Global Phishing Platform Dismantled, Developer Arrested in Multi-Agency Operation A major blow has been dealt to the world of cybercrime as authorities in Germany and the US have dismantled a vast phishing platform known as Kratos, shutting down its central infrastructure and arresting its developer. The operation, led by Frankfurt’s Prosecutor General Office (ZIT) and … Read more
Critical Infrastructure Under Siege: How State-Backed Actors Are Exploiting Identity Gaps The 2021 Colonial Pipeline ransomware attack was a stark reminder of how quickly a compromised account can turn into a national crisis. The attackers exploited an inactive VPN account without multi-factor authentication, disrupting fuel supply across the U.S. East Coast and highlighting the vulnerability … Read more
A critical vulnerability in Microsoft SharePoint is being actively exploited by hackers to steal machine keys and maintain access even after affected servers are patched. The flaw, known as CVE-2026-50522, allows remote attackers to execute code on vulnerable systems without authentication. This can be done by delivering a malicious payload through a specially crafted security … Read more
Malicious GitHub Repositories Push SmartLoader and StealC Malware to Millions of Developers A massive operation, dubbed “FakeGit,” has been pushing malware through 7,600 malicious GitHub repositories that have accumulated over 14 million downloads. The campaign is using a technique called “agentbaiting” to lure in AI agents and developers, making it easier for the attackers to … Read more
A major blow has been struck against global cybercrime operations with the dismantling of Kratos, a sophisticated phishing-as-a-service (PhaaS) platform. Authorities in Germany and the United States have taken down the central infrastructure of the platform, seizing over 200 servers and rendering it inoperable. The developer behind the platform was also arrested in Indonesia. Kratos … Read more
Apple’s latest software update has patched a vulnerability that exposed users’ real email addresses when they used the company’s “Hide My Email” feature. This flaw allowed hackers to reveal sensitive information by exploiting a weakness in Apple’s email masking system, putting millions of users at risk. The issue was discovered in Apple’s Mail app, which … Read more
A critical vulnerability in Microsoft SharePoint is being actively exploited by hackers to steal machine keys and maintain long-term access to compromised systems. This flaw, known as CVE-2026-50522, was addressed in July’s security updates from Microsoft, but it appears that attackers have already begun leveraging it against vulnerable on-premise deployments. The vulnerability itself is a … Read more
A newly discovered attack vector, dubbed Bit2Watt, poses a significant threat to cloud infrastructure and power grids worldwide. The alarming aspect of this vulnerability is that it doesn’t require an exploit to cause disruption – simply gaining access to a cloud tenant’s account can be enough to wreak havoc on the grid. The Bit2Watt attack … Read more
Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities Google has unveiled an updated version of its Gemini platform, a cutting-edge AI-powered tool designed to identify and remediate software vulnerabilities before they can be exploited by hackers. The latest iteration, Gemini 3.5 Flash Cyber AI, marks a significant milestone in the … Read more
A Critical Flaw in AWS Kiro Exposes Organizations to Unchecked Code Execution Amazon Web Services (AWS) has disclosed a critical flaw in its cloud-based service, Kiro, that enables malicious actors to rewrite the application’s configuration and execute arbitrary code. The vulnerability, which affects all versions of Kiro up to 2026-07-15, is particularly concerning due to … Read more