A fake student resume is being used to place a remote-access tool on researchers’ Windows computers. The campaign hides a Windows executable inside an archive that appears to contain a …
Hackers Use Fake Student Resume to Secretly Install Malware on Researchers’ Computers
A fake student resume is being used to place a remote-access tool on researchers’ Windows computers. The campaign hides a Windows executable inside an archive that appears to contain a …
Russian University Leak Exposes GRU Cyber Training Pipeline Behind APT28 and Sandworm
Leaked university records have opened an unusual window into Russia’s military cyber ecosystem. The documents point to a structured training program, not a newly discovered piece of malware, that appears …
Dark Caracal Hackers Use Ethereum Blockchain to Keep New Malware Connected After C2 Disruption
Dark Caracal has returned with a new tool that helps attackers stay connected when defenders shut down their control servers. The cyberespionage group is linked by researchers to a Venezuelan …
Claude Code Opus 5 Auto Mode Hijacked via Prompt Injection to Execute Malicious Code
Claude Code Opus 5 in Auto Mode can be tricked into running malicious code via a simple website summary request. In a limited lab test, the attack reportedly succeeded in …
CISA Warns of Linux Kernel Privilege Escalation Vulnerability Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency has added a Linux kernel vulnerability, tracked as CVE-2026-53362, to its Known Exploited Vulnerabilities catalog after confirming that attackers are exploiting the flaw …
Hackers Steal Data of 8.7 Million Customers in Cyberattack on Three UK Airports
Criminal hackers have stolen the personal data of about 8.7 million customers following a cyberattack on systems used by Manchester Airports Group (MAG), which operates Manchester Airport, East Midlands Airport …
100+ Tech and Security Organizations Call for Global Cyber Defense Surge Against AI Attacks
More than 100 technology, cybersecurity, and financial-services organizations have joined OpenAI in an open letter urging a global surge in cyber defense as artificial intelligence models grow more capable of …
Hackers Abuse Active Directory SPN Misconfigurations for Stealthy Kerberoasting Attacks
Threat actors are increasingly abusing overlooked Active Directory service principal name (SPN) misconfigurations to launch stealthier Kerberoasting attacks, turning ordinary user accounts into high-value credential targets. The technique, dubbed “Ghost …
Critical cPanel Vulnerability Allows Attackers to Take Full Server Control
A newly disclosed vulnerability in cPanel and WHM, the widely used web hosting control panel software, could let a low-privileged, authenticated user seize root-level control of an entire server. Tracked …