Security Affairs

U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog.
Security Affairs

Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries

Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency ...
Security Affairs

Yoba malware

Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it calls ...
Security Affairs

$6.3 Billion Stolen from Binance in Attack Attributed to North Korea

Binance links a $6.3 billion crypto theft to a compromised DevOps laptop, with North Korean hackers blamed by blockchain ...
Security Affairs

Hacker leaks data on more than 40,000 Homeland Security employees

A hacker leaks personal data on more than 40,000 DHS employees, including CBP, ICE and CISA staff, after an undisclosed ...
Security Affairs

484,142 Exposed Cloud Buckets Contain 18 Billion Files

Ransomnews found 484,142 publicly listable cloud buckets containing 18B files, including exposed credentials, database dumps ...
Security Affairs

Binance Investigates Suspicious Crypto Transfers Worth Up to $5.8 Billion

Binance probes suspicious crypto transfers worth up to $5.8B as Tether and Circle freeze $1.79 billion in stablecoins linked ...
Security Affairs

US Probes Suspected Hack Behind Military Base Freezer Failures

Pentagon treats freezer failures at US military bases as a suspected hack and is working with French investigators after a ...
Security Affairs

Virtualine Domain Seized, but Allegedly Abusive Website Remains Online

The FBI seized Virtualine, a hosting service accused of supporting criminal sites, ignoring abuse reports and helping launder money.
Security Affairs

Volt Typhoon Used Silent Train to Hide Zero-Day Attacks

Volt Typhoon used disposable relay chains to hide zero-day attacks on critical systems. Lumen linked Silent Train to at least ...
Security Affairs

ENGIE Data Breach Exposes Customer Details and Energy Contracts

ENGIE says attackers accessed French customers' contact and energy contract data through a partner sales tool. Banking data ...
Security Affairs

U.S. CISA adds Linux Kernel and Broadcom VMWare ESX flaws to its Known Exploited ...

According to CrowdStrike’s 2026 Legal Threat Landscape Report, which said the China-linked threat actor Warp Panda (aka Armory Castle, UNC5221, Clay Typhoon and VerdantBamboo) exploited CVE-2026-41709 ...