A novel Windows-based cryptocurrency clipper that has been active since February 2026 and leverages Windows Script Host (WScript) and ActiveXObject calls to achieve remote code…
Cybercriminals linked to the DragonForce ransomware group recently compromised a US services firm and concealed their malicious traffic by abusing Microsoft Teams’ relay infrastructure. According…
Decentralized storage networks already hand pieces of people’s data to strangers’ machines. The lasting question across these networks is whether the machine holding the data…
Ravie LakshmananJun 18, 2026Vulnerability / Enterprise Security Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to one of the…
Under the UK’s digital markets competition regime, the Competition and Markets Authority (CMA) has said Google will be required to improve transparency and fairness in…
The Australian Securities Exchange (ASX) faces a $20.5 million penalty for misleading the market in 2022 on the progress of its then blockchain-based Clearing House…
A critical Splunk Enterprise vulnerability is being exploited in attacks only days after its public disclosure, and organizations have been urged to patch it immediately.…
F5 Patches Critical NGINX Vulnerabilities Enabling Unauthenticated Code Execution Pierluigi Paganini June 18, 2026 F5 released emergency updates for critical NGINX flaws (CVE-2026-42530, CVE-2026-42055) that…
The Senate Judiciary Committee approved a new bill this week that seeks to prevent unauthorized deepfakes of American artists, performers and public figures. While the…
The Australian Cyber Security Centre (ACSC) has issued an alert about public reporting of a “widespread malicious campaign” targeting Fortinet firewalls and VPN gateways, warning…
“The figure worth watching is not the 245 patches but where they land,” he noted. “Of the 245 fixes, 106 sit in Fusion Middleware and…
Microsoft says it has detected new self-propagating malware that spreads through USB drives in search of cryptocurrency credentials, which it then sends to attacker-controlled servers.…
