A Trezor Safe 5 hardware wallet bought from the reseller CryptoBilis has an extra circuit board that sends out the recovery phrase over a mobile network,…
OWASP: AI Agents Lower Barriers to Cyberattacks
The Open Web Application Security Project (OWASP) has released research warning that artificial intelligence agents and chatbots are significantly…
Google’s Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities
Google on Wednesday took the wraps off Gemini 4 Carbon, its latest frontier model with state-of-the-art cybersecurity and long-horizon capabilities. “It…
Microsoft Emergency Update Revokes eMudhra Certificates
Microsoft has deployed an emergency security update to revoke trust in certificates associated with compromised keys from eMudhra, a certificate authority.
Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison
Ahmad Umar Agha, a Syrian Electronic Army hacker known online as “Th3Pr0,” has been sentenced by a U.S. federal court to 42 months in prison for his role…
Audio Prompt Injection: What Voice Agents Hear That Text Guardrails Miss
Key takeaways Only 24 percent of organizations can fully inspect AI traffic without impacting performance, according to Check Point’s 2026 Cloud Security…
Salt Security adds autonomous defence capabilities to agentic security platform
Salt Security has announced Autonomous Defense for its Agentic Security Platform, expanding its Salt Workflows capabilities to automate threat…
The $6.3 Billion Binance Hack Was Pulled Off in Just 20 Minutes
Multiple crypto-tracing firms say notorious North Korean hackers TraderTraitor may be behind the largest digital heist in history—with billions of crypto…
Earliest Known PolinRider Malware Found in 2025 npm Packages
A hijacked maintainer account shipped the North Korean payload 8 months before the first documented victims.
Researchers Hacked Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop Embedded Browsers
Security flaws in the embedded browsers of Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop could enable code execution, file theft, and…
IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
Phishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increased. Finance and public…
Chinese Actor Compromises US Government Network Via Chained PHP2Shell Exploit
Dream found that a suspected Chinese-nexus actor gained root access to Palo Alto Network firewall servers to target government organizations
Fake Polymarket Scam Network Claims Nearly $11 Million in Cryptocurrency Deposits
Russian-language “traffer” teams are selling ready-made fake prediction-market platforms to affiliates. One of them, AtlasCore, claims about $10.97…
Binance Probes DevOps Engineer’s Hacked Laptop After $6.3B Theft
Binance probes a DevOps engineer’s hacked laptop after a $6.3 billion theft linked by researchers to North Korean hackers, and promises to cover all…
Hackers steal and publish data on 41,000 Homeland Security workers
A hacker group claims it stole data on 41,000 DHS employees, exposing work contact details and internal group memberships.
British intelligence agency misplaced ‘thousands’ of storage devices, years later still can’t say how many
Other agency errors included an unchecked software bug that led to Terrorism Act detentions
Bluesky blocks links to leaked DHS employee data as government seeks takedowns
The social networking site is facing criticism for blocking access to the site, which identifies thousands of ICE agents and other employees working for…
CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug…
Hackers Probe Critical Oracle EBS Flaw a Week After Patch: Versions at Risk
Attackers are probing a critical Oracle EBS vulnerability days after patching. See which versions are affected and how security teams can respond. Copy
Russian popular home goods chain faces days of disruption following cyberattack
Poryadok, which operates 48 stores across 32 Russian cities, first reported technical problems on Sunday, saying its website, mobile app and physical…
The OpenSourceMalware Show #27
Brotli vulnerability reaches far beyond Node, LiteLLM breached via unrevoked key, and AGENTS.md file tries to install a MALFEX package
Trezor Warns of Suspected Spy Implant in Crypto Wallet That Could Steal Recovery Phrases
Trezor has warned that a suspected hardware implant inside a Trezor Safe 5 could steal recovery phrases and send them over a mobile network. The warning…
Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal Credentials
Hackers exploited a chain of zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances, allowing them to execute commands with root access,…
Microsoft finally fixes VPN issues caused by September updates
Microsoft has resolved Always On VPN connection failures triggered after installing the September 2026 Windows 11 security updates. […]