⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks
This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an...
Hacking
Category Added in a WPeMatico Campaign
FOMO in the SOC: Where AI Platforms like Claude Actually Fit
AI is moving incredibly fast, and every security leader is feeling the pressure to keep up. AI platforms like Claude,...
Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS
Ravie LakshmananAug 03, 2026Mobile Security / Vulnerability An unknown Chinese-threat actor has been observed running a campaign targeting Apple iOS...
PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web
Swati KhandelwalAug 03, 2026Data Breach / Dark Web The Police National Legal Database (PNLD) has confirmed that police, government and...
Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable
Swati KhandelwalAug 03, 2026Data Security / Vulnerability Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification...
N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete
Swati KhandelwalAug 03, 2026Vulnerability / Endpoint Security N-able said attackers exploited an authentication bypass in N-central to gain remote administrative...
Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code
Ravie LakshmananAug 03, 2026Vulnerability / AI Security Three high-severity security flaws have been disclosed in Hugging Face's Diffusers library that...
Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
Swati KhandelwalAug 01, 2026Vulnerability / Threat Intelligence An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking...
Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites
Swati KhandelwalAug 01, 2026Web Security / Supply Chain Attack Attackers modified a JavaScript file served by advertising technology company Adform,...
Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction
Ravie LakshmananAug 01, 2026Vulnerability / Enterprise Security Adobe has released security updates to address a maximum-severity security flaw in Campaign...
Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware
Swati KhandelwalAug 01, 2026Malware / Cyber Espionage A fake browser update served over hijacked hotel Wi-Fi has been used to...
Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk
A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located...
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm
Ravie LakshmananJul 31, 2026Endpoint Security / Malware Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called...
Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies
Bitsight says some cheap Android TV boxes have shipped with apps that rewrite their hardware identity to mimic Samsung, Huawei,...
Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined
Ravie LakshmananJul 31, 2026Vulnerability / Browser Security Google on Thursday announced that it fixed a whopping 1,072 security bugs in...
