Archive
2,917–2,928 of 3,925 items
International security agencies warn about North Korean hackers exploiting job seekers to steal crypto, data
The U.S., Japan, Germany and Australia said WaterPlum operators pose as prospective employers and have infected more than 30,000 devices worldwide. Th...
Sep 18, 2026 · StaffOriginally on Wedgetail
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set of cyber attacks tar...
Sep 18, 2026 · StaffOriginally on Wedgetail
New Settra Ransomware Variant Deployed in Attacks on Retail and Manufacturing
Huntress researchers highlighted a new ransomware variant, named Settra, and the post-compromise techniques used in two recent attacks
Sep 18, 2026 · StaffOriginally on Wedgetail
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No cust...
Sep 18, 2026 · StaffOriginally on Wedgetail
Are AIs Still Struggling with CAPTCHAs?
Anthropic’s recent security-incident document contains a bit about how CAPTCHAs are still frustrating Claude. In the transcript, the Claude model that...
Sep 18, 2026 · StaffOriginally on Wedgetail
AI cybersecurity risks explode as Claude used to break into ChatGPT
The effort, part of a bug-hunting program, was the latest in a series of cybersecurity breaches, The Wall Street Journal noted.
Sep 18, 2026 · StaffOriginally on Wedgetail
An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.
In July 2025, someone registered a domain that used to belong to a content delivery network. The CDN had been wound down years earlier, and the domain...
Sep 18, 2026 · StaffOriginally on Wedgetail
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
A flaw in four widely used AI coding agents lets someone who controls a plugin's code repository swap the plugin an agent installs for a malicious one...
Sep 18, 2026 · StaffOriginally on Wedgetail
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
Cybersecurity researchers have discovered a cluster of 13 npm packages that have been found to deliver a previously undocumented JavaScript stealer co...
Sep 18, 2026 · StaffOriginally on Wedgetail
CISA Upgrades Vulnerability Reporting Platform with More Automation
The US cybersecurity agency is moving to a new vulnerability coordination platform called VINCE-NT
Sep 18, 2026 · StaffOriginally on Wedgetail
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
A financially motivated threat actor has been linked to the development and distribution of a JavaScript (JS)-based information stealer known as Phant...
Sep 18, 2026 · StaffOriginally on Wedgetail
‘Nudify’ apps: What to do if someone makes a fake nude of you
Whether you’re a victim, the parent of a victim, or just concerned, here’s what you can do about fake nude images
Sep 18, 2026 · StaffOriginally on Wedgetail