All Issues
130 issues published
Russian Intelligence Faked Support Texts to Steal Accounts
Ukraine and the FBI have exposed a Russian intelligence campaign using fake messaging support texts to steal credentials from officials, soldiers, and activists across Ukraine, Europe, and the US. Separately, researchers have demonstrated how a clean-looking GitHub repository can trick AI coding agents into running malware with no suspicious code in sight. Schools and universities are also under the microscope — third-party software breaches are hitting the education sector hard, and vendor risk management is no longer optional.
SharkLoader Is Hunting Diplomats Across 9 Countries
A newly uncovered malware campaign called StrikeShark is quietly compromising government agencies, diplomats, and software firms across at least nine countries using a loader that smuggles Cobalt Strike deep into infected systems. A high-severity flaw in Amazon Q Developer let a malicious repository hijack a developer's cloud credentials the moment the workspace was opened — Amazon has patched it, but unpatched extensions remain exposed. If you use Signal, Russian intelligence is after your backup recovery key — and the fix takes thirty seconds in Settings.
Hotels Are Getting Phished Through Booking Complaints
Hackers are targeting hotel front desks across Europe and Asia with fake guest complaint emails that quietly install a remote-access implant on reception computers. A critical vulnerability in industrial engineering software is now being actively exploited in the wild, and Windows 10 users just got a surprise extra year of free security updates. On the AI front, North Korean malware is now trying to confuse the AI tools that security researchers use to analyse it.
27 Million Stolen Passwords Just Got Rescued
Law enforcement shut down the criminal networks behind two major malware tools, recovering 27 million stolen login credentials in the process. A critical flaw in Lantronix network hardware is being actively exploited right now, with a CVSS score of 9.8 — patch or isolate today. And a new piece of North Korean macOS malware is trying to trick AI security tools into ignoring it entirely.
110 Million Credentials Stolen From Your Firewall
A Russian-speaking hacker group has been quietly draining credentials from FortiGate firewalls since February 2026, harvesting over 110 million credentials across hundreds of thousands of devices. Cisco's enterprise phone system has a critical flaw now being actively exploited in the wild — patch it today. The US government has also set a hard 2030 deadline to upgrade federal encryption before quantum computers make today's secrets tomorrow's open books.
WordPress Plugins Backdoored in Supply Chain Attack
Three ShapedPlugin WordPress Pro plugins were backdoored through a supply chain attack (where attackers tamper with software before it reaches end users), exposing site owners who trusted official update channels. A high-severity flaw in the FFmpeg video library, dubbed PixelSmash, can crash media apps like Kodi and OBS Studio and, under specific conditions, allow attackers to run commands on Jellyfin servers. If you run any ShapedPlugin Pro plugins, assume you are compromised and rotate every password today.
Fake Google Ads Are Hiding Password Thieves
North Korean hackers hijacked a popular developer package and exposed 8 million weekly downloads to malware, while a new info-stealing campaign is hiding inside fake Google Ads. A decades-old memory leak flaw in Squid Proxy, nicknamed "Squidbleed," can expose other users' traffic on shared networks like offices and schools — patch today if you run an affected version. Here is everything that happened, and what to do about it.
The Ransomware That Skips the Ransom Note
A new ransomware strain called Prinz Eugen is quietly encrypting victims' most recent files and walking away without leaving a note. A WordPress email plugin flaw is being exploited at massive scale — if you run Gravity SMTP, update it right now. North Korean state hackers also poisoned over 140 packages in a popular AI development framework, targeting developers' crypto wallets and API keys.
North Korea Hit the AI Dev Toolkit
North Korean state hackers poisoned over 140 packages in a popular AI development framework, targeting developers' crypto wallets and API keys. A WordPress email plugin flaw is being exploited at massive scale — if you run Gravity SMTP, update it right now. A new ransomware strain called Prinz Eugen is quietly encrypting your most recent files and walking away without leaving a note.
FortiBleed Exposes 86,644 Fortinet Logins
A massive credential-harvesting campaign called FortiBleed has compromised login details for over 86,000 Fortinet firewalls and VPNs across 194 countries, mostly by exploiting default and never-rotated passwords. F5 has patched two critical NGINX Open Source flaws that let an unauthenticated attacker run their own code on affected servers. There's also a clever phishing trick disguising malicious links as IPv6 addresses worth knowing about before you click anything today.