Google Cloud’s threat intelligence team (GTIG) said the attack unfolded between May 27 and June 9, before Oracle publicly acknowledged the issue. Google said it notified more than 100 organizations whose internet facing systems appeared potentially exposed, with 68% of… Read More "Oracle PeopleSoft zero‑day fuels ShinyHunters extortion spree"
ESET researchers have uncovered an Android spyware campaign leveraging romance scam tactics to target individuals in Pakistan. The campaign uses a malicious app posing as a chat platform that allows users to initiate conversations with specific “girls” – fake profiles… Read More "Fake dating app used as lure in targeted spyware campaign in Pakistan"
A new variant of the TrickMo Android banking trojan has moved its primary command-and-control (C2) transport onto The Open Network (TON) Blockchain, routing communications through the decentralized overlay’s .adnl identities to make traditional domain takedowns largely ineffective. The variant, identified… Read More "TrickMo Variant Routes Android Trojan Traffic Through TON"
Anthropic has disputed allegations of a prompt-based jailbreak affecting its recently launched Claude Fable 5 AI model, underscoring the robustness of the advanced classifier system and extensive red-teaming efforts that underpinned the model’s deployment. Claude Fable 5 became generally available… Read More "Anthropic Disputes Fable 5 AI Jailbreak"
Cyble Recognized in the 2026 Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies — and What Cyble Feels It Means for the Next Era of Threat Intel A note from our CEO on the recognition, what we believe it signals about the category, and where we go from here. This morning, Cyble was… Read More "Gartner® Magic Quadrant™ 2026 | Cyberthreat Intelligence"
Authorities in Europe have disrupted AudiA6, a cryptocurrency laundering service used by ransomware gangs and cybercriminal networks. Europol, in a statement issued Thursday, said the dismantling of AudiA6 cut off a “key financial pipeline used to wash hundreds of millions… Read More "Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs"
How to protect yourself From the banking sector, CaixaBank addresses the quantum threat “understanding that it is a real risk and, as such, must be managed proactively,” a company representative said via email. “The risk is already relevant, and it is… Read More "‘Harvest now, decipher later’: The quantum threat few are preparing for"
In this blog post, we provide more technical details related to our previous DynoWiper publication. Key points of the report: ESET researchers identified new data-wiping malware that we have named DynoWiper, used against an energy company in Poland. The tactics,… Read More "DynoWiper update: Technical analysis and attribution"
A variant of the PureLogs infostealer malware has been distributed through purchase-order-themed phishing emails that use a malicious JavaScript file to launch a multi-stage infection chain on Windows systems. According to new analysis from FortiGuard Labs, the campaign uses a… Read More "PureLogs Variant Steals Data via Purchase Order Lures"
Google has confirmed that a PeopleSoft vulnerability mitigated by Oracle this week has been exploited by ShinyHunters as a zero-day to steal data from organizations. Oracle has released an out-of-band advisory and security alert for CVE-2026-35273, a critical unauthenticated remote… Read More "Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters"
