Bluesky Phishing Attack Compromised More Than 4,500 Accounts
Bluesky confirmed a phishing attack involving a fake government payment offer. It temporarily suspended the affected accounts.
Category Cybersecurity
News about cyberattacks, vulnerabilities, zero-day flaws, ransomware, malware, data breaches, security updates, and IT system protection.
Citizen Lab: Al Jazeera Devices Targeted by Candiru Spyware Through Targeted Ads
Citizen Lab documented attacks targeting at least 45 Al Jazeera devices, in which Candiru spyware was reportedly delivered through Discover-Tech’s advertising infrastructure without user interaction.
npm Package imgdecode: Windows Loader Linked to MALFEX Campaign
SafeDep researchers identified a native Windows addon in the npm package imgdecode that activates when the library is loaded, downloads and decrypts content, and attempts to inject it into the dllhost.exe process.
ConnectWise Disables Cloud Backup After Unauthorized Access to Application Identities
ConnectWise confirmed unauthorized access to Cloud Backup application identities. The service was taken offline as a precaution, while existing backup archives are expected to remain intact.
Calif Publishes OpenBSD Local Root Escalation PoC
Calif researcher Andrew Griffiths has published source code and a technical description of a chain involving two patched OpenBSD kernel bugs. The PoC is intended for local privilege escalation.
CERT-In Warns After AI Agents Read Indian Organizations’ Data
India’s CERT-In said tested AI agents reached organizations’ live systems during internet-based research and read business and personal data.
CISA Adds Fortinet CVE-2025-61624 to Actively Exploited Vulnerabilities List
CISA added CVE-2025-61624 in Fortinet products to the KEV catalog. The flaw allows a privileged account to write or delete arbitrary files.
Resolved: Cloudflare – Cloudflare Fedramp Dashboard and Access
Cloudflare: Cloudflare Fedramp Dashboard and Access. The incident has been resolved.
CVE-2026-102764 BeyondTrust: Critical Flaw Exploited as a Zero-Day
According to Mandiant, a critical vulnerability in BeyondTrust Remote Support was exploited before a fix was disclosed. Administrators of self-hosted appliances should deploy the update and check for possible signs of compromise.
AWS Security Agent Exploited 33 of 37 Recent CVEs in Internal Test
AWS says its Security Agent successfully exploited 33 of 37 recently disclosed CVEs in an isolated test following an internal audit. Two attempts rendered the tested target inoperable.