A TLS certificate misconfiguration exposed North Korea’s Hangro VPN infrastructure across servers in North Korea and Russia. The certificate revealed internal IP addresses and domains used by officials, providing rare intelligence into the isolated nation’s network infrastructure.
ShinyHunters successfully compromised a rival extortion gang’s dark web infrastructure in an unprecedented hostile takeover. This inter-gang attack demonstrates escalating conflicts within cybercrime ecosystems and raises questions about operational security among threat actors.
A critical remote code execution vulnerability in HEIF image-decoding libraries allows attackers to compromise systems through malicious image uploads. The flaw affects web applications, content management systems, and cloud platforms using HEIF processing.
Google’s Threat Analysis Group embedded an undercover analyst within TeamPCP, a supply-chain focused hacking collective, gaining unprecedented visibility into their attack methodologies, infrastructure, and targeting processes over several months of infiltration.
Agentic AI systems are rapidly proliferating across enterprises, but security frameworks haven’t kept pace. Security investors identify this billion-dollar gap as autonomous agents introduce novel attack vectors—prompt injection, privilege escalation, and data exfiltration—that traditional tools…
Attackers exploited the May 2024 TanStack npm supply chain attack to steal 170 private CrowdSec GitHub repositories through a compromised former employee account. The breach remained undetected for four months until stolen source code appeared on cybercrime forums in September.
Orkes Conductor workflow platform versions before 3.30.2 contain a critical pre-authentication RCE vulnerability (CVE-2026-58138, CVSS 9.8) actively exploited in the wild. No authentication required for complete system compromise. Immediate patching mandatory.
Microsoft releases security guidance emphasizing fundamental controls that materially reduce organizational risk. Focus on phishing-resistant MFA, privileged access hardening, exposure management, and endpoint protection demonstrates 99% risk reduction against common attack vectors.
Four Linux kernel privilege escalation vulnerabilities now have public exploits enabling local root access. Patches are available but unpatched systems face immediate risk. Security teams must prioritize kernel updates as functional exploit code significantly increases attack surface.
RatHat, a sophisticated Android trojan discovered in early 2024, weaponizes Android’s accessibility services to execute automated attacks on mobile devices. This malware leverages AI-driven automation to perform overlay attacks, credential theft, SMS interception, and remote control operations witho