The FBI has successfully dismantled a sophisticated China-based cybercrime network responsible for an estimated $1.9 billion in financial losses. This massive operation, conducted in coordination with international law enforcement agencies, disrupted a complex criminal infrastructure that targeted v
NanoClaw, an emerging package security platform, has partnered with JFrog to enhance software supply chain security. This collaboration integrates NanoClaw’s advanced threat detection capabilities with JFrog’s Artifactory repository management, providing developers with automated malicious package s
Google has released an emergency security update for Chrome to address CVE-2026-11645, a high-severity use-after-free vulnerability in the V8 JavaScript engine actively exploited in the wild. The zero-day affects all major platforms (Windows, macOS, Linux) and enables remote code execution through m
The U.S. government has mandated Anthropic to immediately suspend access to its advanced AI models, Fable 5 and Mythos 5, for foreign nationals. This unprecedented move highlights escalating concerns about AI capabilities being weaponized for cyber operations, disinformation campaigns, and potential
Over 400 packages in the Arch User Repository (AUR) were compromised in a sophisticated supply chain attack that deployed information-stealing malware and an eBPF-based rootkit. The attacker hijacked maintainer accounts and injected malicious code into build scripts, affecting thousands of users who
Iranian threat actor Handala successfully compromised a California water utility’s operational technology systems in a targeted cyberattack that demonstrated sophisticated knowledge of critical infrastructure vulnerabilities. While the breach resulted in limited operational disruption, the incident
A critical zero-day vulnerability in Oracle PeopleSoft has been actively exploited in the wild, affecting hundreds of organizations globally. Attackers leveraged this previously unknown flaw to exfiltrate gigabytes of sensitive data from enterprise systems, including HR records, financial informatio
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical path traversal vulnerability in Ivanti Sentry (CVE-2023-38035, CVSS 9.8) to its Known Exploited Vulnerabilities (KEV) catalog. Federal agencies must patch affected systems by June 14, 2024, following confirmed acti
Russian state-sponsored threat actor Fancy Bear (APT28) has been leveraging compromised Ubiquiti EdgeRouters and cloud infrastructure to conduct sophisticated, low-profile cyberattacks against high-value targets. The group exploits legacy router firmware vulnerabilities and misconfigured devices to
A coordinated international law enforcement operation involving US, French, and Italian authorities successfully dismantled a major deepfake pornography website that victimized thousands of individuals. The site used AI-powered tools to create non-consensual synthetic sexual content, generating sign