News & Map
3,914 items on Cyberstrategy — showing 2921–2960 · 3,101 without coordinates · Across the network · RSS
An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.
In July 2025, someone registered a domain that used to belong to a content delivery network. The CDN had been wound down...
No location · Sep 18, 2026 · WedgetailPlugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
A flaw in four widely used AI coding agents lets someone who controls a plugin's code repository swap the plugin an agen...
No location · Sep 18, 2026 · WedgetailWeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
Cybersecurity researchers have discovered a cluster of 13 npm packages that have been found to deliver a previously undo...
No location · Sep 18, 2026 · WedgetailCISA Upgrades Vulnerability Reporting Platform with More Automation
The US cybersecurity agency is moving to a new vulnerability coordination platform called VINCE-NT
No location · Sep 18, 2026 · WedgetailClaimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
A financially motivated threat actor has been linked to the development and distribution of a JavaScript (JS)-based info...
No location · Sep 18, 2026 · Wedgetail‘Nudify’ apps: What to do if someone makes a fake nude of you
Whether you’re a victim, the parent of a victim, or just concerned, here’s what you can do about fake nude images
No location · Sep 18, 2026 · WedgetailManufacturing Accounts for 22% of all Ransomware Victims
Black Kite has found that manufacturing remained the most targeted sector for ransomware attacks, and saw a big jump in ...
No location · Sep 18, 2026 · WedgetailAI Agent Breaches Spanish Organization, Modifies Personal Data
AI-driven cyberattacks used to be exotic. Soon, it'll be odd if threat actors aren't using agents to do all of their bid...
No location · Sep 18, 2026 · WedgetailRatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
Cybersecurity researchers have flagged a new Android malware called RatHat that's assessed to be operated by China-based...
No location · Sep 18, 2026 · WedgetailClaiming the Kill: Attribution and False-Flagging in Cyber Offense
Abstract In this article, we highlight the roles of attribution and false-flagging in cyber offense operations. Drawing ...
No location · Sep 18, 2026 · WedgetailResponding to the Risks of Open-Weight AI Models
Open-weight AI models place powerful capabilities beyond any developer’s control. The UK should clarify how its investig...
No location · Sep 17, 2026 · WedgetailTrump’s Risky Hack-Back Plan
The U.S. president wants tech companies to go on the cyber-offensive. Will it work?
No location · Sep 17, 2026 · WedgetailCISA Ditches Weekly Vulnerability Roundups for Risk-Based Focus
The move is consistent with the agency's advice on the need for organizations to prioritize the vulnerabilities that act...
No location · Sep 17, 2026 · WedgetailCisco alerts customers to second actively exploited zero-day in as many days
The latest zero-day has a maximum-severity rating and affects Cisco Identity Services Engine, a product hit with three a...
No location · Sep 17, 2026 · WedgetailCMSSF highlights cyber Guardians’ role in creating joint decision advantage
CMSSF Bentivegna detailed the service's "train, test and trust" approach to developing mission-ready cyber operators cap...
No location · Sep 17, 2026 · WedgetailThe AI hacking apocalypse is not inevitable
While large language models present real risks to society, experts say they can be tested and largely controlled using w...
No location · Sep 17, 2026 · WedgetailChina's FamousSparrow APT Spies on US Politics in Latin America
Amid the US and China's fight for eco-colonial influence in Latin America, a stealthy backdoor has taken flight.
No location · Sep 17, 2026 · WedgetailCritical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login cred...
No location · Sep 17, 2026 · WedgetailThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories
Attackers keep finding new keys. The funny part is that defenders keep inventing where to store them. This week, those k...
No location · Sep 17, 2026 · WedgetailImproving email security outcomes with real-world Microsoft Defender insights
The latest email security benchmarking reports show strong Microsoft Defender performance across pre-delivery and post-d...
No location · Sep 17, 2026 · WedgetailCritical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into...
