A series of attacks on npm libraries including axios was the work of North Korean actors, AWS has said. The cloud computing giant said in a blog post on July 29 that compromises of the axios, debug, chalk and typo-crypto libraries… Read More "AWS Blames North Korean Group for npm Supply Chain Attacks"
Chinese Hacker Uses DeepSeek AI to Orchestrate Vulnerability Exploits
A Chinese threat actor has used large language models (LLMs) from Chinese and Western companies to compromise internet-exposed digital infrastructure in Asia. In particular, they leveraged one of DeepSeek’s AI models, Hermes Agent, an open-source agentic AI framework, to orchestrate… Read More "Chinese Hacker Uses DeepSeek AI to Orchestrate Vulnerability Exploits"
Researchers Link Suspected Chinese APT to Hack-for-Hire Operations
Security researchers from Broadcom’s Threat Hunter Team have revealed that Jewelbug, a threat group associated with Chinese-sponsored cyber-espionage operations, may be a hacker-for-hire group that also runs profitable crypto fraud campaigns. In a new report published on August 13, the… Read More "Researchers Link Suspected Chinese APT to Hack-for-Hire Operations"
Novel macOS Infostealer AmnesiaStealer Spread via ClickFix
A new macOS infostealer is being distributed via ClickFix social engineering attacks, researchers from Jamf have warned. The Rust infostealer, dubbed AmnesiaStealer, has multiple stages and objectives once it has infected a victim device, including harvesting credentials, browser data and… Read More "Novel macOS Infostealer AmnesiaStealer Spread via ClickFix"
Dell patches 18 critical flaws that could hand attackers the keys to storage and Kubernetes
CVE-2026-63692 in CSM, also rated 10, similarly reports the lack of authentication controls for critical functions in the authorization proxy and tenant service. Threat actors could potentially gain “complete administrative control” over the authorization service, Dell said. The 9.9-rated CVE-2026-67269… Read More "Dell patches 18 critical flaws that could hand attackers the keys to storage and Kubernetes"
New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies
A new modular Linux botnet family based on publicly leaked source code from the Mirai botnet has been linked to exploitation attempts for several vulnerabilities in edge devices. A Taiwan-based security researcher at Fortinet’s FortiGuard Labs, Yi Ping (Cara) Lin,… Read More "New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies"
ShinyHunters’ exploitation of a new PeopleSoft zero-day hole threatens to change enterprise risk dynamics
“ShinyHunters says it used a second, previously undocumented PeopleSoft preauth RCE zero-day, distinct from the CVE-2026-35273 flaw exploited in the earlier campaign,” he said. Yet, he pointed out, “no CVE has been assigned to it, it has not appeared on… Read More "ShinyHunters’ exploitation of a new PeopleSoft zero-day hole threatens to change enterprise risk dynamics"
Researchers Confirm ExfilSquad’s Access to Sensitive Data
New analysis of the ExfilSquad data extortion group has tied it to leaked data from at least 13 victims from sectors including government, education, financial services and manufacturing. Fortra Intelligence and Research Experts (FIRE) have reviewed data samples made public… Read More "Researchers Confirm ExfilSquad’s Access to Sensitive Data"
Infostealers Harvest 1.7 Billion Credentials in Six Months
Security researchers recorded 7.4 million devices infected with infostealer malware in the first half of 2026, a 27% increase from the previous six months, according to Flashpoint data. The threat intelligence company revealed the news in its 2026 Global Threat… Read More "Infostealers Harvest 1.7 Billion Credentials in Six Months"
SafePal Data Breach Hits Tens of Thousands of Customers
The manufacturer of a popular cryptocurrency hardware wallet has told tens of thousands of its customers to be on the lookout for phishing attempts after it suffered a data breach. SafePal published an update on August 16 claiming that order… Read More "SafePal Data Breach Hits Tens of Thousands of Customers"