A sophisticated Chinese APT group maintained unprecedented access to a target organization’s authentication infrastructure for ten years, allowing them to compromise an air-gapped network through hijacked authentication flows. The attackers embedded themselves so deeply within the identity and acces
A critical pre-authentication remote code execution (RCE) vulnerability chain has been discovered in Splunk Enterprise, allowing unauthenticated attackers to compromise systems and access sensitive database information. The exploit chain bypasses authentication mechanisms entirely, providing attacke
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Oracle PeopleSoft Enterprise PeopleTools to its Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation in the wild. The flaw, tracked as CVE-2022-21587, allows unauthenticated
Anthropic has immediately disabled access to its flagship AI models, Fable 5 and Mythos 5, for all users worldwide following a US government export control directive. The sudden shutdown affects millions of developers and enterprises who rely on these models for critical operations. The move highlig
The FBI has successfully dismantled a sophisticated China-based cybercrime network responsible for an estimated $1.9 billion in financial losses. This massive operation, conducted in coordination with international law enforcement agencies, disrupted a complex criminal infrastructure that targeted v
NanoClaw, an emerging package security platform, has partnered with JFrog to enhance software supply chain security. This collaboration integrates NanoClaw’s advanced threat detection capabilities with JFrog’s Artifactory repository management, providing developers with automated malicious package s
Google has released an emergency security update for Chrome to address CVE-2026-11645, a high-severity use-after-free vulnerability in the V8 JavaScript engine actively exploited in the wild. The zero-day affects all major platforms (Windows, macOS, Linux) and enables remote code execution through m
The U.S. government has mandated Anthropic to immediately suspend access to its advanced AI models, Fable 5 and Mythos 5, for foreign nationals. This unprecedented move highlights escalating concerns about AI capabilities being weaponized for cyber operations, disinformation campaigns, and potential
Over 400 packages in the Arch User Repository (AUR) were compromised in a sophisticated supply chain attack that deployed information-stealing malware and an eBPF-based rootkit. The attacker hijacked maintainer accounts and injected malicious code into build scripts, affecting thousands of users who
Iranian threat actor Handala successfully compromised a California water utility’s operational technology systems in a targeted cyberattack that demonstrated sophisticated knowledge of critical infrastructure vulnerabilities. While the breach resulted in limited operational disruption, the incident