CyberNews This week at Black Hat USA 2026 in Las Vegas, numerous companies are showcasing their cutting-edge cybersecurity products and services. To help sift through the vast array of announcements, our team has compiled a summary of key vendor updates, new product releases, reports, and initiatives. One notable development comes from Astelia, which has unveiled agentic … Read more
Cyberattackers have launched a sophisticated social engineering campaign to compromise organizations via the legitimate ScreenConnect Remote Monitoring and Management (RMM) tool. Dubbed “Smoke#Screen” by security researchers at Securonix, this attack takes the RMM playbook to new frontiers, exposing a threat actor’s playbook in the process. The campaign uses diverse social engineering lures, including purported Zoom … Read more
Developers Targeted in Sophisticated “Evil Twin” Campaign on Open VSX Marketplace A sophisticated campaign has been uncovered on the Open VSX marketplace, where 77 extensions were found to be impersonating legitimate developer tools while secretly transmitting sensitive information about the systems and development environments where they were installed. The “evil twin” campaign was detected by … Read more
A New Variant of XCSSET Malware Targets macOS Developers with Compromised Xcode Projects A sophisticated piece of malware called XCSSET has resurfaced, this time targeting thousands of macOS users through compromised Xcode projects and GitHub repositories. The malware’s infection chain is complex, but essentially, it spreads by injecting a downloader script into benign files within … Read more
A sophisticated phishing attack has emerged, exploiting a previously unknown vulnerability in device code systems to bypass multi-factor authentication (MFA) and steal sensitive tokens. The attackers’ method, dubbed “Device Code PhaaS,” uses a novel approach to deceive users into divulging their login credentials. Greatness PhaaS, a group of experienced threat actors, has been actively using … Read more
Cyberattackers have launched a sophisticated social engineering campaign to compromise organizations using the legitimate ScreenConnect Remote Monitoring and Management (RMM) tool. Dubbed Smoke#Screen by security researchers at Securonix, this campaign takes advantage of diverse social engineering lures and rotating payloads to deliver persistent remote access to compromised networks. The attackers are targeting both Windows and … Read more
**New AI Security Feature from Varonis Gives Enterprises a Much-Needed Breather** Varonis has just rolled out Agent Intent-Based Access Control (IBAC), a game-changing feature that lets businesses connect AI agents to their data with safety nets in place to prevent rogue behavior. The new capability, part of the Varonis Atlas platform, is designed to stop … Read more
A Large-Scale Campaign of Malicious Extensions Spotted on Open VSX Marketplace In a disturbing discovery, cybersecurity researchers at Manifold Security have unearthed a massive campaign of malicious extensions spreading across the Open VSX marketplace. Dubbed an “evil twin” operation, 77 counterfeit packages have been identified, impersonating legitimate developer tools and harvesting sensitive information from affected … Read more
A New Variant of XCSSET Malware Targets macOS Developers through Compromised Xcode Projects Thousands of macOS users are at risk after a new version of the XCSSET malware was discovered targeting developers through compromised Xcode projects and GitHub repositories. This variant, known as v40, has been found to have enhanced evasion techniques and introduces two … Read more
A new phishing campaign has emerged, leveraging a sophisticated technique called device code phishing (DCP) to bypass multi-factor authentication (MFA) and steal tokens. Greatness PhaaS, a notorious threat actor, is behind this latest scheme, targeting organizations that rely on MFA as an additional security layer. Greatness PhaaS has been making headlines in recent months for … Read more