Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article reveals that the threat actor TeamPCP has been compromising internet-facing infrastructure since at least 2020, evolving from initial Redis attacks to supply chain campaigns. The group has targeted platforms like Ray, Docker, and Next.js to build botnets and deploy ransomware.
This article from CrowdStrike mentions threat hunting for shell command obfuscation on VMware ESX, but no further content is provided. The summary is based on the title alone as the article body is empty.
Apple macOS contains a vulnerability that allows remote attackers to bypass security restrictions. Affected versions include prior to Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1.
OpenAI is rolling out a major ChatGPT upgrade, with GPT-5.6 Sol for Plus and Pro users and GPT-5.6 Luna for free users. Free users receive unlimited text chats, expanding access to advanced AI capabilities.
OpenAI is rolling out a major ChatGPT upgrade, with GPT-5.6 Sol for Plus and Pro users and GPT-5.6 Luna for free users. Free users receive unlimited text chats, expanding access to advanced AI capabilities.
A Go-based infostealer malware is delivered via ClickFix attacks on macOS. It steals cryptocurrency assets, browser-stored passwords, Apple Keychain data, and cached credentials. This poses a significant threat to macOS users' digital assets.