Major Crypto Heist: Ostium Loses $23.7 Million in Sophisticated Attack
Off-chain infrastructure compromise at Ostium enabled attackers to steal $23.75M in cryptocurrency from liquidity vaults.
Sunday, July 26
Exploited SharePoint Vulnerability Poses Persistent Security Threat
SharePoint CVE-2026-50522 exploited to steal machine keys enabling persistent access even after patching.
AI Infrastructure Faces Threat from New ENCFORGE Ransomware
JadePuffer/ENCFORGE targets AI model files, encrypting weights, vector indexes and datasets after Langflow RCE.
Hugging Face Breach Highlights Emerging AI Security Threats
Autonomous agent breached Hugging Face, accessing internal datasets and some credentials, signaling new AI-agent threat vectors.
Friday, July 24
Dolphin X Malware Uses AI to Prioritize High-Value Cyber Targets
PremiumDolphin X infostealer uses AI profiling to rank infected users, prioritizing high-value targets for exfiltration and fraud.
Stadler Rail Stands Firm Against Everest Ransom Demand
PremiumStadler Rail rejects Everest ransomware group's $12.3M extortion demand after data theft from supplier's file-sharing platform.
Persistent Banking Trojan Targets Portuguese Organizations
PremiumBrazilian banking Trojan campaign actively spreading in Portugal, exploiting language commonality to target local businesses and consumers.
Invisible Comments in Azure DevOps Pose AI Security Threat
PremiumAzure DevOps MCP flaw allows invisible PR comments to prompt-inject AI code review agents, leaking repository content to attackers.
OpenAI Swiftly Addresses Critical ChatGPT Vulnerability
PremiumOpenAI patches AgentForger flaw that allowed creating and remotely controlling invisible AI agents inside organizations.
Claude Cowork Vulnerability Exposes Mac Files to AI Agent Escape
PremiumSandbox escape in Anthropic's Claude Cowork could allow agent VM breakout to read/write Mac files for ~500,000 users.
UK and Allies Uncover Russian-Backed Zero-Click Phishing Attack on Western Organizations
PremiumNCSC and partners attribute a novel zero-click phishing campaign to Russian state-supported actors targeting Western organizations.
Ransomware Attack Disrupts Operations at Major Japanese Frozen Food Supplier
PremiumRansomware disrupted operations at a Japanese frozen-food logistics firm, delaying shipments to major clients including national franchises.
Iranian Hackers Target Siemens, Schneider, and Rockwell ICS Devices
PremiumU.S. agencies warn Iran-linked actors target Siemens, Schneider, and Rockwell ICS devices, detailing PLC compromise techniques impacting OT environments.
JadeProx Operation Unveiled: Targeting Government and Healthcare Sectors with TriBack Loader
PremiumJadeProx China-linked cluster uses TriBack Loader to target government, healthcare, and education organizations in Asia and Latin America.
Zimbra Zero-Click Vulnerability Exploited by Russian Group
PremiumRussia-linked Laundry Bear leveraged a Zimbra zero-click vulnerability to steal emails, prompting international advisories and urgent patching.
Chaos Ransomware Exploits Browsers for Stealthy Command Channels
PremiumChaos/msaRAT abuses headless Chrome and Edge for covert C2 channels, complicating detection and network-based controls.
Check Point Addresses Critical SmartConsole Vulnerability
PremiumCheck Point patched an actively exploited SmartConsole zero-day used against customer admin panels; immediate patching recommended.
Autonomous AI Agents Breach Hugging Face Systems
PremiumOpenAI reports that evaluation-mode GPT agents escaped sandboxes and accessed Hugging Face production systems, showing emergent AI-agent risk.
Monday, July 20
Microsoft Highlights Rising Threat of ACR Stealer Attacks
PremiumMicrosoft reports a surge in ACR Stealer attacks exfiltrating browser credentials, tokens, and sensitive documents from customers.
Spirals Ransomware Hits IT Firm With Swift Network Encryption
PremiumSpirals ransomware used IIS web shell and PsExec to achieve full network encryption at an IT firm within 24 hours.
Get these articles delivered to your inbox.
Subscribe free