Latest news
-
Threat Intel via Security Affairs
Italy’s Foreign Ministry Under Cyberattack as Embassy Sites Come Under Review
Italy’s Foreign Ministry is defending its website against a cyberattack, checking embassy sites and pushing for EU action to identify attackers. On the morning of…
-
Threat Intel via BleepingComputer
Low-cost Android phones ship with residential proxy malware
A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing…
-
Threat Intel via Dark Reading
Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting
The first cybercriminal to ever make the FBI's "10 Most Wanted Fugitives" list allegedly infused Tren de Aragua's violent criminal operations with cash.
-
Vulnerabilities via Horizon3.ai
CVE-2026-102489 | Technical Details
CVE-2026-102489 is an unauthenticated session disclosure vulnerability in Zammad, an open-source helpdesk and customer support ticketing platform. An attacker can obtain…
-
Vulnerabilities via Canadian Centre for Cyber Security
IBM security advisory (AV26-1022)
Serial number: AV26-1022 Date: October 8, 2026 As of October 8, 2026, IBM is affected by vulnerabilities in the following products: IBM DataPower Gateway 10.5.0 Prior to…
-
Vulnerabilities via The Hacker News
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, and religious institutions in…
-
Threat Intel via Dark Reading
Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift
Cyber-espionage actor UAC-0099 has been steadily refining its flagship dropper in campaigns targeting Ukrainian organizations.
-
Vulnerabilities via Cisco Talos
Making sure the checks get printed
Welcome to this week’s edition of the Threat Source newsletter. My name is Pierre Cadieux, and I’ll be helping contribute to these newsletters. A little about me: I’ve…
- Advertisement
-
Ransomware via The Hacker News
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for himself. Elsewhere, an attacker left a server exposed, complete…
-
Threat Intel via Security Affairs
Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure
Hunt.io traced BraZetsu ‘s infrastructure and found that hosting patterns and certificate data remained useful after published IOCs became outdated. Group-IB researchers…
-
AI Security via CyberScoop
OpenAI says Iran, Russia used AI journalists, think tanks to influence Western media
OpenAI disclosed Thursday it shut down two influence operations from Russia and Iran that used ChatGPT and other AI tools to create fake journalist personas and covert…
-
Vulnerabilities via Ubuntu Security
USN-8909-1: libde265 vulnerability
It was discovered that libde265 did not properly validate certain crafted H.265 bitstreams, leading to a NULL pointer dereference. An attacker could possibly use this…
-
Threat Intel via BleepingComputer
FakeGit malware campaign returns with 17,610 malicious GitHub repos
More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC…
-
AI Security via SANS Internet Storm Center
Reconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th)
We just did a major update to FOR577 and added a lot of new material on day 5 about investigating AI usage in incident response. In the new material we dicsuss 8 of the…
-
Threat Intel via Flashpoint
CastleStealer: An Emerging Infostealer Growing More Sophisticated
Table Of ContentsTable of ContentsWhat We Know About CastleStealerWhat Data Does CastleStealer Target?Bypassing App-Bound EncryptionFrom Infostealer to Remote AccessHow…
-
Breaches via HIPAA Journal
Free Webinar: A Practical Guide to a HIPAA Security Risk Assessment
A missing or inadequate HIPAA Security Risk Assessment (SRA) can leave a major gap in your HIPAA compliance program. It is also one of the issues most frequently…
-
Breaches via Malwarebytes Labs
Attackers hijack country-code domains to impersonate Google and other services
According to Google, attackers compromised infrastructure behind three country-code domain namespaces—.gh (Ghana), .sl (Sierra Leone), and .as (American Samoa)—and used…
-
Vulnerabilities via The Hacker News
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination…
-
Breaches via HIPAA Journal
Casper Orthopedic Associates; Atlantic Digestive Specialists Announce Data Breaches
Data breaches have been announced by Casper Orthopedic Associates in Wyoming and Atlantic Digestive Specialists in New Hampshire. Casper Orthopedic Associates Casper…
-
Vulnerabilities via SecurityWeek
Cisco Patches a Dozen Critical Vulnerabilities
The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution.