Tag: cybersecurity

Microsoft has disclosed the TerminalFix campaign, a new ClickFix variant that uses fake Cloudflare CAPTCHA pages to deploy a reverse tunnel backdoor through Windows Terminal and PowerShell.

Awan Distribution hosted Kaspersky Partner Connect, bringing together partners to discuss the 2026 roadmap, partnership program, cybersecurity solutions, and industry collaboration.

Cosmos Labs has disclosed details of a critical Cosmos EVM vulnerability that was exploited across six blockchain networks, prompting urgent upgrade recommendations for affected chain operators.

Cybersecurity researchers have identified 19 Chrome and Edge extensions containing wallet stealing and cryptocurrency draining capabilities. The campaign has reportedly been active since February 2024 and uses compromised and newly created browser extensions.

Security researcher Olivier Laflamme has disclosed two critical vulnerabilities affecting the Unitree G1 EDU humanoid robot that could allow root remote code execution through network and Bluetooth attack paths.

ServiceNow has patched four vulnerabilities affecting its AI Platform, including three critical flaws rated CVSS 10.0 that could allow unauthenticated attackers to execute code or SQL statements.

Recorded Future has identified a new HOOKEDGE backdoor linked to APT28, targeting government and diplomatic organizations in Romania, Spain, and Türkiye through malicious Microsoft Word documents.

Sky47 and Resecurity have signed a Memorandum of Understanding to strengthen cybersecurity collaboration, enhance cyber resilience, and support secure digital infrastructure for enterprises.

Arctic Wolf has identified the new GoCaracal malware framework, linking it with medium confidence to Dark Caracal and revealing its use of Ethereum smart contracts to update command and control infrastructure.

Aikido Security recreates the Claude Opus 4.6 gym booking incident, highlighting IDOR vulnerabilities, agent behavior, and the importance of secure API design.

Security researcher uncovers the SLEEPWALKER Windows backdoor featuring a custom bytecode language, passive network activation, DLL side loading, and stealth capabilities.

CISA adds the critical Gitea remote code execution vulnerability CVE 2026 60004 to its Known Exploited Vulnerabilities catalog following reports of active exploitation.