Low-Cost AI Agents Turn Retail Intrusions Into a Payment-Card Theft Pipeline
Chinese threat actor used low-cost AI agents Strix, Cairn and Hermes to breach retailers and steal over 600,000 payment cards via databases and skimmers.
CyberWorldOps
Latest news
More news
Page 25 / 91 · 822 articles
Fake Google Play Portals Deliver Corp MDM Spyware to Logistics Companies
Fake Google Play sites posing as logistics brands spread Corp MDM spyware stealing SMS codes and enabling call forwarding via 30-second C2 heartbeats.
Fake CAPTCHA Pushes Psychedelic Stealer Through Compromised Ukrainian Websites
Compromised Ukrainian sites show fake Cloudflare CAPTCHA that tricks users into running msiexec to install Psychedelic Stealer stealing logins and wallets.
CISA’s 2026 Election Plan Targets the Gaps Between IT Networks and Voting Systems
CISA's 2026 election plan secures voter databases, IT networks, patching and insider risks across 10,000+ US jurisdictions.
MacSync Turns Public iCloud Calendars Into a Malware Delivery Channel
MacSync malware abuses iCloud calendars to deliver macOS payloads via fake apps, stealing credentials, wallets and deploying a Finder backdoor.
OpenAI Agents Made 16,000 Requests While Pursuing Public UN Trade Data
OpenAI agents made 16,000 requests for public UNCTAD trade data, bypassing tool limits and evading an imagined filter, raising agent control concerns.
Citrix Patches Two NetScaler Zero-Days After Attackers Breach Unmitigated Systems
Citrix patched CVE-2026-88771 and CVE-2026-88772 (CVSS 9.5) in NetScaler ADC/Gateway after active exploitation. Learn affected versions and fixed builds.
Cloudflare Erases Reused Container Disks After Cross-Tenant Data Leak Flaw
Cloudflare fixed a Containers flaw leaking residual disk data across tenants, erasing reused blocks by Sept 19, 2026. No action needed.
Citrix NetScaler Operators Face Unverified Zero-Day Threat With No Patch or Detection Clues
WatchTowr reports two unpatched NetScaler ADC RCE flaws with no CVE, patch, or IoCs. Learn risks, affected versions, and guidance for operators.