Cloud security firm Sysdig has released details on what it claims to be the world’s first ransomware campaign completely driven by a large language model (LLM). Dubbed JadePuffer, the campaign targeted an internet-facing Langflow instance by exploiting CVE-2025-3248. It then ran “an adaptive… Read More "Researchers Claim First Fully Agentic Ransomware: JadePuffer"
Voting was already underway when the ICE agents arrived at a polling site in Syracuse, New York, during the state’s primaries in June. The agents were there to see Paigelynn Gonyea, a poll worker who says they were concerned about… Read More "ICE’s Internal Watchdog Is Now Investigating Online Critics"
Cybersecurity researchers have flagged a novel Java-based remote access trojan (RAT) called QuimaRAT that’s capable of targeting Windows, Linux, and macOS environments. According to LevelBlue, the cross-platform malware is advertised under a malware-as-a-service (MaaS) model, costing anywhere between $150 for… Read More "New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS"
The disruption proved something IT professionals have relearned in every decade of their careers. Mark Twain observed that history does not repeat itself, but it does rhyme. This is a verse we have heard before: Dependence on a single point… Read More "Single points of failure fail. The SaaS layer is not an exception"
The National Crime Agency (NCA) has launched a new campaign to warn parents about the dangers of oversharing videos and photos of their kids. The Internet Watch Foundation (IWF) reported a 26,000% annual increase in AI-generated videos of child sexual… Read More "NCA Issues Warning to Parents As Shared Child Photos Exploited by AI"
Swati KhandelwalJul 06, 2026Cyber Espionage / Endpoint Security Researchers at Shandong University have shown a fast new way to pull data off computers that are cut off from every network. The technique, called TrojPix, tweaks on-screen pixels in ways the eye cannot see,… Read More "New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions"
Scanners meant to catch malicious add-on “skills” for AI coding agents can be fooled by a few simple changes that leave the malware working, according to a new study from researchers at the Hong Kong University of Science and Technology. Their strongest… Read More "SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing"
“As a result, it becomes difficult to communicate the real risks of breaches and other risks,” he states. “Worse yet, it gives security team members an excuse to complain about being misunderstood or not valued, which degrades team effectiveness.” It’s… Read More "7 cyber risk assessment gotchas to avoid"
A Cambodian network accused of orchestrating large-scale cryptocurrency fraud has been hit with US sanctions targeting senior figures and associated entities. The Office of Foreign Assets Control (OFAC) last week named Senator Kok An among 29 individuals and organizations allegedly involved… Read More "US Sanctions Target Cambodian Scam Network Leaders"
A team of hackers associated to the North Korean-linked Lazarus Group has conducted a large-scale cyber theft campaign targeting over 100 cryptocurrency organizations across more than 20 countries, according to Arctic Wolf. The spear-phishing campaign involved multiple social engineering techniques,… Read More "North Korean Hackers Target Crypto Firms with ClickFix and Zoom Lures"
