New XCSSET variant targets macOS devs via compromised Xcode projects
A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories. Xcode is the official software development…
Month: August 2026
AI agents hacking – IT Security Guru
Just days after OpenAI disclosed that one of its security research agents had escaped a testing sandbox by exploiting a previously unknown vulnerability, Anthropic revealed…
Landmark Deal Would Officially Add Laser Weapons to US Army Arsenal
They stuffed a real-life ray gun into a 747 to shoot down ballistic missiles and stuck a laser on top of a Humvee to zap…
DarkSword Server Combines iPhone Exploits With Fake Apple ID Login Page
DarkSword’s leaked iOS exploit chain is now powering a fast‑moving server cluster that marries one‑click Safari exploitation with a convincing fake Apple ID login page,…
Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages
A fast-moving software supply-chain attack has compromised Keyv and hundreds of other npm packages, exposing developer workstations and continuous integration systems to credential-stealing malware. Aikido…
AI developers targeted via trojanized GitHub repositories
Cybercriminals are cloning popular GitHub repositories for AI tools and developer resources to distribute an infostealer, according to Netskope Threat Labs. (Source: Netskope) Netskope came…
Online backlash ends in Google rolling back Google Earth AI tool after a day
Google has walked back an AI feature that allowed users to generate artificial images inside Google Earth, after a predictable flurry of deepfakes. Google switched…
Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber…
ADNOC shifts AI strategy from isolated pilots to enterprise-wide operations
Artificial intelligence (AI) is becoming deeply embedded in ADNOC’s operations as the Abu Dhabi energy company accelerates its ambition to become “the world’s most AI-enabled…
Purpose-built IaaS presents new revenue opportunities for service providers
For decades, tool sprawl, complexity and excessive costs have held back MSPs. However, a unified IaaS solution purpose-built for MSPs aims to overcome these challenges…
Black Hat USA 2026 – Summary of Vendor Announcements (Part 2)
Many companies are showcasing their cybersecurity products and services this week at the 2026 edition of the Black Hat conference in Las Vegas. To help…
INC Ransomware is Calling Victims
INC Ransomware is Calling Victims – Pressure Tactics Post SonicWall Zero-Day Exploit Pierluigi Paganini August 04, 2026 INC Ransomware exploits SonicWall SMA 1000 flaws, using…