Author: CyberMind

Apple released new versions of iOS and macOS to address a zero-day vulnerability that a threat actor is actively exploiting in targeted attacks. The out-of-bounds write vulnerability, tracked as CVE-2026-86950, affects Apple’s CoreGraphics framework, which macOS and iOS use to… Read More "Apple Zero-Day Vulnerability Weaponized in Targeted Attacks"

The US National Institute for Standards and Technology (NIST) is looking to modernize its National Vulnerability Database (NVD) to address challenges posed by AI and incorporate more automation and AI workflows. In a request for information (RFI) published on August… Read More "NIST Seeks Public Input on AI-Ready NVD Modernization"

A Russia-linked advanced persistent threat (APT) actor that was significantly disrupted by Microsoft and US officials two years ago is casting a wider net than ever with its phishing and malware-delivery tactics. In recent attacks, the nation-state actor has ditched… Read More "Russia’s Star Blizzard Ditches ClickFix to Widen Phishing Net"

Gunra ransomware actors are exploiting two Fortinet vulnerabilities to target government and critical national infrastructure organizations, a joint advisory issued by US and Republic of Korea authorities has warned. Gunra is a ransomware-as-a-service (RaaS) which primarily exploits known vulnerabilities in internet-facing… Read More "Gunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastruc"

The leaders of six major AI companies have committed to implement stronger safeguards around the development of frontier AI systems under a voluntary agreement signed with President Donald Trump this week. The White House Accord on Super Intelligence calls on… Read More "Trump, Tech Giants Strike Voluntary AI Safety Accord"

Malware used by North Korea’s Lazarus group negotiated its command channel using a post-quantum key exchange before pulling down a Windows zero-day exploit, in a campaign against defense and aerospace companies across Europe and India. Check Point Research reported the… Read More "Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day"

A previously unseen NFC relay malware family has been deployed alongside a remote access trojan in a single 13-minute phone call, letting a fraudster take out a loan in the victim’s name and relay their card data to a fake… Read More "WindRelay Malware Pairs With SpyNote RAT in Live-Call Scam"

The UK’s data protection watchdog has issued a reprimand to the Criminal Records Office (ACRO) after multiple security failings led to a 2023 data breach which impacted over 10,000 people. Between August 2022 and March 2023, a hacker gained unauthorized… Read More "ICO Reprimands Criminal Records Office After 2023 Breach"

A ransomware affiliate’s attempt to disable security tools by rebooting a victim’s system into Safe Mode backfired, with the tactic apparently preventing the malware from successfully encrypting the target’s file, according to recent research by Huntress. The managed security specialist… Read More "Akira Affiliate Crashes Ransomware After Attempting EDR Evasion"

The White House has authorized federal law enforcement agencies to collaborate with private firms in conducting offensive cyber strikes on foreign threat actors targeting the US. The National Security Presidential Memorandum (NSPM), signed by President Donald Trump on August 12,… Read More "Trump Authorizes Private Sector Participation in Offensive Cyber Opera"