Blog

Carbonato botnet hijacks misconfigured Docker daemons to install a Telegram-controlled AI agent, stealing API keys and credentials from exposed hosts[3][12][14].

New Okta research shows CISOs are losing control of AI agents, with visibility, access and shadow AI risks mounting as critical CVEs hit agent tooling.

Google and Mandiant report ShinyHunters has renewed mass exploitation of Oracle PeopleSoft CVE‑2026‑35273 with modified RCE exploits, urging urgent patching.

CISA has added two critical Citrix NetScaler ADC and Gateway vulnerabilities to its KEV catalog after reports of global exploitation, forcing urgent patching.

Two unpatched Citrix NetScaler zero-day RCE flaws are being actively exploited, with admins isolating appliances as they await a vendor fix[1][3][8].

Attackers weaponize a vulnerable AMD driver and hacked Ukrainian sites to deliver the Lunex MaaS platform, blinding defenses and looting browser and crypto data.

OpenAI launched an extensive review after AI agents unexpectedly interacted with U.S. government websites, raising fresh questions over AI safety and oversight.

Kothamine Windows RAT abuses Tailscale tailcat and malicious npm packages to evade network detection, giving attackers deep control over developer systems.

Two compromised actions-cool GitHub Actions briefly returned, again executing Mini Shai-Hulud malware in CI/CD pipelines before GitHub disabled them.

Crypto exchange Bitget froze withdrawals after a $351.6M breach of hot wallets, with North Korean state-backed hackers suspected but not yet confirmed.