⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A campaign attributed to the Pakistan-aligned threat actor APT36 (Transparent Tribe) is targeting Afghan telecom providers and South Asian critical infrastructure with two previously undocumented backdoors: PATCHCORD, delivered via fake telecom installers, and SHEETCORD, which uses Google Sheets for command-and-control. The operator has also adopted AI-assisted malware and open-source C2 frameworks, reflecting an evolution in both targeting—shifting focus to Afghan telecoms alongside Indian government and energy sectors—and operational tradecraft.
A Black Hat USA 2026 discussion explores whether the current boom in AI-driven vulnerability discovery will eventually taper off, and whether it will result in fundamentally safer software. The debate centers on the long-term effectiveness and sustainability of automated bug hunting techniques.
AI coding tools can introduce unvetted or hallucinated open source dependencies faster than traditional security reviews can keep pace. ActiveState explains why organizations should govern packages at the point of selection, before they enter the development pipeline.
AmnesiaStealer is a Rust-based macOS information stealer distributed via fake GitHub download pages using ClickFix social engineering tactics. The malware operates in three stages: a shell script dropper, a credential and data harvesting payload that targets Keychain, browsers, Apple Notes, and Telegram, and a remote browser control module that gives attackers live, interactive access to victim's authenticated sessions via Chrome DevTools Protocol.
Discord's Go Live feature contributed to a 13-year-old girl's death by suicide, according to Brazilian regulators, who told the company to suspend the streaming technology.
Attackers target Kibana, the visualization interface for Elasticsearch, on port 5601, exploiting its API surface, plugin architecture, and history of critical vulnerabilities. This follows previous parts focusing on Elasticsearch attacks.