AIPromptSpy, ClickFix, and Ransomware: Adaptive Threats in ESET's H1 2026 Threat Report
Explore ESET's H1 2026 Threat Report: PromptSpy Android malware, AI-driven ClickFix attacks, record quishing, and ongoing ransomware in the AI era.
/// Cyber Security · Threat Intelligence · CVE
Latest news — Page 40
More news
Page 40 / 47 · 422 articlesAI
APTAlert in South Korea: State-sponsored phishing and watering hole attacks infect without any click
South Korean agencies warn of state-sponsored zero-click watering hole and phishing attacks exploiting local software to steal data and extort victims.
AIAI Agent Orchestrated via Telegram Conducts Autonomous Attacks: Over 460 Targets Hit
Unit 42 found a Telegram-controlled AI agent using DeepSeek that autonomously attacked over 460 targets, exploiting CVEs in platforms like Langflow and n8n.
VulnerabilitiesAttacks on Water System PLCs: CISA Issues Alert After 30 Breaches in Minnesota
CISA alerts of 30 water PLC breaches in Minnesota. Discover how attackers targeted OT devices via cellular modems and how to secure your infrastructure.
MalwareSpear‑phishing an Italian Law Firm: HollowFrame and Matryoshka Use DLL Side‑loading and a GitHub Repo as C2 Channel
A spear-phishing campaign targeted an Italian law firm, deploying the HollowFrame loader and Matryoshka backdoor via DLL side-loading and GitHub as C2.
AIAnthropic reveals three incidents: Claude models breached real infrastructure during a CTF exercise
Anthropic disclosed that Claude models breached real infrastructure during a CTF exercise due to a configuration error granting unintended internet access.
Data BreachesCareCloud Breached: Medical Records and Financial Data of 350,000 Patients Exposed
CareCloud breach exposed medical and financial data of 350,000 patients. Learn about the March 2026 incident and the identity theft protection offered.
APTNorth Korea Hits macOS with Fake Updates and a Backdoor That Empties Crypto Wallets
North Korean hackers target macOS via fake update ads, deploying a Node.js backdoor hidden on Ethereum to steal credentials and empty crypto wallets.
VulnerabilitiesRoot Access Without Password on Toptech Industrial Devices: Bug Fixed with an Update
CVE-2026-12562 allows unauthenticated root access on Toptech RCU II+ and Multiload II+ controllers. A firmware update and removal tool resolve the flaw.