News & Map
3,913 items on Cyberstrategy — showing 3361–3400 · 3,100 without coordinates · Across the network · RSS
Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons
Gambling Goblin compromised Brazilian government sites to drive gambling traffic through SEO fraud
No location · Sep 02, 2026 · WedgetailMalicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on ...
No location · Sep 02, 2026 · WedgetailBGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then use...
No location · Sep 02, 2026 · WedgetailMeta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control
Cybersecurity researchers have disclosed details of a new Android banking trojan called StreamRat that was promoted to S...
No location · Sep 02, 2026 · WedgetailAttackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 seri...
No location · Sep 02, 2026 · WedgetailNutex Health Says Patient Data Stolen, Hackers Threaten Leak
The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business informat...
No location · Sep 02, 2026 · WedgetailWireless Routers as Motion Detectors
Comcast has added motion detection as a feature to its wireless routers: The feature sends push notifications to users w...
No location · Sep 02, 2026 · WedgetailGeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-sour...
No location · Sep 02, 2026 · WedgetailExtradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
The U.S. Department of Justice (DoJ) has charged a Russian national, extradited from Cyprus on August 28, with using rou...
No location · Sep 02, 2026 · WedgetailHackers Chain Two New SonicWall Zero-Day Vulnerabilities
SonicWall has urged customers to patch two new zero-day vulnerabilities being exploited in the wild
No location · Sep 02, 2026 · WedgetailFulcrumSec Claims Responsibility for Manchester Airport Group Breach
Threat group FulcrumSec claims MAG breach and leaks 550GB of data online
No location · Sep 02, 2026 · WedgetailEuropean Resilience in Digital Infrastructure: The Changing Nature of State-Business Relations
As the war in Ukraine progressed, Russian strikes increasingly degraded Ukraine’s terrestrial communications infrastruct...
No location · Sep 02, 2026 · WedgetailResearchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
Forescout Research - Vedere Labs said it used Anthropic's Claude to port a working pre-authentication remote code execut...
No location · Sep 02, 2026 · WedgetailAttackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that cou...
No location · Sep 02, 2026 · WedgetailAuthorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads
The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-peer (P2P) botnet know...
No location · Sep 02, 2026 · WedgetailTech giants are trying to obliterate privacy. Australia has a rare chance to take back part of their power | Lizzie O'Shea
‘Pervert glasses’ are selling out, tick-a-box consent is broken and the spectre of surveillance is invading all aspects ...
No location · Sep 02, 2026 · WedgetailRisky Business #851 -- Agents are just ones and zeros, and tigers are just atoms
On this week’s show Patrick Gray and James Wilson are joined by guest co-host The Grugq to talk through the week’s news,...
No location · Sep 02, 2026 · Wedgetail(untitled)
This joint advisory outlines an ongoing campaign by Russian state-sponsored cyber actors exploiting Zimbra Collaboration...
No location · Sep 02, 2026 · Wedgetail(untitled)
This advisory outlines the shift in tactics, techniques and procedures used by China-nexus cyber actors to target organi...
No location · Sep 02, 2026 · WedgetailOld, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency
Threat actors exploited commodity vulnerabilities in ownCloud to gain initial access, resulting in stolen reactor databa...
No location · Sep 02, 2026 · WedgetailCounterfeit installers to system compromise: Tracking a deceptive software download campaign
An active campaign is impersonating legitimate software vendors to deliver malware through look-alike download pages and...
No location · Sep 01, 2026 · WedgetailFBI Probes Service Selling 153M+ Drivers Licenses
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million driver...
No location · Sep 01, 2026 · WedgetailFBI raises alarm over deceptive phishing campaign targeting prominent people
The ongoing social engineering threat, which dates back to late 2025, tricks victims into granting threat actors long-te...
No location · Sep 01, 2026 · WedgetailAttackers Pounce on Critical Artifactory Bug Following Disclosure
CVE-2026-82329 is an authentication bypass flaw in JFrog's repository manager that enables bad actors to gain admin-leve...
No location · Sep 01, 2026 · WedgetailStronger Security Drives Ransomware Groups to Recruit From Within
Some security researchers have observed an uptick in insider-assisted ransomware attacks, but malicious insiders pose ot...
No location · Sep 01, 2026 · WedgetailCritical Langflow Vulnerability Exploited as Attacks on AI Platform Rise
The attacks targeting CVE-2026-0768 are the latest threat against the low-code AI development platform, which is receivi...
No location · Sep 01, 2026 · WedgetailAI Model Evaluator METR Hit by Credential Theft, Probing
In one attack, threat actors stole an API key that ultimately led to the consumption of $600,000 in public AI model cred...
No location · Sep 01, 2026 · WedgetailWhat the US executive order on bulk-power systems gets right—and what’s missing
The recently announced executive order on the US bulk-power system orders a sweeping review of security vulnerabilities....
No location · Sep 01, 2026 · WedgetailRussia wants to sell ‘sovereign AI’ abroad. Here’s what it’s really selling.
Russia’s new AI law puts domestic models under state control. Moscow now wants to sell the same model abroad. The post R...
No location · Sep 01, 2026 · WedgetailStopgap funding bill temporarily extends key cyber info-sharing law
The short-term package pushes the sunset date for the bedrock cyber legislation to Dec. 11.
No location · Sep 01, 2026 · WedgetailAttackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public...
No location · Sep 01, 2026 · WedgetailBreeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated thr...
No location · Sep 01, 2026 · WedgetailLeaked Russian Cyber-Operations Training Materials
This is interesting: The records describe a force-generation mechanism for several General Staff components, including t...
No location · Sep 01, 2026 · WedgetailAttackers Steal METR API Key and Burn $600,000 in AI Credits
Attackers used a stolen METR API key for three weeks, consuming model credits worth $600,000
No location · Sep 01, 2026 · Wedgetail13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed t...
No location · Sep 01, 2026 · WedgetailThe extremist risk behind smart glasses
Attackers rarely invent technology – they adapt it.
No location · Sep 01, 2026 · WedgetailFinancially Motivated Threat Actor BREEZE COMET Targets Brazil
Introduction Beginning in 2024 Mandiant investigated a string of compromises affecting Brazilian financial services, ret...
No location · Sep 01, 2026 · WedgetailWhistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots
The Federal Ballot Mail Portal is described by a federal official as one of several IT systems that will be used to pote...
No location · Sep 01, 2026 · WedgetailClickFix Campaign Compromises 31 Orgs, Abuses Polygon Blockchain
The campaign uses EtherHiding to dynamically update its command-and-control server, abusing the blockchain as an attacke...
No location · Sep 01, 2026 · Wedgetail65% of Enterprises Have Seen AI Agents Act Out of Scope
EMA survey finds 65% of enterprises have seen AI agents act beyond intended scope
No location · Sep 01, 2026 · Wedgetail3,100 of 3,913 items have no coordinates and so are listed but not mapped.