⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Malwarebytes discovered a new remote-access Trojan called Kothamine Agent that uses Tailscale's tailcat tool for encrypted command-and-control, making it harder to detect. It is linked to malicious npm packages and can steal browser data and record through the camera and microphone.
Training human-resource managers in the latest tactics and warning signs goes a long way toward blunting the threat, but automated analysis can help even more.
Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign . The affected GitHub Actions are listed below - actions-cool/issues-helper actions-cool/maintain-one-comment Visiting either of the repositories now shows the message: "Access to this repository has been disabled by GitHub Staff due to a violation of GitHub's terms of service.
Introduction As an update to the June 2026 post, ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit, Mandiant and Google Threat Intelligence Group (GTIG) have identified renewed mass exploitation of CVE-2026-35273 by UNC6240 (ShinyHunters), along with expanded global targeting across multiple sectors. In June, the threat actor exploited this vulnerability as a zero-day predominantly against academic institutions.
ATT&CK-based detection for federal agencies requires deploying detection rules mapped to MITRE ATT&CK techniques, translating them to the agency's SIEM, and measuring coverage to produce auditable evidence. The three key components are a detection content source, a translation layer, and a coverage measurement loop.
Cybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered using a server-side decryption chain. The latest artifacts, per Jamf Threat Labs, continue to rely on the same JavaScript for Automation (JXA) dropper mechanism, but modify the lure and the delivery method.