Archive
2,917–2,928 of 3,915 items
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set of cyber attacks tar...
Sep 18, 2026 · StaffOriginally on Wedgetail
New Settra Ransomware Variant Deployed in Attacks on Retail and Manufacturing
Huntress researchers highlighted a new ransomware variant, named Settra, and the post-compromise techniques used in two recent attacks
Sep 18, 2026 · StaffOriginally on Wedgetail
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No cust...
Sep 18, 2026 · StaffOriginally on Wedgetail
Are AIs Still Struggling with CAPTCHAs?
Anthropic’s recent security-incident document contains a bit about how CAPTCHAs are still frustrating Claude. In the transcript, the Claude model that...
Sep 18, 2026 · StaffOriginally on Wedgetail
AI cybersecurity risks explode as Claude used to break into ChatGPT
The effort, part of a bug-hunting program, was the latest in a series of cybersecurity breaches, The Wall Street Journal noted.
Sep 18, 2026 · StaffOriginally on Wedgetail
An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.
In July 2025, someone registered a domain that used to belong to a content delivery network. The CDN had been wound down years earlier, and the domain...
Sep 18, 2026 · StaffOriginally on Wedgetail
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
A flaw in four widely used AI coding agents lets someone who controls a plugin's code repository swap the plugin an agent installs for a malicious one...
Sep 18, 2026 · StaffOriginally on Wedgetail
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
Cybersecurity researchers have discovered a cluster of 13 npm packages that have been found to deliver a previously undocumented JavaScript stealer co...
Sep 18, 2026 · StaffOriginally on Wedgetail
CISA Upgrades Vulnerability Reporting Platform with More Automation
The US cybersecurity agency is moving to a new vulnerability coordination platform called VINCE-NT
Sep 18, 2026 · StaffOriginally on Wedgetail
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
A financially motivated threat actor has been linked to the development and distribution of a JavaScript (JS)-based information stealer known as Phant...
Sep 18, 2026 · StaffOriginally on Wedgetail
‘Nudify’ apps: What to do if someone makes a fake nude of you
Whether you’re a victim, the parent of a victim, or just concerned, here’s what you can do about fake nude images
Sep 18, 2026 · StaffOriginally on Wedgetail
Manufacturing Accounts for 22% of all Ransomware Victims
Black Kite has found that manufacturing remained the most targeted sector for ransomware attacks, and saw a big jump in incidents in H1 2026
Sep 18, 2026 · StaffOriginally on Wedgetail