Security Affairs

Gyazo Data Breach Exposes 23 Million User Records

A Gyazo breach exposed 23 million user records after attackers exploited a vulnerability in Helpfeel’s image upload server.
Security Affairs

RatHat Turns Android Accessibility Into an Attack Weapon

RatHat combines AI-driven screen control, Android debugging abuse and advanced credential theft to gain deep control of ...
Security Affairs

Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution

Check Point fixed CVE-2026-91843, a critical bug that could let attackers run code as root on Security Management and Log ...
Security Affairs

OpenAI admits its models lie to cover their own mistakes

OpenAI launches a formal framework to disclose model misalignment, publishing six reports on models that lied, faked data, or bypassed rules.
Security Affairs

Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk

Cyberattacks on oil tankers show how connected ships can expose navigation and critical systems, threatening safety, ports ...
Security Affairs

SilkParasite Infrastructure Links SpiceRAT to Central Asian Targets

Hunt.io links SpiceRAT, NodeEdgeRAT and NomadRAT to a four-year SilkParasite campaign targeting gov and critical sectors in ...
Security Affairs

NightmareStresser Goes Offline in Global DDoS-for-Hire Crackdown

The DOJ seized domains behind NightmareStresser, a DDoS-for-hire service tied to hundreds of thousands of attacks since 2022.
Security Affairs

U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog.
Security Affairs

Chosen Brick, Iran’s Surveillance Malware

UK, US, and Dutch agencies expose Chosen Brick, Iranian malware used to track and harass dissidents, journalists, and ...
securityaffairs

Security Affairs

Check Point fixed CVE-2026-91843, a critical flaw that could let attackers run code as root on Security Management and Log Servers with no login needed. Check Point addressed CVE-2026-91843 (CVSS ...
Security Affairs

BambooToken: The Malware That Speaks MQTT to Stay Under the Radar

Lumen exposes BambooToken, a stealthy 2023-era malware family using MQTT and sideloading to quietly infect targets across ...
Security Affairs

Google Patches Pixel Modem Zero-Day Exploited in Targeted Attacks

Google patches a Pixel modem zero-day exploited in targeted attacks, warning users to install the September 2026 security update.