Russian Espionage Groups Exploit OAuth and WhatsApp for Account Hijacking
PremiumThree suspected Russian espionage clusters abuse OAuth and WhatsApp linking to hijack accounts at academia, aerospace and governments.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Monday, August 24
Massive Exposure of Stripe API Keys Sparks Urgent Security Concerns
PremiumResearchers found over 50,000 exposed Stripe API keys, increasing fraud and payment compromise risk for merchants.
Android Car Head Units Compromised by Botnet Malware
PremiumSupply-chain compromise of Android car head unit updater spreads malware to build ad-fraud and proxy botnet on vehicles.
Iranian Hackers Shut Down UK Power Plant in Unprecedented Cyberattack
PremiumIran-linked attackers forced a UK power plant offline for four days, disrupting energy infrastructure operations.
ToxicPanda Malware Exploits VPN Permissions to Target Android Users
PremiumToxicPanda Android malware abuses VPN permissions to block Google Play and expand remote command control across apps.
Medusa Ransomware Intensifies Assault on US Critical Infrastructure
PremiumMedusa ransomware campaign now affects 500+ organizations and increasingly targets critical infrastructure sectors.
CISA Demands Immediate Patching of TrueConf Server Vulnerabilities
PremiumCISA ordered immediate patching of TrueConf Server vulnerabilities that are being actively abused to deploy malware.
Rust Crates Hit by Supply Chain Attack Revealing Build-Time Malware
PremiumMalicious Rust crate releases introduced build-time payloads, affecting widely used packages and prompting removals.
Critical Vulnerability in Microsoft Entra ID Addressed Amid Exploitation Concerns
PremiumCritical Entra ID RCE patched; exploited reports prompted emergency guidance and wide Microsoft updates.
Friday, August 21
Malicious Firefox Extensions Exploit Web3 Users with Wallet Theft
PremiumCampaign 'Offside Wallet Theft Factory' uses 40 Firefox extensions impersonating Web3 wallets to steal crypto wallet secrets.
Cloudflare Workers Vulnerable to Spectre Attack: JWTs Exposed
PremiumResearchers demonstrate Spectre-based Cloudflare Workers side-channel leaking JWTs from co-located workers at ~12 bits/second.
Data Breach at Sakura Internet Compromises Over a Million Accounts
PremiumSakura Internet breach exposed sales management system data affecting up to 1.36 million accounts and contracts.
Clop Cybercrime Group Exploits PTC Vulnerability in Major Data Theft Campaign
PremiumInvestigation reveals Clop likely exploited critical PTC Windchill vulnerability in June, initiating extended extortion and data theft.
Clop Ransomware Utilizes Tailored Web Shell to Exploit PTC Windchill Systems
PremiumClop-associated web shell on PTC Windchill/FlexPLM decrypts credentials and maps PLM engineering vault data for extortion.
Critical Flaws in NASA's AIT-GUI Expose Spacecraft Command Vulnerabilities
PremiumChain of AIT-GUI flaws (GHSA-p9r8-2q67-fp86) allows unauthenticated attackers to issue arbitrary spacecraft commands (CVSS 9.4).
Microsoft Copilot Vulnerability Exposes Sensitive Data to Single-Click Threat
PremiumCVE-2026-24301 'CoSnitch' in Microsoft Copilot Personal allowed one-click exfiltration of connected-account data; patched Aug 18.
Medusa Ransomware Targets Over 500 Critical Infrastructure Organizations
PremiumFBI warns Medusa Ransomware affiliates breached over 500 critical infrastructure orgs via improved RaaS tactics and tools.
Latvian Data Breach Exposes Over a Million Citizens' Information
PremiumLatvian road traffic agency breach exposed vehicle data affecting ~two-thirds of population, prompting official resignations.
AI-Powered Cyberattacks Threaten Siemens PLCs in Critical Sectors
PremiumUS advisory warns AI-generated exploit scripts are targeting exposed Siemens S7 PLCs in industrial environments.
GitLab Vulnerability Exploited Within Days, Urgent Patch Required
PremiumCVE-2026-19478 in GitLab allows unauthenticated modification or deletion of public projects and user data; exploitation observed.
Get these articles delivered to your inbox.
Subscribe free