ShinyHunters successfully compromised a rival extortion gang’s dark web infrastructure in an unprecedented hostile takeover. This inter-gang attack demonstrates escalating conflicts within cybercrime ecosystems and raises questions about operational security among threat actors.
A critical remote code execution vulnerability in HEIF image-decoding libraries allows attackers to compromise systems through malicious image uploads. The flaw affects web applications, content management systems, and cloud platforms using HEIF processing.
North Korean threat actor Jade Sleet breached an Indian IT services provider deploying FLATROOF and ROOFDECK backdoors. The supply chain compromise threatens multiple downstream client organizations with unauthorized access through trusted vendor relationships.
Google’s Threat Analysis Group embedded an undercover analyst within TeamPCP, a supply-chain focused hacking collective, gaining unprecedented visibility into their attack methodologies, infrastructure, and targeting processes over several months of infiltration.
Agentic AI systems are rapidly proliferating across enterprises, but security frameworks haven’t kept pace. Security investors identify this billion-dollar gap as autonomous agents introduce novel attack vectors—prompt injection, privilege escalation, and data exfiltration—that traditional tools…
Attackers exploited the May 2024 TanStack npm supply chain attack to steal 170 private CrowdSec GitHub repositories through a compromised former employee account. The breach remained undetected for four months until stolen source code appeared on cybercrime forums in September.
Orkes Conductor workflow platform versions before 3.30.2 contain a critical pre-authentication RCE vulnerability (CVE-2026-58138, CVSS 9.8) actively exploited in the wild. No authentication required for complete system compromise. Immediate patching mandatory.
Researchers weaponized Claude AI to compromise OpenAI employee ChatGPT accounts via autonomous social engineering. The attack demonstrates how agentic AI systems can orchestrate sophisticated account takeovers that evade traditional security controls designed for human adversaries.
Microsoft releases security guidance emphasizing fundamental controls that materially reduce organizational risk. Focus on phishing-resistant MFA, privileged access hardening, exposure management, and endpoint protection demonstrates 99% risk reduction against common attack vectors.
Four Linux kernel privilege escalation vulnerabilities now have public exploits enabling local root access. Patches are available but unpatched systems face immediate risk. Security teams must prioritize kernel updates as functional exploit code significantly increases attack surface.