Tag Archive

Toronto, Canada, October 8th, 2026, CyberNewswire Insignary Launches Clarity AIR: Closing the Blind Spot Between What Your Developers Declare and What’s Actually in Your Code New snippet-level scanning shows security and compliance leaders which open-source code and which AI-written code …

Hackers are targeting hotels with fake guest complaints and negative reviews that lead staff to malware disguised as photographic evidence. The campaign delivers EtherRAT or TONResolver, two malware families that use public blockchains to find their command and control servers …

A proof-of-concept (PoC) exploit has been released for a critical vulnerability in LMCache that can allow unauthenticated remote code execution on exposed distributed deployments. Tracked as CVE-2026-105192, the flaw has a CVSS score of 9.8 and affects LMCache versions beginning …

A public PoC targets a critical Zammad flaw, CVE-2026-102489, allowing unauthenticated remote users to steal active session cookies and potentially execute code on vulnerable servers. The issue was associated with a breach reported in September at the Dutch Institute for Vulnerability …

A seller allegedly offered a VirusTotal Enterprise API key for $350 in an October 7 Dark Web Informer post, but the claim remains unverified, with no evidence confirming whether the key is genuine, stolen, or active. According to the post, …

Threat actors are increasingly turning public blockchain networks into a command-and-control (C2) layer for software supply chain malware, helping them rotate infrastructure without changing the malicious code already running on developer systems. The method gives criminals a resilient way to …

Authorities have dismantled a scam center in Ghana as part of the FBI’s Operation Blackout, identifying 89 victims and seizing more than 300 devices. FBI Director Kash Patel said the action uncovered nearly $10 million in losses and that authorities …

GitHub, with Microsoft Applied Sciences, introduced an AI-powered ModernBERT classifier that detects hidden passwords before code is pushed, expanding push protection beyond known token patterns. GitHub says it checks batches of possible secrets in under two milliseconds and could more …

Raheim Hamilton, co-creator of Empire Market, was sentenced to 40 years in federal prison for running a dark web marketplace that handled more than $430 million in illegal transactions. The 30-year-old Suffolk, Virginia, resident also received a $5 million fine, …

Hackers are exploiting CVE-2026-88771, a critical Citrix NetScaler vulnerability, to run commands, install web shells, and collect appliance configuration data. The activity goes beyond simple testing, with malicious scripts designed to maintain access and send stolen files to attacker infrastructure. …