INTERPOL Warns of Surge in Phishing, Ransomware, and AI-Driven Scams Across Asia-Pacific
A new report from INTERPOL reveals a dramatic increase in cybercrime across Asia and the South Pacific, driven by rapid digitalization, new…
Tag: CVE-2026-11645
AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network
A new malware family named AryStinger, discovered by QiAnXin's XLab, has infected at least 4,300 legacy routers to create a distributed reconnaissance…
Canada’s Spy Agency Uses First-of-Its-Kind Warrant to Clean Botnet-Infected Devices
Canada's spy service, the Canadian Security Intelligence Service (CSIS), obtained a judge's permission to remotely clean botnet-infected devices on Canadian soil, marking…
Legacy Infrastructure Exposures Enable AI Agent Hijacking, Warns XM Cyber
At the Gartner Security & Risk Management Summit, Zur Ulianitzky, SVP Product and Security Research at XM Cyber, detailed how attackers are…
Google Mandates Android Developer Verification by Sept 30, 2026 in Four Countries
Google has announced that starting September 30, 2026, certified Android devices in Brazil, Indonesia, Singapore, and Thailand will block normal installations of…
New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer
Cybersecurity researchers from Elastic Security Labs have disclosed a new campaign that delivers the CastleStealer information stealer via a previously unreported malware…
DifyTap Vulnerabilities Expose AI Chat Data Across Tenants in Open-Source Platform Dify
Cybersecurity researchers at Zafran Security have disclosed four vulnerabilities in Dify, an open-source agentic workflow platform with over 146,000 GitHub stars, collectively…
29-Year-Old Squid Proxy Bug ‘Squidbleed’ Leaks Cleartext HTTP Requests
A critical heap over-read vulnerability in the Squid web proxy, dubbed 'Squidbleed' (CVE-2026-47729), can leak cleartext HTTP requests—including credentials and session tokens—to…
ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack
Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack after unknown threat actors tampered with the official release channels…
OpenAI Expands Daybreak Initiative with GPT-5.5-Cyber to Accelerate Vulnerability Patching
OpenAI has announced the release of an improved version of its GPT-5.5-Cyber model as part of the Daybreak initiative, aimed at helping…