
ChainScript RAT Turns Polygon Smart Contracts Into a Movable C2 Directory
ChainScript RAT spreads through fake software installers, uses Node.js and PowerShell, and finds replaceable C2 servers through Polygon smart contracts.

ChainScript RAT spreads through fake software installers, uses Node.js and PowerShell, and finds replaceable C2 servers through Polygon smart contracts.

Attackers stole source code from about 300 CrowdSec GitHub repositories through a malicious TanStack dependency, but no customer data breach was found.

CISA flags three exploited Linux kernel flaws in TLS, AF_ALG and ebtables, setting a September 21, 2026 patch deadline for federal agencies.

AI intel falsely flagged a Chinese ship as carrying nuclear cargo, prompting U.S. forces to prepare an armed interception before the error was caught.

Jade Sleet breached an Indian IT firm via fake Terraform job tests, deploying FLATROOF and ROOFDECK macOS backdoors to steal credentials.

FBI seized NightmareStresser domains in Operation PowerOFF, disrupting a DDoS-for-hire service linked to hundreds of thousands of attacks.

Cisco patched critical ISE, FMC and Nexus Dashboard flaws, including exploited authentication bypass and root RCE bugs requiring urgent updates.

KREMLIN malware installs rogue Chrome and Edge extensions by rewriting Chromium trust data to steal Brazilian banking credentials and session tokens.

Heapjack and Overpatch vulnerabilities let OpenAI Codex escape sandbox boundaries, execute host commands, and modify files outside approved workspaces.