Critical RabbitMQ bug exposes OAuth secrets to unauthenticated attackers
A high-severity flaw in RabbitMQ lets attackers steal OAuth secrets from the management interface without authentication.
The Latest
Ryuk ransomware operator pleads guilty in US federal court
An Armenian national admitted to deploying Ryuk ransomware on hundreds of corporate servers, collecting over $15 million in Bitcoin ransoms.
Memghost attack plants false memories in AI agents through a single email
Researchers discovered the MemGhost technique, which injects persistent false memories into AI agents via crafted email content, causing long-term manipulation…
Progress orders ShareFile customers to shut down storage zone servers
Progress Software told ShareFile customers to power down on-premises Storage Zone Controllers over an undisclosed security threat.
FBI seizes NetNut proxy platform behind 2-million-device popa botnet
The FBI seized domains tied to NetNut, a residential proxy service linked to a botnet of at least two million…
UK and EU formally blame Russian FSB for cyberattack on Poland’s power grid
The UK and EU formally attributed the December 2025 cyberattack on Poland's power grid to Russia's FSB, issuing fresh sanctions…
Google and Microsoft pull ModHeader extension with 1.6 million installs
Google and Microsoft removed the ModHeader browser extension from their stores after discovering a dormant data collector in a March…
New GigaWiper backdoor bundles disk wiping, fake ransomware, and spyware
Microsoft uncovered GigaWiper, a destructive Windows backdoor combining disk-wiping, fake ransomware, and espionage capabilities in a single payload.
CrashStealer macOS Malware Evades Gatekeeper Using Notarized Dropper
Jamf Threat Labs discovers new macOS stealer using signed and notarized dropper to bypass Gatekeeper protections
First agentic ransomware autonomously hacks network and demands payment
Sysdig documents the first confirmed agentic ransomware operation to autonomously complete the full attack chain.
Microsoft patches record 622 flaws including two zero-days under attack
July 2026 Patch Tuesday sets a new record with 622 fixes, including two privilege escalation zero-days in SharePoint Server and AD FS exploited in active attacks.
Exposed server reveals WP-SHELLSTORM backdooring thousands of WordPress sites
WP-SHELLSTORM crew exposed after leaving server open, revealing 1.4M site targets and mass webshell operations
Claude for Chrome flaw lets other extensions read Gmail and Google Docs
Two unpatched Claude for Chrome flaws let rogue extensions forge clicks that access Gmail, Docs, and Calendar data.
Jailbroken Google Gemini spun up new C2 server for Russian fraudster in six minutes
A jailbroken Gemini AI performed 90% of a Russian fraudster's botnet operation including spinning up a C2 server in six…
Spotlight
AsyncAPI npm packages with millions of weekly downloads compromised via GitHub actions
Five AsyncAPI npm packages with 2.9 million weekly downloads were trojanized after a GitHub Actions token theft.
Hackers spoofed 3.7 million OAuth client ids to enumerate entra ID users
Attackers used 3.7 million spoofed OAuth client IDs to enumerate Entra ID user accounts and map application ecosystems.
LabubaRAT masquerades as NVIDIA software to control Windows hosts
A new Rust-based RAT called LabubaRAT disguises itself as NVIDIA software and supports multi-channel C2 communications.
German textile firm files for insolvency after cyberattack shut production for six weeks
German manufacturer ZEGO-TVZ filed for insolvency after a March cyberattack halted production for nearly six weeks.
Features
Grok build uploads entire git repositories to xAI cloud storage
Grok Build CLI caught uploading entire Git repositories to xAI cloud storage exposing secrets
Popa botnet linked to NetNut residential proxy service infects millions of Android TV boxes
FBI identifies Popa Android botnet infecting millions of TV boxes through NetNut residential proxy service
Chinese espionage group exploits Roundcube flaws to target US and Canadian universities
Chinese espionage group exploits Roundcube webmail vulnerabilities to target US and Canadian universities
BitLocker zero-day lets attackers bypass full disk encryption on Windows systems
Windows BitLocker zero-day CVE-2026-50661 lets attackers bypass full disk encryption with physical access
US sanctions First VPN Service for enabling ransomware groups
US Treasury sanctions First VPN Service for enabling ransomware groups in historic first
Fortinet patches seven vulnerabilities including critical FortiSandbox VNC flaw
Fortinet patches seven vulnerabilities including a critical FortiSandbox VNC exposure flaw
