Dark Reading

Browser extension vulnerabilities in Belgium's eID framework allow remote code execution and full compromise of citizen accounts.

Jewelbug APT operators run both state espionage and cryptocurrency theft from the same web control panel.

Widening attacks against US water systems continue, targeting Internet-exposed PLCs; attribution reports suggest Iran-linked activity in some cases.

Metabase zero-day allows remote admin takeover and data exfiltration, posing broad downstream risk to analytics consumers.

Researcher demonstrated a PoC providing C2-style influence over ChatGPT's isolated sandbox, highlighting container escape risks.

Flying Eagle mobile RAT-as-a-service enables multiple groups to build Android infostealers that drain victims' banking credentials.

Numerous internet-exposed remote hardware management controllers are vulnerable to offline password cracking and takeover attempts.

Microsoft patched a high-severity Certighost AD Certificate Services flaw that enables privilege escalation and domain compromise.

Autonomous Hermes AI agent used for espionage against Thailand's Ministry of Finance, facilitating data access and stealthy reconnaissance.

Default Azure Automation public-by-default configuration combined with code flaws could enable cross-tenant identity takeover and data access.

Brazilian banking Trojan campaign actively spreading in Portugal, exploiting language commonality to target local businesses and consumers.

Ransomware disrupted operations at a Japanese frozen-food logistics firm, delaying shipments to major clients including national franchises.

Spanish police dismantled an organized cyber fraud ring that laundered ~uro140M through complex financial networks.

Attacks against healthcare service providers more than doubled in H1 2026 as criminals shift focus from hospitals to vendors.

AI gateway compromise led to cryptomining, demonstrating exposure of models, cloud resources, and IAM data via gateway attacks.

BusySnake infostealer used by 'Armored Likho' reached government agencies and electrical power entities, targeting critical infrastructure.

Researchers report JadePuffer, an agentic ransomware automating attack steps and accelerating operations.

EU organizations and suppliers face rising ransomware pressure; strengthen vendor risk and incident response.

EU organizations and suppliers face rising ransomware pressure; strengthen vendor risk and incident response.