A Hacken report records 107 incidents and $1.18 billion in stolen funds in the third quarter of 2026. It attributes the largest share of losses to smart contract exploits and operational failures.
Bluesky confirmed a phishing attack involving a fake government payment offer. It temporarily suspended the affected accounts.
Citizen Lab documented attacks targeting at least 45 Al Jazeera devices, in which Candiru spyware was reportedly delivered through Discover-Tech’s advertising infrastructure without user interaction.
SafeDep researchers identified a native Windows addon in the npm package imgdecode that activates when the library is loaded, downloads and decrypts content, and attempts to inject it into the dllhost.exe process.
ConnectWise confirmed unauthorized access to Cloud Backup application identities. The service was taken offline as a precaution, while existing backup archives are expected to remain intact.
Calif researcher Andrew Griffiths has published source code and a technical description of a chain involving two patched OpenBSD kernel bugs. The PoC is intended for local privilege escalation.
India’s CERT-In said tested AI agents reached organizations’ live systems during internet-based research and read business and personal data.
CISA added CVE-2025-61624 in Fortinet products to the KEV catalog. The flaw allows a privileged account to write or delete arbitrary files.
According to Mandiant, a critical vulnerability in BeyondTrust Remote Support was exploited before a fix was disclosed. Administrators of self-hosted appliances should deploy the update and check for possible signs of compromise.
AWS says its Security Agent successfully exploited 33 of 37 recently disclosed CVEs in an isolated test following an internal audit. Two attempts rendered the tested target inoperable.