WARMCOOKIE One Year Later: New Features and Fresh Insights
Revisiting WARMCOOKIE Elastic Security Labs continues to track developments in the WARMCOOKIE codebase, uncovering new infrastructure tied to the backdoor. Since our original post, we…
Month: September 2026
Artifactory flaws chained in attacks deploying backdoor malware
Threat actors are exploiting critical and high-severity vulnerabilities in JFrog Artifactory to bypass authentication, gain administrative privileges, and deploy a Rust backdoor on vulnerable self-hosted…
Russia-Aligned Hackers Use GuardBreaker Prompt Injection to Disrupt AI Malware Analysis
Russia-aligned operators are testing a new way to make artificial intelligence overlook malicious code. The technique, called GuardBreaker, hides a safety-sensitive request inside an otherwise…
Researchers Uncover 10,000+ Malware Loaders Behind YouTube and SEO Poisoning Campaign
A long-running pay-per-install (PPI) operation that used YouTube gaming channels and SEO-poisoned software downloads to distribute malware at scale. The cluster, tracked as CL-CRI-1171, is…
Digital Executive Protection: Agentic Powered External Identity Security
External identity is the personal data of executives, employees, and their families that attackers can find and exploit outside company systems. VanishID is tackling that exposure across…
IDScan confirms breach after 153 million driver’s licenses leak on dark web
Days after reports linked IDScan to a dark web database holding more than 153 million driver’s license scans, the identity verification company has confirmed hackers…
Crypto customers targeted by scammers after email marketing provider breach
An attacker breached an email marketing platform and launched targeted attacks against the newsletter subscribers of some of its customers, especially those working in cryptocurrency…
Claude Used to Automate Exploitation and Data Theft Across Multiple Victims
Ravie LakshmananSep 11, 2026Artificial Intelligence / Cyber Operations Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks,…
UK government to create team to validate Capita’s data on troubled pension scheme
The UK government is in the process of reducing its reliance on data from Capita in regard to the performance of the troubled civil service…
TCE Weekly Roundup: Iran Bounty, Airline Leak, ChatGPT Flaw
This weekly roundup covers a bounty offer targeting an alleged Iranian cyber official, a massive data-exposure incident affecting airline travelers, a breach of an education…
DFAT flags “multi-year investment” in its technology operations
Key points DFAT is planning a “multi-year investment” in its technology operations, according to signals from the department. Consultants will be engaged for a high-level…
In Other News: InjectEave Attack, SIM Swapper Sentenced, Glasswing Findings Review
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader…