News & Map
3,914 items on Cyberstrategy — showing 2561–2600 · 3,101 without coordinates · Across the network · RSS
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions
A purported ad-blocker exfiltrates reams of sensitive information and benefits from having Google's stamp of approval de...
No location · Sep 28, 2026 · WedgetailJadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack
The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applica...
No location · Sep 28, 2026 · WedgetailDutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts...
No location · Sep 28, 2026 · WedgetailBitget Restarts Bitcoin Withdrawals Following $387.5m Wallet Breach
Bitget has restarted Bitcoin withdrawals after a $387.5m breach of its hot and warm wallets
No location · Sep 28, 2026 · WedgetailNeedyMantis: Unpacking a post-compromise malware family used in targeted operations
Microsoft Threat Intelligence identified NeedyMantis, a modular post-compromise malware framework used in targeted intru...
No location · Sep 28, 2026 · Wedgetail⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and star...
No location · Sep 28, 2026 · WedgetailNVIDIA Launches Open Platform to Secure Autonomous AI Agents
NVIDIA has launched a platform pairing runtime controls with hardware monitoring for AI agents
No location · Sep 28, 2026 · WedgetailDeepfakes Are Becoming a Costly Reality for Businesses, Report Warns
A quarter of victims of deepfake attacks have lost over $1m. CISOs worry that boardrooms don’t understand the threat
No location · Sep 28, 2026 · WedgetailWebinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI
AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling d...
No location · Sep 28, 2026 · WedgetailCarbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docke...
No location · Sep 28, 2026 · WedgetailNew Attack Against RSA
ArsTechnica is reporting on a “new” attack against RSA, one that bypasses factoring. First, this attack isn’t new. The o...
No location · Sep 28, 2026 · WedgetailMCP Is Creating Major Governance Gaps, Researchers Warn
Ox Security found security shortcomings in analysis of over 15,000 MCP servers
No location · Sep 28, 2026 · WedgetailJADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources
The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure enviro...
No location · Sep 28, 2026 · WedgetailThe devil is still in the email – but wears a new mask
When phishing can increasingly pass familiar checks, avoiding or limiting the damage depends on how quickly your company...
No location · Sep 28, 2026 · WedgetailCitrix Patches Critical Zero Days Under Active Exploitation
Citrix has confirmed exploitation of two critical zero-day RCE bugs
No location · Sep 28, 2026 · WedgetailCISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and G...
No location · Sep 28, 2026 · WedgetailWhen weapons can learn, humans need to stay in control
AI weapons systems that are designed to learn and adapt could become increasingly difficult for humans to predict, expla...
No location · Sep 28, 2026 · WedgetailWarning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
Two critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway that allow remote code execution have been ex...
No location · Sep 27, 2026 · WedgetailLunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verificat...
No location · Sep 26, 2026 · WedgetailAttackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campa...
No location · Sep 26, 2026 · WedgetailZero Trust for AI Agents Starts With Fixing Zero Visibility
The way we talk about AI agents is shifting, and the way we implement them requires an even more fundamental shift. Whil...
No location · Sep 26, 2026 · WedgetailElementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link
Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be...
No location · Sep 26, 2026 · WedgetailSharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft ...
No location · Sep 26, 2026 · WedgetailKiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack
Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary measure for nine hours ...
No location · Sep 26, 2026 · WedgetailU.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call an...
No location · Sep 25, 2026 · WedgetailWhy the CISO-CFO Relationship Is a Key to Cybersecurity Success
Organizations where CISOs and CFOs align on cybersecurity strategy to protect assets, manage risk, and enable business g...
No location · Sep 25, 2026 · WedgetailAI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment
When autonomous AI agents "escape the sandbox," the real story isn't rogue machines — it's the same access-control failu...
No location · Sep 25, 2026 · WedgetailStorm-3168: Agentic-driven cloud attacks using compromised service principals
Microsoft details JADEPUFFER-linked Azure reconnaissance, resource deletion, and credential access using compromised ser...
No location · Sep 25, 2026 · WedgetailStorm-3168: Agentic-driven cloud attacks using compromised service principals
Microsoft details JADEPUFFER-linked Azure reconnaissance, resource deletion, and credential access using compromised ser...
No location · Sep 25, 2026 · WedgetailStopping IT Worker Scams Requires Revamped HR Process
Training human-resource managers in the latest tactics and warning signs goes a long way toward blunting the threat, but...
No location · Sep 25, 2026 · WedgetailShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft
Introduction As an update to the June 2026 post, ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit, M...
No location · Sep 25, 2026 · WedgetailZero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection ...
United States · Sep 25, 2026 · WedgetailCISA Unveils Election Security Plan Ahead of 2026 Midterms
The CISA plan provides guidance and resources for election officials to secure systems such as voter registration databa...
United States · Sep 25, 2026 · WedgetailOn Anthropic’s AI Misuse Report
Earlier this month, Anthropic published a long report detailing all of the Claude misuses it detected. Daniel Meissler u...
No location · Sep 25, 2026 · WedgetailRemControl Banking Trojan Gives Attackers Remote Control of Android Devices
The newly-discovered trojan abuses the Android Accessibility Service to gain control over victim devices and collect sen...
No location · Sep 25, 2026 · WedgetailResearchers Identify AliExpress Phishing Domains Before Registration
EfficientIP says it flagged AliExpress phishing domains before they were registered
No location · Sep 25, 2026 · WedgetailRussia's Hybrid Cyber-Physical War in Europe Heats Up
A storm is raging in the form of cyber sabotage, disinformation, and drone attacks on European nations, particularly tho...
No location · Sep 25, 2026 · WedgetailHostile acts without intent: AI and the Medicare breach
A hack of Australia’s government systems should have us all asking, “who’s in control of agentic AI?”
No location · Sep 25, 2026 · WedgetailRussia looking to escalate hybrid war, Denmark warns
Denmark’s intelligence service warned that there is a “low but growing risk” of direct attack by Moscow.
No location · Sep 24, 2026 · Wedgetail'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications c...
No location · Sep 24, 2026 · Wedgetail3,101 of 3,914 items have no coordinates and so are listed but not mapped.