⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence (AI) platform, and FUXA, an open-source, web-based SCADA / HMI software built for operational technology (OT) and industrial automation, are witnessing malicious scanning and exploitation efforts. According to independent reports from watchTowr and VulnCheck, the vulnerabilities in question are as follows - CVE-2026-64849 (CVSS score: 9.
A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to decrypt credentials, enumerate file repositories, and steal files.
MacSync Stealer is a macOS-focused information stealer that relies on changing infrastructure to deliver payloads and communicate with compromised systems. Microsoft Defender Experts expanded the view of this threat by correlating recurring endpoints and network indicators, building on earlier reporting by RST Cloud that identified the threat through a limited set of domains and documented rapid command-and-control replacement.
AWS Security Hub Extended has grown from 14 curated partners across 9 categories to 23 partners across 10 categories, with Supply Chain Security joining as the tenth category. At Black Hat this month, 14 partners demonstrated at the AWS booth, with four delivering theater talks and ten featured on SecurityLive streaming.
A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations, offering to delete stolen data from ransomware groups' servers in exchange for fees ranging from $20,000 to $60,000. This behavior is anomalous because cybersecurity firms typically only reach out after an attack becomes public knowledge.
In Part 4 , we stole every document from every index, planted a rogue superuser account, created credential-independent API keys, and planted three persistence mechanisms that survive password rotations. Everything was logged.