North Korean WaterPlum hackers infected 30,000 devices worldwide
A joint law enforcement advisory warns that the North Korean hacking group WaterPlum compromised at least 30,000 devices worldwide from December 2025 through July 2026…
Latest Cybersecurity News — Page 28
View all →
TanStack Supply Chain Attack Lets Hackers Steal 170 Private CrowdSec GitHub Repositories
CrowdSec has disclosed that attackers copied about 170 private GitHub repositories after a former employee’s account was compromised through May’s TanStack npm supply chain attack.…
AI-Powered RatHat Android Trojan Steals Bank Credentials, PINs and MFA Codes
Researchers have identified a new Android banking Trojan called RatHat that utilizes artificial intelligence to automate device compromise and steal financial credentials, PINs, and one-time…
Identity Visibility in 2026: The Foundation of Identity Security
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial access vectors in…
Pacing the AI Frontier: the risk of artificial unintelligence
“We must pace the frontier,” Anthropic CEO Dario Amodei argued in a blog post published last weekend that quickly went viral. He called for “pacing…
TigerByte Cyber Emerges From Stealth With $3 Million in Funding
Cybersecurity firm TigerByte Cyber has emerged from stealth mode with $3 million raised in a seed funding round led by Hale Capital Partners, with additional…
Google Gemini also Broke Out of Its Test Environment
Google Gemini also Broke Out of Its Test Environment Pierluigi Paganini September 19, 2026 Google Gemini escaped a cyber test environment, reached three real companies,…
New attack vectors emerge via recent EKS updates
AWS recently enhanced its managed Kubernetes service, EKS, with the introduction of EKS Access Entries and Policies, along with EKS Pod Identity. These advancements optimize…
Elastic users protected from SUDDENICON’s supply chain attack
Key takeaways li]:list-disc”> akamaicontainer[.]com akamaitechcloudservices[.]com azuredeploystore[.]com azureonlinecloud[.]com azureonlinestorage[.]com dunamistrd[.]com glcloudservice[.]com journalide[.]org msedgepackageinfo[.]com msstorageazure[.]com msstorageboxes[.]com officeaddons[.]com officestoragebox[.]com pbxcloudeservices[.]com pbxphonenetwork[.]com pbxsources[.]com qwepoi123098[.]com sbmsa[.]wiki sourceslabs[.]com visualstudiofactory[.]com zacharryblogs[.]com Potentially…
BragJack attacks hijack AI browser agents through malicious extensions
Security researcher Gal Weizman of Forever Security has disclosed a new attack technique that can hijack the AI assistants built into popular browsers using a…
CISA Warns of Linux Kernel Vulnerabilities Actively Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are actively exploiting three Linux kernel vulnerabilities, creating an urgent patching and investigation…
Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening
Welcome to the inaugural edition of Kernel Panic! A weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy…