Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps
Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it said could allow a single click on...
threat
Apple Mac Malware Lets Attackers Control Browser Sessions After Infection
A routine-looking download can turn into a much bigger problem for Mac users. Jamf Threat Labs found an AmnesiaStealer campaign...
Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware
Threat actors are acquiring expired domains to inherit website traffic and reputation to redirect victims to scams and malware on...
Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor
Ravie LakshmananAug 12, 2026Vulnerability / Cyber Espionage The North Korean threat actor known as Lazarus Group has been attributed to...
US, South Korea Warn of Growing Gunra Ransomware Threat
Gunra ransomware has quickly grown from an emerging threat in South Korea into a broader international concern. U.S. and South...
Abuse of alternative runtime environments Deno-tes defender headaches
In early 2026, Sophos MDR investigated multiple intrusion cases involving a threat activity cluster that consistently abused Deno, a legitimate...
ClickFix campaign abuses Deno runtime for infostealer delivery
Counter Threat Unit™ (CTU) researchers investigated a June 2026 campaign in which threat actors used the Deno JavaScript runtime as...
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
Ravie LakshmananAug 12, 2026Vulnerability / Threat Intelligence Threat actors have begun to actively exploit a recently patched critical security flaw...
China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw
Ravie LakshmananAug 10, 2026Ransomware / Cybercrime Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has...
Canadian Man Pleads Guilty in Snowflake Extortions
A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty...
Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt
Ravie LakshmananAug 05, 2026AI Security / Threat Intelligence Cybersecurity researchers have discovered more than half-a-dozen services advertisements for illegal access...
Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain
Ravie LakshmananAug 05, 2026Cyber Espionage / Threat Intelligence Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2)...
INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws
Ravie LakshmananAug 03, 2026Vulnerability / Cybercrime The INC Ransomware operation has emerged as the "dominant threat actor" exploiting the recently...
Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
Swati KhandelwalAug 01, 2026Vulnerability / Threat Intelligence An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking...
Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk
A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located...
