A new remote access trojan sold on dark web forums has been built to drain cryptocurrency, hijacking victims’ logged-in sessions to slip past passwords and multi-factor checks. Dubbed SilabRAT, the malware has been detailed in new analysis from Group-IB, which… Read More "New SilabRAT Trojan Hijacks Sessions to Steal Crypto"
Microsoft on Tuesday announced patches for a record-breaking 622 vulnerabilities, including two bugs in Active Directory and SharePoint Server that have been exploited in the wild as zero-days. Tracked as CVE-2026-56155, the exploited AD flaw affects Federation Services (AD FS)… Read More "Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days"
AI security agents are starting to influence real security decisions. They summarize findings, prioritize remediation, recommend next steps, and help teams move faster. But most still rely on fragmented risk signals: scanner output, severity scores, threat intelligence, configuration findings, and… Read More "How Pentera Turns AI Security Workflows into Validation Engines"
Cybersecurity software regularly fails to detect and prevent the cyber-attacks they are designed to protect organizations from, especially within the bowser layer, research by Menlo Security has warned. Published on June 9, Menlo Security’s 2026 Browser Threat Report found that… Read More "Security Software Fails to Detect Fifth of Brower Phishing Attacks"
Adobe on Tuesday rolled out security updates for 12 products to address 88 vulnerabilities, including critical-severity bugs in ColdFusion, Commerce, Experience Manager, and Illustrator. Out of 13 security defects resolved in ColdFusion, eight – CVE-2026-48318, CVE-2026-48322, CVE-2026-48284, CVE-2026-48321, CVE-2026-48325, CVE-2026-48319,… Read More "Adobe Patches Critical ColdFusion Vulnerabilities"
Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan (RAT) codenamed LabubaRAT that masquerades as NVIDIA software to blend into target environments. “LabubaRAT creates a reusable foothold for hands-on activity,” Blackpoint Cyber researchers Sam Decker and Nevan Beal… Read More "LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts"
Threat actors have been using short-form videos on TikTok and Instagram Reels to push the Vidar infostealer, disguising the attacks as tutorials for unlocking premium software for free. New analysis from ReversingLabs describes two campaigns that game the platforms’ recommendation… Read More "Fake Software Tutorials on TikTok Spread Vidar Stealer"
Several malicious versions of Jscrambler’s NPM package were published over the weekend as part of a supply chain attack involving compromised credentials. The popular NPM package is used within the Jscrambler Code Integrity product, a JavaScript protection solution that turns… Read More "Multiple Jscrambler Packages Impacted by Supply Chain Attack"
Researchers at KU Leuven tested 85 of the most popular crypto wallets that run as browser extensions and found that the wallets themselves leak enough to link and track the people using them. The way these wallets talk to websites… Read More "Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks"
The US Department of Defense (DoD) has suspended the Cybersecurity Maturity Model Certification (CMMC) Phase II requirements until it reviews the program to allow for more innovation in the US defense industrial base (DIB). Originally scheduled to come into effect… Read More "Pentagon Suspends CMMC Phase II Requirements for Defense Contractors"
