Three distinct threat activity clusters with shared infrastructure and malware code similarities have been observed targeting telecommunications providers, government organizations, military entities, research institutions, and critical infrastructure across Latin America,… Read More »Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem
French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild. The authentication bypass flaw, which… Read More »Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI’s inference servers last Sunday. The attacker could also… Read More »SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
A flaw in Git can let a malicious repository run an attacker’s code on a computer that clones it recursively, together with its submodules. The Git project fixed it this… Read More »Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones
Fireworks AI disclosed on Monday that its investigation into a security incident first reported early last month uncovered further malicious activity, affecting account and billing information, alongside secrets, datasets, and… Read More »Fireworks AI Breach Widens to Expose Customer Billing Data and Incomplete Model Weights
The threat actor known as Blind Eagle has resurfaced with a new campaign targeting organizations in Latin America through judicial and administrative-themed phishing lures to deliver a remote access trojan… Read More »Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America
Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in October 2026, involves the… Read More »Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor
An iOS sandbox escape published on GitHub lets an app read other apps’ files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login credentials… Read More »Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed
At some point your security will fail. This isn’t pessimism. It’s not because your team and tools aren’t sophisticated enough. It’s the reason we have detections in the first place.… Read More »Beyond the Alert: The Case for Rich Network Data
The Russia-aligned state-sponsored threat actor known as Turla (aka Snake) is wielding a previously undocumented cyber espionage toolset called Cereal that’s used to break into victims’ Microsoft Exchange servers with… Read More »Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers