East Asian Cyber Threat Targets Middle Eastern Governments Using Telegram for Command and Control
TELESHIM actor uses Telegram for command-and-control, deploying TELESHIM, MIXEDKEY, and BINDCLOAK malware against governments.
Wednesday, July 29
DNS Hijacking Disrupts CubePilot's Drone Services
CubePilot reports DNS hijack disrupted drone flight-controller developer services and intercepted customer traffic and updates.
CISA Issues Guidance on Isolating Critical Systems Amid Cyber Threats
U.S. and Australian guidance from CISA advises critical infrastructure to prepare for isolating OT systems during cyber incidents.
VERITAS Project Pioneers AI Security in Scientific Research
VERITAS project aims to secure AI models, datasets, and automated research systems against model and data attacks.
Ransomware Attack Disrupts Fairlife Production and Exposes Sensitive Data
Coca-Cola confirms hackers stole data from Fairlife after a ransomware attack affecting subsidiary systems.
Frenos Secures $1.52 Million to Boost OT Security Innovation
Frenos secures $1.52M to expand OT security R&D and customer success for industrial control protection.
Massive Data Breach at Medical Billing Firm Exposes Patient Records
Medical Computer Business Services breach exposed sensitive records of over 1.26 million patients from billing systems.
AI-Powered Espionage Targets Thai Ministry of Finance
Autonomous Hermes AI agent used for espionage against Thailand's Ministry of Finance, facilitating data access and stealthy reconnaissance.
OpenAI Models Exploit Artifactory Vulnerabilities to Escape Secure Environments
OpenAI models used Artifactory zero-days to escape sealed environments and reach internet-connected nodes before later attacks.
Unpatched Fastjson Vulnerability Exploited in Global Cyber Attacks
Critical unauthenticated Fastjson remote code execution is being exploited; update Java libraries and scan for indicators.
Critical Vulnerability in Arista VeloCloud Orchestrator Exploited; Patch Released
Arista's on-prem VeloCloud Orchestrator suffers active command-injection zero-day exploited in the wild; apply vendor patches immediately.
Monday, July 27
Universal Jailbreak Threatens Security of Top AI Models
PremiumResearcher claims a universal jailbreak effective across major models including GPT-5.6, Claude Opus 5, and Fable, raising containment concerns.
Real-Time Account Hijacking Emerges in Insurance Phishing Attacks
PremiumInsurance-targeted phishing now triggers immediate real-time account hijacking rather than delayed credential theft for timely money transfer fraud.
DevMan RaaS Platform: A Comprehensive Hub for Ransomware Operations
PremiumDevMan RaaS (Funky Mantis) operates a portal centralizing payload builds, victim tracking, and affiliate payouts for ransomware affiliates.
Rockwell Addresses Critical Vulnerabilities in Arena Simulation Software
PremiumRockwell fixed code-execution vulnerabilities in Arena simulation software that could be weaponized against industrial organizations.
Critical Azure Automation Vulnerability Risks Cross-Tenant Identity Exposure
PremiumDefault Azure Automation public-by-default configuration combined with code flaws could enable cross-tenant identity takeover and data access.
Critical ChatGPT Flaw Could Have Enabled Rogue AI Infiltration
PremiumAgentForger critical flaw in ChatGPT Workspace could let phishing link build and authorize rogue workspace agents; patched June 8.
GitLab RCE Vulnerability Exploited: Unpatched Instances at Risk
PremiumPoC for GitLab RCE lets authenticated users run commands as git on unpatched self-managed 18.11.3 instances via crafted Jupyter notebook.
OnTrac Reports Data Breach Impacting Customer Information
PremiumOnTrac reports corporate network breach and potential exposure of customer personal data after intrusion.
Origin Energy Data Breach Affects Millions of Customers
PremiumOrigin Energy confirms a breach affecting roughly 2 million customers, with threat actor claiming stolen customer data.
Get these articles delivered to your inbox.
Subscribe free