Data BreachesSickKids Hospital reports potential data theft from a third-party job application attack, affecting employees and applicants. Clinical systems unaffected.
AIAnthropic launches Claude Mythos 5 in public beta for Claude Enterprise security scans, analyzing code and history to identify vulnerabilities.
MalwareMalware exploits Android car head unit updates for ad fraud and proxy botnets, turning vehicles into compromised network nodes.
VulnerabilitiesBTR Reforged: Abusing Defender's driver to bypass Windows security. Requires admin access, affects Windows 7-11. Presented at Black Hat 2026.
Cloud SecurityTruffle Security reveals 9,300+ valid AWS keys exposed online, including root keys that could grant full account control. Urgent revocation advised.
MalwareMalicious npm calendar packages hide RedShell Linux beacon for RedC2 4.0, enabling remote command execution and posing supply-chain risks to developers and infrastructure.
MalwareSynkLoader: Microsoft Teams malware that steals credentials and enables remote control. Poses as IT tools. Learn how to defend against it.
APTExplore three Russia-linked cyber-espionage clusters using OAuth, WhatsApp, and malware against Western researchers, officials, and analysts in phishing campaigns.
VulnerabilitiesCISA adds Ray vulnerability CVE-2025-62593 to KEV catalog due to active exploitation targeting AI development environments. Learn about the flaw and remediation.