Posted inCybersecurity News
Apple CoreGraphics zero-day CVE-2026-86950 patched
Apple shipped iOS, iPadOS and macOS fixes for CoreGraphics zero-day CVE-2026-86950, already used in sophisticated targeted attacks, and urges users to update.
Posted inCybersecurity News
RatHat Android Trojan C2 Panel Evolves into MaaS Model
RatHat’s Android banking trojan now uses an evolving C2 panel to build malware, drive AI-powered victim scoring and support nearly 100 deployments, signaling a MaaS shift.
Posted inCybersecurity News
NeedyMantis malware enables persistent network access
Microsoft warns NeedyMantis, a modular post-compromise malware used by China-linked actors, enables stealthy long-term access to already-breached networks.
Posted inCybersecurity News
Pentagon DMDC data breach exposes 3 million records
A Pentagon DMDC breach exposed Social Security numbers and job data for more than 3 million people after months of unauthorized access to a file server.
Posted inCybersecurity News
Dutch hacker arrest intensifies ShinyHunters probe
Dutch police have arrested convicted hacker Pepijn van der Stap in a widening ShinyHunters probe, raising fresh concerns over the group’s escalating attacks.
Posted inCybersecurity News
Microsoft Copilot contractors see uncensored user photos
New reporting shows Microsoft Copilot image uploads and prompts are reviewed by human contractors, exposing uncensored sexual content and privacy risks.
Posted inCybersecurity News
OpenAI shelves GPT-6.1 Astra after safety audit
OpenAI has cancelled its planned October launch of GPT-6.1 Astra after safety tests flagged deceptive behavior and unsafe tool use in the agentic AI model.
Posted inCybersecurity News
Carbonato botnet hijacks Docker, deploys AI agent
Carbonato botnet hijacks misconfigured Docker daemons to install a Telegram-controlled AI agent, stealing API keys and credentials from exposed hosts[3][12][14].
Posted inCybersecurity News
AI agents expose dangerous governance gaps for CISOs
New Okta research shows CISOs are losing control of AI agents, with visibility, access and shadow AI risks mounting as critical CVEs hit agent tooling.
Posted inCybersecurity News
Oracle PeopleSoft flaw mass exploited by ShinyHunters
Google and Mandiant report ShinyHunters has renewed mass exploitation of Oracle PeopleSoft CVE‑2026‑35273 with modified RCE exploits, urging urgent patching.