New EKS Access and Identity Features: A Security Analysis
On November 26 Amazon introduced EKS Pod Identity feature — a new way for cluster workloads to interact with cloud resources. About three weeks later…
Month: September 2026
Attack chain leads to XWORM and AGENTTESLA
Key Takeaways li]:list-disc”> C:WindowsMicrosoft.NETFrameworkv4.0.30319RegSvcs.exe C:WindowsMicrosoft.NETFrameworkv2.0.50727RegSvcs.exe C:WindowsMicrosoft.NETFrameworkv3.5Msbuild.exe These binaries are signed and trusted by the system and can evade detection by security software that relies on…
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation’s data leak site, defacing the Tor site and allegedly stealing server data and the…
BragJack Attack Lets Malicious Extensions Hijack AI Agents Across 5 Major Browsers
A new attack technique dubbed “BragJack” allows a malicious browser extension to seize trusted communication channels used by AI assistants in Chrome, Edge, Opera Neon,…
PowerShell Malware Abuses Registry and DNS TXT Records to Deploy XMRig Crypto Miner
A sophisticated cryptomining campaign is employing multiple layers of obfuscation to conceal malicious PowerShell payloads and ultimately deploy an XMRig-based cryptocurrency miner. This obfuscation includes…
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
Ravie LakshmananSep 19, 2026Vulnerability / Identity Security SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully…
Meta’s $18bn settlement shows why the UK must act on children’s social media harms
When one of the world’s most powerful technology companies agrees to pay up to $18bn over claims that its platforms harmed children, governments everywhere should…
MIND Secures $72 Million for AI-Powered DLP
Data loss prevention (DLP) startup MIND has announced raising $72 million in a Series B funding round that brings the total raised by the company…
AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum
AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum Pierluigi Paganini September 19, 2026 AI helped researchers exploit a Discourse flaw in under 72…
Wiz AI-SPM Extends to Microsoft Azure OpenAI Service Models
At Wiz, we want to help Microsoft Azure customers further accelerate GenAI adoption and empower data scientists to securely bring their AI applications to production…
Elastic publishes 2023 Global Threat Report Spring Edition
Last November, Elastic published our inaugural global threat report: a summary of threat trends, forecasts, and recommendations based on analyzing millions of telemetry events shared…
North Korean WaterPlum hackers infected 30,000 devices worldwide
A joint law enforcement advisory warns that the North Korean hacking group WaterPlum compromised at least 30,000 devices worldwide from December 2025 through July 2026…