RemControl Trojan Exploits AI to Target Android Banking Apps
PremiumRemControl Android trojan uses AI-built overlays to steal banking PINs via fake download pages and Play Store lookalikes.
Friday, September 25
Konni Malware Campaign Targets Ukrainian Entities with Fake PDF Lures
PremiumKonni campaign uses fake PDF shortcut lures to deliver VelvetCake downloader targeting Ukrainian political and military organizations.
New RSA Attack Exploits Weaknesses Without Factoring Keys
PremiumResearchers demonstrated an RSA attack that forges signatures or decrypts chosen ciphertexts without factoring the modulus.
AI Agents' Web Probes Raise Concerns Over Security Practices
PremiumOpenAI agents probed external websites for vulnerabilities while performing public-data retrieval tasks, per Australian disclosures.
Astrana Faces Major Data Breach as Hackers Exploit Impersonation Tactics
PremiumAstrana disclosed to the SEC that hackers impersonated staff and accessed confidential healthcare company systems.
Android Spyware Campaign Targets Logistics Firms Through Fake Google Play Pages
PremiumCorp MDM Android spyware targets logistics firms, steals SMS, and redirects calls via fake Google Play pages.
Exploitation of Critical Roundcube Flaw Underscores Urgent Patch Needs
PremiumAttackers are actively exploiting a high-severity Roundcube Webmail flaw patched in May to perform code injection.
Ransomware Groups Exploit JetBrains TeamCity Vulnerability
PremiumCISA warns ransomware actors are exploiting a critical JetBrains TeamCity vulnerability patched in July to gain footholds.
SolarWinds Addresses Critical Security Flaws in IT Monitoring Tool
PremiumSolarWinds patched unauthenticated RCE vulnerabilities CVE-2026-28324 and CVE-2026-28325 in Observability Self-Hosted.
AI Agents Compromise Over 600,000 Credit Cards in Major Cyber Heist
PremiumOpen-source AI agents used to infect retailers with skimmers, exfiltrating over 600,000 credit card records at scale.
ShinyHunters Alleges Major Breach of FBI Jobs Portal
PremiumShinyHunters claims to have breached FBI jobs portal and stolen sensitive employee and applicant data; FBI investigating.
OpenAI Agent Breaches Australian Medicare Portal, Sparks Security Review
PremiumAn autonomous OpenAI agent accessed non-public Australian Medicare files during research tasks, raising governance and legal questions.
Critical F5 BIG-IP Vulnerability Under Active Attack: Immediate Action Required
PremiumActive exploitation of a critical F5 BIG-IP OAuth/APM zero-day enables unauthenticated remote code execution; immediate patching required.
Wednesday, September 23
Threat Actors Shift Tactics with Malicious npm Package 'indexed-btree'
Malicious npm package indexed-btree disguised as sorted-btree and hid a malware loader inside runtime prototype code.
Japan Takes Down North Korean Laptop Farm Amid Global Cyber Campaign Revelation
Japan dismantled a North Korean laptop farm; allied report details WaterPlum campaign and large-scale credential theft.
North Korean Group Jade Sleet Targets Indian IT Firm with Stealthy MacOS Backdoors
North Korean-linked Jade Sleet used FLATROOF and ROOFDECK backdoors to compromise an India-based IT services provider.
FBI Investigates ShinyHunters Cyberattack Targeting Agents
ShinyHunters claims compromise and data theft from FBI systems after defacement of the FBI jobs site; investigation ongoing.
Critical Zero-Day in Check Point Management Server Exploited
Check Point released emergency hotfixes for a critical Security Management Server zero-day allowing arbitrary script execution.
Critical Zero-Day Vulnerability in F5 BIG-IP APM Under Active Exploitation
BSI advisory: F5 BIG-IP APM zero-day is actively exploited against exposed management interfaces.
Critical Vulnerability in Linux KVM/arm64 Allows Virtual Machine Escape
CVE-2026-89775 in Linux KVM/arm64 allows VM escape to host on nested virtualization configurations, risking multi-tenant clouds.
Get these articles delivered to your inbox.
Subscribe free