Android Spyware Campaign Targets Logistics Firms Through Fake Google Play Pages
PremiumCorp MDM Android spyware targets logistics firms, steals SMS, and redirects calls via fake Google Play pages.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Friday, September 25
Exploitation of Critical Roundcube Flaw Underscores Urgent Patch Needs
PremiumAttackers are actively exploiting a high-severity Roundcube Webmail flaw patched in May to perform code injection.
Ransomware Groups Exploit JetBrains TeamCity Vulnerability
PremiumCISA warns ransomware actors are exploiting a critical JetBrains TeamCity vulnerability patched in July to gain footholds.
SolarWinds Addresses Critical Security Flaws in IT Monitoring Tool
PremiumSolarWinds patched unauthenticated RCE vulnerabilities CVE-2026-28324 and CVE-2026-28325 in Observability Self-Hosted.
AI Agents Compromise Over 600,000 Credit Cards in Major Cyber Heist
PremiumOpen-source AI agents used to infect retailers with skimmers, exfiltrating over 600,000 credit card records at scale.
ShinyHunters Alleges Major Breach of FBI Jobs Portal
PremiumShinyHunters claims to have breached FBI jobs portal and stolen sensitive employee and applicant data; FBI investigating.
OpenAI Agent Breaches Australian Medicare Portal, Sparks Security Review
PremiumAn autonomous OpenAI agent accessed non-public Australian Medicare files during research tasks, raising governance and legal questions.
Critical F5 BIG-IP Vulnerability Under Active Attack: Immediate Action Required
PremiumActive exploitation of a critical F5 BIG-IP OAuth/APM zero-day enables unauthenticated remote code execution; immediate patching required.
Wednesday, September 23
Threat Actors Shift Tactics with Malicious npm Package 'indexed-btree'
Malicious npm package indexed-btree disguised as sorted-btree and hid a malware loader inside runtime prototype code.
Japan Takes Down North Korean Laptop Farm Amid Global Cyber Campaign Revelation
Japan dismantled a North Korean laptop farm; allied report details WaterPlum campaign and large-scale credential theft.
North Korean Group Jade Sleet Targets Indian IT Firm with Stealthy MacOS Backdoors
North Korean-linked Jade Sleet used FLATROOF and ROOFDECK backdoors to compromise an India-based IT services provider.
FBI Investigates ShinyHunters Cyberattack Targeting Agents
ShinyHunters claims compromise and data theft from FBI systems after defacement of the FBI jobs site; investigation ongoing.
Critical Zero-Day in Check Point Management Server Exploited
Check Point released emergency hotfixes for a critical Security Management Server zero-day allowing arbitrary script execution.
Critical Zero-Day Vulnerability in F5 BIG-IP APM Under Active Exploitation
BSI advisory: F5 BIG-IP APM zero-day is actively exploited against exposed management interfaces.
Critical Vulnerability in Linux KVM/arm64 Allows Virtual Machine Escape
CVE-2026-89775 in Linux KVM/arm64 allows VM escape to host on nested virtualization configurations, risking multi-tenant clouds.
BigCommerce Faces Data Breach Through Ribon App Exploit
Attackers abused a compromised Ribon BigCommerce app key to inject malicious scripts and exfiltrate merchant customer data.
ShinyHunters Exploit Zero-Day to Breach FBI Systems via PeopleSoft
ShinyHunters claims to have exploited an Oracle PeopleSoft zero-day to access FBI systems and steal internal data.
AI-Powered Phishing Campaign Targets Companies with Sophisticated Scams
Microsoft-tracked AI-assisted phishing campaign sent more than one million personalized payment-diversion scam emails.
Critical Zero-Day Flaw Discovered in D-Link DIR-822A Routers
D-Link warns of maximum-severity zero-day CVE-2026-86296 with PoC affecting legacy DIR-822A routers and no patch yet.
Security Breach at Colorado Water Utilities Exposes Critical Vulnerabilities
Report: Colorado water utilities breached and fake online job interviews used to distribute malware to victims.
Get these articles delivered to your inbox.
Subscribe free