At a Glance Malware family Sality peer-to-peer (P2P) botnet; EggJagger clipper payload Threat actor Single operator (unnamed); attribution not publicly confirmed Victims Over 15,000 infected machi…

The prominent American identity verification provider IDScan seemingly suffered a catastrophic data breach. Hackers are currently selling stolen data on EXPLOIT, a notorious Russian cybercrime for…

The server management panel Virtualizor recently suffered a devastating supply chain attack. Hackers maliciously manipulated Border Gateway Protocol (BGP) routing to redirect legitimate Virtualizo…

Muse Code, the AI coding agent from the social media group Meta, has concluded its testing phase and been formally released. Alongside the general-availability launch, the new version introduces i…

With the aid of artificial intelligence, the number of vulnerabilities discovered and fixed in Windows 11 has repeatedly reached new heights. This has led Microsoft to pay closer attention to syst…

The AI safety-evaluation organization METR, the very research body that investigated OpenAI agents attacking Hugging Face, recently disclosed external attacks that took place earlier this year. In…

Melbourne, Florida, 2nd September 2026, CyberNewswire

At a Glance Malware family “Superior” campaign (crypto wallet drainer / infostealer) Threat actor Unnamed; suspected link to a campaign tracked since February 2024 Targets / victims Cr…

At a Glance Actor / group BlueDelta (overlaps with APT28, Fancy Bear, Forest Blizzard) Activity type State-sponsored cyber espionage, initial access campaigns Targets Government, diplomatic, and d…

At a Glance Malware family PackClient (RAT / C2 framework) Threat actor TA4922 (Chinese-speaking) – confirmed attribution by Proofpoint Targets Organizations in mainland China and India Deli…

TL;DR Google released Chrome version 152.0.7977.75 to fix 26 security flaws. These critical Google Chrome vulnerabilities, including CVE-2026-84353, allow attackers to corrupt memory and execute c…

TL;DR A Hugging Face vulnerability writes unverified Python files to local disks before checking user permissions. Specifically, this flaw affects the Transformers library versions 4.49.0 through …

At a Glance Category Details Malware Family Amatera (rebrand of ACR Stealer / AcridRain) Threat Actor Unattributed (overlaps with ErrTraffic Malware-as-a-Service ecosystem) Target or Victims Visit…

TL;DR A Linux kernel vulnerability, tracked as CVE-2026-68162, affects the SCTP networking code. It rates CVSS 7.8. Researchers at NebuSec have published proof-of-concept exploit code that escalat…

The Debian project team recently announced that Debian Linux 11 officially ended its long-term support on August 31, 2026. This milestone completes its official five-year lifecycle since its initi…

TL;DR FreeRDP 3.31.0 patches five server-role flaws reported by Bynario, plus 17 other issues. Researchers chained three of them into pre-authentication remote code execution. This FreeRDP vulnera…

Developer JPRX recently released the open-source Darwin-VM project, a modified QEMU virtualization scheme that boots genuine iOS and macOS systems while simulating multiple generations of Apple pr…

The trade secret lawsuit between Apple and OpenAI recently escalated. According to a recent Reuters report, Apple submitted new court documents to seek expedited discovery. These files reveal shoc…

TL;DR Hewlett Packard Enterprise disclosed dozens of critical HPE Fabric Composer vulnerabilities. These flaws allow unauthenticated attackers to execute arbitrary code and bypass authentication. …

TL;DR SonicWall published advisory SNWLID-2026-0016 on September 1, 2026. It confirms active exploitation of two SMA1000 flaws. The headline SonicWall SMA1000 vulnerability, CVE-2026-83548, is a p…