⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The Cybersecurity and Infrastructure Security Agency (CISA) and FBI updated an advisory on the group initially released in March 2025 — writing that as of April 2026, Medusa actors have hit more than 500 victims. CISA previously said 300 victims, many of which are in critical infrastructure sectors, were attacked as of 2025.
Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it said could allow a single click on a crafted link to silently pull data from connected apps and other information available to the victim's Copilot session. The flaws, which the researchers collectively named CoSnitch , turn in part on an undocumented URL parameter that the assistant itself surfaced during testing.
Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence (AI) platform, and FUXA, an open-source, web-based SCADA / HMI software built for operational technology (OT) and industrial automation, are witnessing malicious scanning and exploitation efforts. According to independent reports from watchTowr and VulnCheck, the vulnerabilities in question are as follows - CVE-2026-64849 (CVSS score: 9.
A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to decrypt credentials, enumerate file repositories, and steal files.
MacSync Stealer is a macOS-focused information stealer that relies on changing infrastructure to deliver payloads and communicate with compromised systems. Microsoft Defender Experts expanded the view of this threat by correlating recurring endpoints and network indicators, building on earlier reporting by RST Cloud that identified the threat through a limited set of domains and documented rapid command-and-control replacement.
AWS Security Hub Extended has grown from 14 curated partners across 9 categories to 23 partners across 10 categories, with Supply Chain Security joining as the tenth category. At Black Hat this month, 14 partners demonstrated at the AWS booth, with four delivering theater talks and ten featured on SecurityLive streaming.