APTCavern Hides Among DNS, Google Apps Script, and Microsoft 365 Calendars
Explore how the Iranian Cavern framework uses DNS, Google Apps Script, and Microsoft 365 calendars for command-and-control in cyber attacks.
/// Cyber Security · Threat Intelligence · CVE
Latest news — Page 23
More news
Page 23 / 48 · 427 articlesAPT
AICamera-Equipped AirPods: macOS Tahoe Demo Revives Privacy Concerns
A short video demo included in the macOS Tahoe 26.7 Release Candidate may have shown future camera-equipped AirPods for the first time. MacRumors spotted
VulnerabilitiesApple Updates macOS, iOS, and iPadOS: Dozens of WebKit, Kernel, and Networking Flaws Fixed
Apple patches critical flaws in macOS, iOS, iPadOS addressing WebKit, kernel, and networking issues to prevent crashes and data leaks.
Data BreachesHeights Finance Breach Exposes Financial Data and Social Security Numbers of 734,828 People
Heights Finance data breach affects 734,828 people, exposing financial data and Social Security numbers. Learn about the risks and what to do.
VulnerabilitiesGitLab Fixes Critical GraphQL Flaw That Could Modify or Delete Projects
GitLab patches critical GraphQL vulnerability CVE-2026-19478 that could let attackers modify or delete projects. Upgrade self-managed instances immediately.
VulnerabilitiesTwo Critical WordPress Plugin Vulnerabilities Could Lead to Full Site Takeover
Two critical vulnerabilities have been reported in widely used WordPress plugins. The first affects Forminator Forms , installed on more than 600,000
AILiteLLM Supply Chain Attack Exposes Credentials Belonging to Thousands of Organizations
Malicious LiteLLM versions on PyPI deployed SANDCLOCK backdoor, exposing credentials of over 2,500 organizations.
AIOpenAI–Hugging Face: Agentic Attacks Accelerate as 13 Flaws Are Found in 15 Minutes
Explore how agentic AI speeds up cyber attacks by chaining vulnerabilities, highlighted by the OpenAI–Hugging Face incident with 13 flaws discovered quickly, and OpenAI's defense strategies.
VulnerabilitiesUnisoc Modems: A VoLTE Attack Chain Can Reach the Android Kernel
Discover how a Unisoc modem vulnerability allows attackers to gain Android kernel access through a VoLTE video call. Affects chipsets like T606, T612, T7250.