segregates unknown bots in the meeting lobby, giving organizers clearer visibility and control over automated…
SystemBC Malware Enables Stealthy C2 Tunneling and Persistent Access
SystemBC malware turns victim computers into stealthy traffic tunnels, enabling ransomware groups to maintain persistent access and evade detection through…
GuardFall Attack Bypasses Safety Filters in Popular AI Coding Tools
GuardFall exploits a decades-old shell parsing trick to bypass safety filters in open-source AI coding agents, affecting ten out of…
Study Finds 282 iOS Apps Expose AI API Keys Through Network Traffic
Researchers found that 282 of 444 iOS AI apps leaked credentials through network traffic, with only 28 percent of developers…
SEO Poisoning Attack via Bing Leads to Akira Ransomware Deployment
Attackers manipulated Bing search results to deliver a trojanized ManageEngine OpManager installer, leading to network wide encryption by Akira ransomware…
Chrome Session Cookie Theft via Malicious Extension Bypasses MFA
Attackers are abusing Chrome Native Messaging to deploy a malicious extension that steals session cookies and bypasses MFA protections.
Japanese Telecom Giant Reveals Breach Affecting 14.2 Million Email Accounts
The breach exposed email addresses and passwords for up to 14.22 million customers across six Japanese ISPs, though some passwords…
Kali Linux 2026.2 Expands Toolset With Nine New Additions And NetHunter Upgrades
The new release cuts VM boot times by three times while adding tools for credential brute forcing and social media…
AI Browsers Manipulated into Handing Over Credentials via Gamified Attack
Researchers found a technique that tricks AI browsers into treating credential theft as a game objective, bypassing safety controls.
Spotlight
Deceptive AI Skill Evades Security Scanners to Reach Thousands of Agents
Security researchers demonstrated that AI agent skills can bypass multiple scanners by hosting malicious instructions on external websites that are only fetched after the skill passes initial review.
Blackfield Ransomware Group Hits Japanese Motor Giant Nidec’s Taiwanese Subsidiary
Blackfield ransomware demands $2 million from Nidec Corporation after compromising its Taiwanese subsidiary, threatening to leak stolen data if payment is not made.
Salesforce Disables Klue App After OAuth Token Theft Leads to Data Exposure
Salesforce disabled Klue's app integration after attackers used a legacy credential to steal OAuth tokens and extract CRM data from multiple customer environments.
GitHub Advisory Database Overwhelmed by Record Surge in Vulnerability Reports
GitHub's advisory database hit a record 1,560 advisories in May 2026, but review delays now stretch to weeks due to an overwhelming surge in vulnerability submissions.
Features
Dutch Cybersecurity Startup Eye Security Raises €60 Million in Series C Funding
The Hague-based Eye Security secured €60 million in Series C funding led by Sofina to fuel European expansion and AI-powered…
Nissan Employee Data Exposed in Oracle PeopleSoft Zero-Day Attack
Nissan Americas confirmed a data breach after attackers exploited CVE-2026-35273 in Oracle PeopleSoft, exposing employee data across four countries.
C++ Rewrite Fuels Global Surge in Millenium RAT Infections
The latest version of this malware is harder to detect and spreads through disguised files and a Telegram based command…
Google Patches Critical Sandbox Escape Flaws in Chrome 149
Google's latest Chrome update fixes 18 vulnerabilities, including two critical WebGL use-after-free bugs that could allow sandbox escape attacks.
119 Edge Extensions Hidden Stego Malware Reaches 2.6 Million Installs
Microsoft discovered 119 malicious Edge extensions using steganography and selective activation to steal credentials and session cookies from 2.6 million…
U.S. State Department Offers $10 Million Reward for Russian Hacker Groups Targeting Encrypted Messaging Apps
The bounty targets UNC5792 and UNC4221, groups linked to Russia's FSB and military that have compromised thousands of messaging app…
