U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case
A U.S. government entity paid approximately $1 million to prevent the leak of stolen files, according to a case study by Rakesh…
Tag: CVE-2026-55200
North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign
North Korean threat actors linked to the Contagious Interview campaign have published 108 unique malicious packages and browser extensions across npm, Packagist,…
Seven Unpatched FatFs Flaws Expose Millions of Embedded Devices to Code Execution
Security firm runZero has disclosed seven unpatched vulnerabilities in FatFs, a widely used filesystem library for FAT and exFAT formats, embedded in…
New Bad Epoll Linux Kernel Flaw (CVE-2026-46242) Enables Root Privilege Escalation on Android and Linux Systems
A newly disclosed Linux kernel vulnerability, dubbed "Bad Epoll" and tracked as CVE-2026-46242, allows unprivileged local users to gain full root access…
North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets
Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup…
Armored Likho Targets Government and Power Sector with BusySnake Stealer
A previously undocumented threat actor, Armored Likho, has been attributed to cyber attacks targeting government agencies and the electric power sector across…
European Parliament Member Investigating Spyware Was Hacked With Pegasus
A new report from the Citizen Lab reveals that former Member of the European Parliament Stelios Kouloglou had his mobile device repeatedly…
PamStealer macOS Malware Uses Fake Maccy Sites and PAM Checks to Steal Login Passwords
Cybersecurity researchers at Jamf Threat Labs have discovered a new macOS information stealer named PamStealer that uses sophisticated techniques to infect systems…
Weekly Cybersecurity Recap: Linux Kernel Flaws, AI Malware, Turla Backdoor, and Infostealers
This week's cybersecurity landscape highlighted significant threats including a new Linux kernel flaw, AI-assisted malware, and active exploitation of critical vulnerabilities. The…
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
A public proof-of-concept (PoC) has been released for CVE-2026-55200, a critical vulnerability in the libssh2 client-side SSH library. The flaw, with a…