cyber security

cyber security news

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm

Ak June 1, 2026

A new mini Shai-Hulud supply chain attack campaign, codenamed Steamhas compromised the @redhat-cloud-services package to steal credentials...

Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices

Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices

Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices

Ak May 31, 2026

Ravi Lakshmanan31 May 2026IoT Security/Network Security Dutch authorities have announced the removal of a botnet that enslaved...

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

Ak May 30, 2026

Ravi Lakshmanan30 may 2026Vulnerability/Network Security Palo Alto Networks has warned that a recently discovered medium-severity security flaw...

ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface

ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface

ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface

Ak May 29, 2026

Cybersecurity researchers have disclosed details of a vulnerability in OpenAI ChatGPT that leverages the artificial intelligence (AI)...

Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code

Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code

Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code

Ak May 28, 2026

Ravi Lakshmanan28 May 2026Vulnerability/Open Source A serious security vulnerability has been disclosed in Git, a popular open-source...

Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users

Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users

Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users

Ak May 27, 2026

Latin America and Europe have become the targets of two banking Trojan campaigns designed to infect Windows...

MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries

MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries

MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries

Ak May 26, 2026

Iranian hacking group known as muddy water It has been linked to a new campaign impacting at...

Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

Ak May 25, 2026

Ravie LakshmananMay 25, 2026Cybersecurity / Hacking Monday recap. Same mess, new week. A sketchy dev tool got...

Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware

Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware

Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware

Ak May 24, 2026

Ravi Lakshmanan23 May 2026Malware/DevSecOps A new “coordinated” supply chain attack campaign has affected eight packages packageist It...

npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

Ak May 23, 2026

Ravi Lakshmanan23 May 2026Software Supply Chain/DevSecOps GitHub has introduced new controls for npm to improve the security...