Budget Android devices ship with preinstalled Midnight Mimosa malware that exploits MediaTek chipsets to enable silent app installation, ad fraud, and residential proxy abuse. This firmware-level supply chain compromise affects multiple manufacturers and cannot be removed through standard…
Nippon Columbia’s malware infection exposed 8.6M+ karaoke customer records including names, addresses, and contact details from Daiichi Kosho’s network. The incident demonstrates third-party risk in entertainment infrastructure and credential theft potential.
AnyDesk Linux versions up to 8.0.2 contain a critical unauthenticated remote code execution vulnerability allowing root access without user interaction. Proof-of-concept exploit available. Immediate upgrade to version 8.0.3 required for all deployments.
Cisco disclosed three critical NX-OS vulnerabilities affecting Nexus 3000 and 9000 switches. All three flaws score CVSS 9.8 and enable unauthenticated remote attackers to execute code with root privileges through the NGOAM feature. Patches available now.
CVE-2026-73570 enables unauthenticated command injection on Zimbra mail servers with confirmed active exploitation. Remote attackers execute arbitrary commands without authentication. Immediate patching and detection deployment required for internet-facing infrastructure.
31 malicious Chrome extensions disguised as VPN tools have compromised 356,000 users by routing browser traffic through attacker-controlled proxy servers. The extensions remain active and expose credentials, session tokens, and sensitive data to interception.
CARBONATO botnet exploits exposed Docker daemons to deploy AI agents that steal LLM API credentials. The threat self-funds operations through stolen keys, creating sustainable attack infrastructure. Organizations must secure Docker configurations and monitor API usage.
North Korean threat actor Jade Sleet breached an Indian IT services provider deploying FLATROOF and ROOFDECK backdoors. The supply chain compromise threatens multiple downstream client organizations with unauthorized access through trusted vendor relationships.
Google’s Threat Analysis Group embedded an undercover analyst within TeamPCP, a supply-chain focused hacking collective, gaining unprecedented visibility into their attack methodologies, infrastructure, and targeting processes over several months of infiltration.
RatHat, a sophisticated Android trojan discovered in early 2024, weaponizes Android’s accessibility services to execute automated attacks on mobile devices. This malware leverages AI-driven automation to perform overlay attacks, credential theft, SMS interception, and remote control operations witho