News & Map
3,914 items on Cyberstrategy — showing 2521–2560 · 3,101 without coordinates · Across the network · RSS
Apple Zero-Day Vulnerability Weaponized in Targeted Attacks
Attackers are exploiting CVE-2026-86950, an out-of-bounds write flaw, in an extremely sophisticated fashion, according t...
No location · Sep 29, 2026 · WedgetailAttackers exploited Citrix NetScaler zero-day for at least three weeks undetected
Mandiant researchers said dozens of organizations have been impacted by attacks attributed to advanced and suspected sta...
No location · Sep 29, 2026 · WedgetailUnsloth Studio Flaw Turns Routine Model Inspection Into Code Execution
A patched Unsloth Studio vulnerability allows malicious AI models to execute arbitrary Python code during inspection, vi...
No location · Sep 29, 2026 · WedgetailRussian hackers Star Blizzard expand targeting, change up tactics to reach Ukraine and beyond
Microsoft says the cyberespionage campaign has hit U.S. and U.K. targets, relying on sheer volume and requiring only a s...
No location · Sep 29, 2026 · WedgetailUS is looking to weave AI into critical infrastructure for cybersecurity, national cyber director says
Sean Cairncross said CEOs need to be cognizant of how it’s being used, however. The post US is looking to weave AI into ...
No location · Sep 29, 2026 · WedgetailFrench Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
An attacker used stolen passwords of staff at France's tax administration to take tax data on hundreds of thousands of t...
No location · Sep 29, 2026 · WedgetailNew Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
A group of academics from VUSec and Scuola Superiore Sant'Anna have disclosed details of a new Spectre CPU vulnerability...
No location · Sep 29, 2026 · WedgetailRussia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor
Russian state hackers known as Star Blizzard have been using fake event invitations to trick people into installing a ba...
No location · Sep 29, 2026 · WedgetailCloudflare Announces Public Certificate Authority for the Post-Quantum Web
Automated certificates for everyone, built for today, and hardened for the era of quantum computing.
No location · Sep 29, 2026 · WedgetailBeyond source code: A path to the keys to the kingdom
Explore how Storm-3068 turned a compromised identity into broader cloud access and the steps organizations can take to d...
No location · Sep 29, 2026 · WedgetailAlleged ShinyHunters leader arrested in the Netherlands
The arrest of a 24-year-old man in Amsterdam, which occurred a week before ShinyHunters hacked the FBI, marks a major tu...
Amsterdam, Netherlands · Sep 29, 2026 · Wedgetail'NeedyMantis' Provides Long-Term Access to Compromised Networks
Microsoft observed a China-based actor using a previously unidentified malware framework in targeted intrusions against ...
No location · Sep 29, 2026 · WedgetailStar Blizzard refines phishing and malware delivery with the RedFlick technique
Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capab...
No location · Sep 29, 2026 · WedgetailStar Blizzard refines phishing and malware delivery with the RedFlick technique
Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capab...
No location · Sep 29, 2026 · WedgetailRatHat's Evolving C2 Panel Points to Malware-as-a-Service Model
RatHat's C2 panel now builds malware and ranks victims with AI across nearly 100 deployments
No location · Sep 29, 2026 · WedgetailDual NetScaler Zero-Days Trigger Chaos for Citrix Customers
The critical vulnerabilities, which impact default configurations of NetScaler products, essentially give attackers a sk...
No location · Sep 29, 2026 · WedgetailKiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown
Kiteworks on Monday said it worked with federal intelligence authorities over the weekend as it identified and addressed...
No location · Sep 29, 2026 · WedgetailKiteworks lifts shutdown advisory after ‘credible threat intelligence’ from federal authorities
The company said it found and patched a previously unknown critical vulnerability in one product during the weekend shut...
No location · Sep 29, 2026 · WedgetailDefending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances
Introduction In late September 2026, Mandiant Consulting and Google Threat Intelligence Group (GTIG) identified active, ...
No location · Sep 29, 2026 · WedgetailAmazon Bedrock AgentCore Flaws Could Expose AWS Credentials
AWS AgentCore SDK flaws could let attackers run commands in AI sandboxes and reach AWS credentials
No location · Sep 29, 2026 · Wedgetail101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent
Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp...
No location · Sep 29, 2026 · WedgetailMicrosoft Warns NeedyMantis Malware Enables Persistent Network Access
Microsoft Threat Intelligence warns that NeedyMantis threat actor from China has targeted organizations across a range o...
China · Sep 29, 2026 · WedgetailUsing Device Linking to Eavesdrop on WhatsApp and Signal
Modern messaging apps allow users to link their phone accounts to their computer desktop. Eavesdroppers are taking advan...
No location · Sep 29, 2026 · WedgetailSecuring the keys to the kingdom: Announcing Executive Threat Detection
This new proactive service joins the suite of retainer offerings to provide dedicated, intelligence-led hunting specific...
No location · Sep 29, 2026 · WedgetailJapanese Railway Operators Hit with Weekend Cyber Attacks
Tokyo Metro and Keio have revealed separate cyber-attacks
No location · Sep 29, 2026 · WedgetailKiteworks Urges Customers to Restart Systems After Shutdown Notice
Kiteworks has lifted a temporary shutdown recommendation which was issued on the back of federal intelligence
No location · Sep 29, 2026 · WedgetailDutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters...
Amsterdam, Netherlands · Sep 29, 2026 · WedgetailOfficial MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth crede...
No location · Sep 29, 2026 · WedgetailOpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot
OpenAI said it has made the decision to pause training of its most powerful models after one of its agents during reinfo...
No location · Sep 29, 2026 · WedgetailNvidia unveils tools to keep rogue AI agents in check
The new software platform can monitor the behavior of agents and quarantine suspicious ones, the company said.
No location · Sep 28, 2026 · WedgetailHegseth orders cyber, intelligence agencies to prioritize election defense
The directive comes as the administration has dismantled or reorganized offices that tracked foreign influence and reduc...
No location · Sep 28, 2026 · WedgetailNvidia Launches AI Agent Safety Platform to Prevent Rogue Activities
The Open Agent Safety Platform relies on hardware and software components to monitor agent activities and quarantine unr...
No location · Sep 28, 2026 · WedgetailOne Packet Can Crash OT Servers in Industrial Sectors
A high-severity vulnerability affects the TDengine time-series database used across industrial, IoT, energy, and automot...
No location · Sep 28, 2026 · WedgetailCarbonato Botnet Puts an AI Agent on Hacked Docker Hosts
The botnet uses the open source Hermes Agent AI framework to execute commands via Telegram and steal AI API keys from ex...
No location · Sep 28, 2026 · WedgetailApple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks
Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said ...
No location · Sep 28, 2026 · WedgetailAI Agents Are Privileged Users; Who Is Auditing Their Access?
Enterprises regularly rigorously monitor human employees, while autonomous AI agents quietly operate with broad privileg...
No location · Sep 28, 2026 · WedgetailHackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks
Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached...
No location · Sep 28, 2026 · WedgetailIAM for AI agents: A Practical Enterprise Framework
What is IAM for AI agents? AI agents authenticate, invoke tools, and act across enterprise systems with delegated author...
No location · Sep 28, 2026 · WedgetailBitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M
The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability ...
No location · Sep 28, 2026 · WedgetailRatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims
RatHat's operators build and publish the Android banking trojan and control infected phones from a web console, accordin...
No location · Sep 28, 2026 · Wedgetail3,101 of 3,914 items have no coordinates and so are listed but not mapped.