Ravie LakshmananJul 17, 2026Cyber Espionage / Threat Intelligence Cybersecurity researchers have discovered a previously undocumented malware called GoSerpent that has […]
Category: Security
CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV
Ravie LakshmananJul 17, 2026Vulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly […]
Now, even Russia’s most elite hackers are using Clickfix to infect devices
One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices belonging […]
OpenAI Details GPT-Red: An Internal Automated Red-Teaming Model That Beat Human Red-Teamers 84% To 13% On Prompt Injection
This week, OpenAI published details of GPT-Red, an internal-only automated red-teaming model. Its job is to attack OpenAI’s own models […]
Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack
Owen Flowers, 18, and Thalha Jubair, 20, were each sentenced to five and a half years at Woolwich Crown Court […]
Microsoft nemesis returns with another zero-day PoC — but is ‘LegacyHive’ as nasty as expected?
(Image credit: Shutterstock/Ham patipak) Researcher “Chaotic Eclipse” releases new Windows 11 zero‑day dubbed LegacyHive, a local privilege escalation bug targeting […]
Russian hacker turns Gemini CLI into a hacking agent, creates small-scale botnet
(Image credit: Getty Images) Russian hacker “bandcampro” used Google’s Gemini CLI to control an eight‑device botnet at a dental clinic […]
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories
A lot of this week’s trouble starts with something that looks close enough. A familiar repo. A useful installer. A […]
Thousands of US military beneficiaries have data breached following TRICARE cyberattack — DoD Benefits Numbers and some Social Security numbers leaked
(Image credit: Getty Images) TriWest Healthcare confirmed an April 16 breach in which an attacker accessed and downloaded sensitive data […]
Zoom patches critical security flaw which could have let hackers hijack accounts
(Image credit: LinkedIn) Zoom patches critical improper input validation flaw in multiple Windows clients and SDKs that allowed remote account […]
