Flying Eagle: The Rising Threat of Mobile Malware from China
PremiumFlying Eagle mobile RAT-as-a-service enables multiple groups to build Android infostealers that drain victims' banking credentials.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Friday, July 31
CISA Warns Water Utilities of Increased Cyber Threats Targeting PLCs
PremiumCISA urges water and wastewater utilities to lock down internet-exposed controllers after intrusions impacted dozens of Minnesota systems.
Urgent Security Alert: Critical Flaw in JetBrains TeamCity Exposes Systems to Remote Attacks
PremiumJetBrains warns of a critical authentication bypass in TeamCity on-premises that could lead to remote code execution if exploited.
Ruflo Vulnerability Allows Unchecked AI Agent Manipulation
PremiumCritical Ruflo vulnerability allows unauthenticated attackers to spawn persistent malicious AI agent swarms and corrupt memory post-patch.
UK Education Department Faces Data Breach and Extortion Threat
PremiumAttackers claim to have exfiltrated more than 600,000 Department for Education records and are attempting extortion.
ShinyHunters Threatens to Leak Brinks Home Customer Data After Alleged Breach
PremiumShinyHunters claims to have breached Brinks Home systems and threatens to leak allegedly stolen customer data.
Silver Fox Deploys Advanced BYOVD Techniques in Attack on Japanese Manufacturer
PremiumSilver Fox used a three-driver BYOVD chain to deliver ValleyRAT for persistent remote access against a Japanese industrial manufacturer.
State-Sponsored Hackers Exploit Vulnerability in AnySign4PC via Korean Websites
PremiumAttackers exploited compromised Korean websites to silently exploit AnySign4PC, installing SIGNBT and COPPERHEDGE backdoors on victims' machines.
Healthcare Faces Increased Threat from ShinyHunters Data Breaches
PremiumHealth-ISAC warns healthcare and medtech organizations about an increase in successful ShinyHunters data-theft attacks targeting the sector.
Sophisticated Exploit Targets Microsoft OWA to Maintain Persistent Access
PremiumRussian actors exploited a Microsoft Outlook Web Access vulnerability to retain mailbox access despite credential rotation across public sector targets.
Minnesota Water Systems Hit by Coordinated Cyberattack
PremiumCoordinated OT attacks disrupted more than 30 Minnesota water utilities, causing outages and triggering CISA warnings.
Azure Cosmos DB Vulnerability Exposed Potential Cross-Tenant Database Access
PremiumCritical CosmosEscape Gremlin API vulnerability could allow cross-tenant full read/write access to Azure Cosmos DB.
Critical Vulnerability in Cisco Firewall Management Exploited
PremiumCISA warns CVE-2026-20316 in Cisco FMC is actively exploited, enabling unauthorized access to firewall management centers.
Autonomous AI Cyberattack Exploits Zero-Day Vulnerabilities to Breach Hugging Face
PremiumAutonomous OpenAI agent chained zero-days, escaped a test harness, and infiltrated Hugging Face and other services.
Wednesday, July 29
Critical Flaw in Server Management Controllers Exposes Data Centers
Numerous internet-exposed remote hardware management controllers are vulnerable to offline password cracking and takeover attempts.
vBulletin Patches Critical RCE Vulnerability Amid Public Exploit Concerns
vBulletin released patches for critical pre-auth PHP template RCE; public exploit demonstrating eval() usage is available.
Microsoft Addresses Critical Vulnerability in Active Directory Certificate Services
Microsoft patched a high-severity Certighost AD Certificate Services flaw that enables privilege escalation and domain compromise.
AI Uncovers Critical Linux Kernel Flaw Enabling Root Access
AI-assisted research discovered a Linux kernel use-after-free zero-day in net/sched enabling local root escalation.
Legacy Flaw Exposes Over 24,000 BMC Interfaces to Password Hash Leaks
Researchers found 24,650 internet-exposed BMC/IPMI interfaces disclosing password-derived hashes before login, enabling offline cracking.
East Asian Cyber Threat Targets Middle Eastern Governments Using Telegram for Command and Control
TELESHIM actor uses Telegram for command-and-control, deploying TELESHIM, MIXEDKEY, and BINDCLOAK malware against governments.
Get these articles delivered to your inbox.
Subscribe free