Acknowledgements: Special thanks to Adam Mooney and Jamie Dumas for their contributions to this investigation. Huntress analysts recently observed two incidents where a newer ransomware…
When a developer needs to create a cloud resource — a database, a storage bucket, or a virtual machine — they need credentials to authenticate…
A critical Next.js vulnerability, tracked as CVE-2026-94545, affects the Node.js ImageResponse implementation in the next/og package and could allow remote code execution by exploiting malicious…
Published: Wednesday, 23 September 2026 at 14:00 UTC Updated: Wednesday, 23 September 2026 at 14:00 UTC How many bugs have you missed because you didn’t…
A threat group best known for exploiting previously unknown flaws in WinRAR and Windows has switched to a much simpler method: an email link to…
Meta founder and CEO Mark Zuckerberg has gone to great lengths to hype the security of its new AI assistant, Muse, claiming it is “built…
A new variant of the macOS infostealer PamStealer is being distributed through a fake cryptocurrency wallet application, using a server-assisted decryption chain and Swift-based payload…
Shiba Inu has come a long way from its meme coin origins, building a huge following while expanding into an ecosystem that includes Shibarium, ShibaSwap…
The Cybercrime Magazine YouTube Channel received a Verification Badge this week. A black check mark (tick) now appears next to our name, which means that…
Check Point Software has released emergency fixes for a critical Check Point Management Server vulnerability (CVE-2026-93616) that has been exploited as far back as July…
Extortion group ShinyHunters is not afraid to make enemies. Now it claims to have breached the FBI. After reportedly taking over ransomware group Clop’s leak…
Swati KhandelwalSep 23, 2026Vulnerability / Web Security A flaw in cPanel’s CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as…
