Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
We tracked a cryptocurrency-mining campaign exploiting CVE-2026-33017, which revealed how threat actors are now scanning exposed AI application infrastructure for their next foothold.
Trend Micro tracked a cryptomining campaign exploiting CVE-2026-33017, revealing how threat actors scan exposed AI application infrastructure for footholds. The attackers deploy Monero miners on compromised systems.
Trend Micro tracked a cryptomining campaign exploiting CVE-2026-33017, revealing how threat actors scan exposed AI application infrastructure for footholds. The attackers deploy Monero miners on compromised systems.
Unit 42 research details how attackers could exploit global name uniqueness in bucket hijacking to redirect cloud data streams across major CSPs. The post The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration appeared first on Unit 42.
Unit 42 research details how attackers could exploit global name uniqueness in bucket hijacking to redirect cloud data streams across major CSPs.
In May 2026 an attacker compromised a UK medical practice endpoint without delivering a single malicious file. They used PowerShell and the .NET compiler built into Windows to build a Remcos remote access trojan on the machine itself, so signature antivirus had no known sample to match.