No location · Sep 17, 2026 · WedgetailFamousSparrow Swaps SparrowDoor For New SparroWocky Backdoor
ESET said FamousSparrow has replaced SparrowDoor with SparroWocky
No location · Sep 17, 2026 · WedgetailIran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords
The Iran-linked "hacktivist" persona known as Handala Hack has been attributed to a Telegram-based surveillance backdoor...
No location · Sep 17, 2026 · WedgetailCISA Urges Critical Infrastructure to Plant Decoys Inside Networks
CISA released guidance on using cyber decoys to detect & disrupt malicious activity inside networks
No location · Sep 17, 2026 · WedgetailAuthorities seize popular, long-running DDoS-for-hire service domains
Cybercriminals used NightmareStresser to launch hundreds of thousands of DDoS attacks since at least 2022. Threat actors...
No location · Sep 17, 2026 · WedgetailThe Odyssey and Trojans again: MovieReaper attacks users in multiple countries through compromised torrents
Kaspersky experts have discovered a new MovieReaper campaign. The multi-stage Trojan spreads through movie torrents, suc...
No location · Sep 17, 2026 · WedgetailNew Chinese-Made ‘RatHat’ Android Malware Leverages AI to Steal Financial Data
Researchers at Zimperium have uncovered a new Android malware strain, dubbed RatHat, with spyware and backdoor capabilit...
China · Sep 17, 2026 · WedgetailCritical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer...
No location · Sep 17, 2026 · WedgetailCyber Essentials Has Record Year but Takeup Remains Low
New government figures reveal a 20% annual increase in certifications
United Kingdom · Sep 17, 2026 · WedgetailCisco Warns of Active Exploitation of Critical ISE Flaw
Cisco urged ISE customers to apply a software update, as well as check for signs of exploitation
No location · Sep 17, 2026 · WedgetailChina-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America
The China-aligned state-sponsored threat actor known as FamousSparrow has been observed deploying a previously unreporte...
China · Sep 17, 2026 · WedgetailRansomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use
Ransomware incidents in Japan rose 4.7% year over year. The Gentlemen was the most active group, with leak-site listings...
Japan · Sep 17, 2026 · WedgetailAmerica’s cyber strategy overlooks the infrastructure that actually keeps the military moving
Ports, railroads, and utilities keep the military operational. They're all vulnerable to Iranian cyberattacks. The post ...
Washington, United States · Sep 17, 2026 · WedgetailOpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads
OpenAI on Wednesday disclosed six new instances of "unexpected or concerning model behavior" that took place over the pa...
San Francisco, United States · Sep 17, 2026 · WedgetailBeware the SparroWock: The backdoor that bites, the commands that catch
ESET researchers document SparroWocky, the new flagship backdoor of the FamousSparrow APT group
Washington, United States · Sep 17, 2026 · WedgetailAI Agent Carries Out Multi-Stage Data Theft Attack
Spanish data protection agency AEPD reveals the country’s first AI-powered data breach
Madrid, Spain · Sep 17, 2026 · WedgetailBIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS
The Internet Systems Consortium (ISC) has released BIND 9.20.29 and 9.21.26 to fix fourteen security flaws it disclosed ...
Cambridge, United States · Sep 17, 2026 · WedgetailGyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records
A security breach at Gyazo, Helpfeel's image-sharing service, exposed about 23.62 million user records, including email ...
Tokyo, Japan · Sep 17, 2026 · WedgetailCisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks
Cisco has warned of a fresh maximum-severity security flaw impacting Identity Services Engine (ISE) that has come under ...
San Jose, United States · Sep 17, 2026 · WedgetailOn research security, our divisions are the real vulnerability
Scholars named in public for entanglement with a foreign regime, international research collaborations quietly binned, a...
Canberra, Australia · Sep 17, 2026 · Wedgetail3,101 of 3,914 items have no coordinates and so are listed but not mapped.