Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware Ravie LakshmananSep 25, 2026Malware / Supply Chain Attack Two actions-cool…
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence Ravie LakshmananSep 25, 2026Malware / Social Engineering Cybersecurity researchers have flagged…
Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise Ravie LakshmananSep 25, 2026Cryptocurrency / Cybercrime Cryptocurrency exchange Bitget said suspected…
The SOC Doesn't Need to Start Over with Every Alert The Hacker NewsSep 25, 2026Artificial Intelligence / Security Operations Security leaders keep…
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild Ravie LakshmananSep 25, 2026Vulnerability / Email Security The Canadian Centre for Cyber…
Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data Swati KhandelwalSep 25, 2026Cloud Security / Vulnerability A flaw…
WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV Ravie LakshmananSep 25, 2026Vulnerability / Web Security The U.S. Cybersecurity…
Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions Swati KhandelwalSep 24, 2026Vulnerability / Mobile Security A OnePlus 15 running…
ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories Ravie LakshmananSep 24, 2026Hacking News /…
Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content Ravie LakshmananSep 24, 2026Phishing / Malware The "third-party[.]com" domain, commonly used as…