Dark Reading

Patched AWS Bedrock AgentCore vulnerability could allow a single malicious prompt to compromise an entire agent fleet; patch available.

A high-severity zero-day in TDengine time-series DB can crash OT servers across industrial, IoT, energy, and automotive environments.

Analysis of escalating Russian hybrid cyber-physical operations in Europe, including sabotage, disinformation, and drone attacks.

CVE-2026-76460 authentication bypass in Cisco ISE scored 10/10 CVSS, exposing API endpoints to unauthenticated access.

Sandworm chains Cisco vulnerabilities to deploy an upgraded Cyclops Blink botnet, reviving disrupted infrastructure-takeover tooling.

GoldFactory group abuses Android Work Profile to deliver Gigabud Trojan, while Mantax Otax spreads via app-cloning campaigns.

Adversaries leveraged AI to generate one million personalized fraud emails over three days, increasing scale and credibility.

Researcher released a zero-day 'ShieldCrash' exploit targeting Windows Defender components, enabling local bypasses and exploits.

Brazilian threat group Breeze Comet targets financial systems to steal funds and disrupt operations across banks and payment processors.

Attackers exploited unpatched ownCloud to access the Philippines nuclear agency, exfiltrating reactor databases and credentials.

ClickFix campaign used EtherHiding on Polygon to dynamically update C2 addresses after compromising 31 organizations.

CVE-2026-19478 zero-click GitLab vulnerability lacks technical details, complicating detection for self-managed deployments.

Browser extension vulnerabilities in Belgium's eID framework allow remote code execution and full compromise of citizen accounts.

Jewelbug APT operators run both state espionage and cryptocurrency theft from the same web control panel.

Widening attacks against US water systems continue, targeting Internet-exposed PLCs; attribution reports suggest Iran-linked activity in some cases.

Metabase zero-day allows remote admin takeover and data exfiltration, posing broad downstream risk to analytics consumers.

Researcher demonstrated a PoC providing C2-style influence over ChatGPT's isolated sandbox, highlighting container escape risks.

Flying Eagle mobile RAT-as-a-service enables multiple groups to build Android infostealers that drain victims' banking credentials.

Numerous internet-exposed remote hardware management controllers are vulnerable to offline password cracking and takeover attempts.