via SecurityWeek
New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining
The Windows botnet relies on AI to maintain persistence, using xAI Grok to choose from predefined actions.
1 min Open reportThreat Intelligence
via The Hacker News
Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack
Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary measure for nine hours over the…
1 min Open report
via Palo Alto Networks Unit 42
3 Consulting Myths Debunked by Unit 42 Experts
Unit 42 security experts address critical cybersecurity misconceptions, offering practical insights to help your organization…
1 min Open report
via Krebs on Security
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text…
1 min Open report
via CyberScoop
Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies
A former Army soldier responsible for a series of attacks and extortion attempts on telecom companies, including AT&T, was…
1 min Open report
via Schneier on Security
Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee
I feel like someone who reads this blog will want to go to this: Families are invited to dive into the fascinating world of…
1 min Open report
via Zscaler ThreatLabz
Threat Actors Use Google Ads To Target Ledger Users
IntroductionIn August 2026, Zscaler ThreatLabz analyzed a phishing campaign that used fraudulent Google ads to target Ledger…
1 min Open report
via The Record
Kiteworks urges customers to stop using platform after warning from federal intelligence agencies
Frank Balonis, CISO at Kiteworks, told Recorded Future News that the company “received credible threat intelligence from federal…
1 min Open report
via The Record
Labcorp to overhaul data security practices, pay $2.3 million fine for cybersecurity failings
Security changes include creating an incident response plan for vendor security failings, limiting how much data Labcorp shares…
1 min Open report
via The Register
Fake Google Security Team ad says 'no script reading' in voice phishing - then prints the script
Yes, criminals have job listings too. A Telegram user recruiting callers to work in an apparent Google Security Team…
1 min Open report
via Canadian Centre for Cyber Security
Zimbra security advisory (AV26-964)
Serial Number: AV26-964 Date: September 25, 2026 As of September 25, 2026, Zimbra is affected by vulnerabilities in the following…
1 min Open report
via Security Affairs
Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million
Bitget says suspected North Korea-linked actors stole $351.6M from hot and warm wallets. Withdrawals were suspended while…
1 min Open report
via The Register
Crooks use fake desktop apps to fool HR staff into giving them remote access
You work in your company's human resources department and use HR software to check employee information, benefits, and payroll…
1 min Open report
via Microsoft Security
Storm-3168: Agentic-driven cloud attacks using compromised service principals
Attack overview Technical analysis Mitigation and protection guidance References Learn More Microsoft Security Research has…
1 min Open report
via Canadian Centre for Cyber Security
Mikrotik security advisory (AV26-887) – Update 2
Serial Number: AV26-887 Date: September 8, 2026 Updated: September 25, 2026 As of September 3, 2026, Mikrotik is affected by…
1 min Open report
via The Record
Crypto CEO accuses North Korea of stealing $387 million from Bitget platform
The CEO said the company has a User Protection Fund that has over $464 million and those funds will be used to cover the losses.
1 min Open report
via SecurityWeek
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw…
1 min Open report
via The Record
Cyberattack hits Welsh police force, may have affected staff data
Dyfed-Powys Police in Wales said a cyberattack affecting the force disrupted some non-emergency systems and may have compromised…
1 min Open report
via Malwarebytes Labs
Kothamine malware uses Tailscale’s tailcat to evade network detection
We discovered an undocumented remote-access Trojan (RAT) called Kothamine Agent. It supports more than 30 commands and it gives…
1 min Open report
via The Hacker News
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months…
1 min Open report