CyberNews A New Breed of Malware Threatens Docker Hosts with AI-Powered Hijacking Malicious actors have unleashed a sophisticated botnet malware called Carbonato, which uses artificial intelligence (AI) agents to infiltrate and take control of exposed Docker hosts. This highly advanced threat exploits vulnerabilities in Docker daemons, allowing the attackers to install the Hermes Agent AI framework … Read more
A widespread vulnerability has been discovered in a popular third-party service, allowing attackers to serve malicious content across over 1,700 online repositories. The issue affects developers who rely on this service for various features and functionalities within their projects. The affected service is used by developers to provide additional functionality to their applications, such as … Read more
Cybersecurity Threats Expose Vulnerabilities in Identity Management Systems A disturbing trend has emerged, as multiple high-profile attacks have been linked to a single common thread: identity exposure. Hackers are exploiting vulnerabilities in identity management systems, using them as a stepping stone to launch active attacks on unsuspecting targets. In this article, we’ll delve into the … Read more
A critical vulnerability in OnePlus Android devices has been discovered, allowing installed apps to gain root access without needing explicit permissions. This flaw affects users of OnePlus smartphones running version 11 and above, with an estimated 100 million devices exposed. The issue lies in a misconfigured component called “Map cross-domain privilege escalation,” which allows malicious … Read more
Cybersecurity Researchers Warn of Exposed GitLab Email Addresses That Let Attackers Push Code A critical vulnerability in GitLab’s email work item feature has been exposed by application security company Aikido, leaving thousands of projects vulnerable to attacks. The issue lies in the auto-generated private email addresses that allow developers to push issues or tasks to … Read more
A New Breed of Malware Emerges, Using AI Agents to Hijack Exposed Docker Hosts Cybersecurity researchers have discovered a sophisticated new malware botnet, dubbed Carbonato, that is targeting insecure hosts running Docker daemons. The malware uses artificial intelligence (AI) agents to hijack exposed Docker hosts, making it a particularly concerning development for organizations that rely … Read more
A massive third-party library, referenced across over 1,700 online repositories, has been compromised and is now serving malicious content. This development has significant implications for developers and users alike, highlighting the need for vigilance in managing dependencies and protecting against supply chain attacks. The affected library, which we’ll refer to as “third-party[.]com” for the sake … Read more
Identity exposure is a fundamental problem in cybersecurity, and it’s not just about password breaches or data dumps. A recent spate of incidents highlights the critical issue of identity exposure as an attack vector, where compromised credentials unlock active attack paths that can lead to devastating consequences. We’re taking a closer look at 11 real-world … Read more
A Critical Vulnerability in OnePlus Phones Puts Millions of Users at Risk, Even with Installed Security Apps A newly discovered vulnerability in certain OnePlus phones has been found to allow installed Android apps to gain root access without requiring explicit user permissions. This means that malicious software can exploit a flaw in the phone’s operating … Read more
A major new update has landed for Windows 11, bringing a slew of improvements and bug fixes to users. The KB5124010 September 2026 non-security preview update is now available for both Windows 11 24H2 and 25H2 devices, with 46 changes aimed at enhancing the overall user experience. This optional update allows administrators and users to … Read more