Two New Reports Offer Competing Explanations for Cybersecurity’s Growing Crisis
Two reports offer differing viewpoints. One suggests a failure of tools to provide what security teams really need. The other suggests the tools exist but…
Month: June 2026
Instagram Account Hijacks Expose the Security Risks of AI-Powered Support
Instagram Account Hijacks Expose the Security Risks of AI-Powered Support Pierluigi Paganini June 02, 2026 Attackers exploited Meta’s AI support chatbot to reset Instagram passwords…
Dozens of Red Hat npm packages targeted in supply chain attack
Researchers said a variant of the Mini Shai-Hulud is involved in the compromise. Source link
Trump administration releases scaled-back AI executive order
The Trump administration issued a revised executive order Tuesday focused on artificial intelligence, offering a significantly pared-back vision for the federal government’s role vetting AI…
Infected Red Hat npm packages expose developer credentials
The campaign, which Wiz researchers are tracking as Miasma, is thought to be the latest evolution of Shai-Hulud, a self-propagating malware family that has repeatedly…
LABScon25 Replay | Gamaredon x Turla: Unveiling a 2025 Espionage Alliance Targeting Ukraine
In this LABScon 25 presentation, ESET researchers Matthieu Faou and Zoltán Rusnák present the first technical evidence that Gamaredon actively facilitated Turla’s access to high-value…
Discovering a Ransomware Remedy in the Wild
Within the ThreatOps department at Huntress, we actively hunt for malware and adversary activity. We look for persistent footholds: the tell-tale sign and smoking gun…
CISA flags two-year-old Oracle flaw as actively exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to secure their systems against a high-severity Oracle WebLogic Server vulnerability that was…
CISA Warns of Oracle WebLogic Server Vulnerability Exploited in Attacks
CISA has issued a fresh warning highlighting active exploitation of a critical Oracle WebLogic Server vulnerability, tracked as CVE-2024-21182, adding it to its Known Exploited…
The Manhattan Institute Helped Kill DEI. Now It’s Coming for Protests
A right-wing think tank responsible for the emergence of zero-tolerance policing in 1990s New York City and the Trump administration’s scorched-earth campaign against “diversity, equality…
Stolen Gemini API Keys Fuel Automated Telegram Influence Campaign
A long-running Telegram influence and fraud campaign where a solo threat actor leveraged stolen Google Gemini API keys and jailbroken AI to automate content generation,…
New WordPress Malware Uses Steam Profile Comments to Hide C2 Instructions
A new WordPress malware campaign has been found using an unusual hiding place for its command instructions: Steam Community profile comments. According to research published…