236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers

A massive number of DCloud Uni-App websites have been compromised, enabling scammers to set up fake cryptocurrency trading platforms and phishing sites that drain users’ digital wallets. According to recent findings, over 236,000 such sites were discovered, with many more suspected to be in operation. The compromised websites are likely the result of vulnerabilities in … Read more

⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More

As AI-powered tools increasingly become essential components of cybersecurity arsenals, new research has shed light on their ability to discover previously unknown vulnerabilities in software code at an unprecedented rate. This trend raises alarm bells for organizations worldwide, emphasizing the need for proactive measures to prevent exploitation by malicious actors. The breakthroughs are attributed to … Read more

Agentic AI Has an Identity Problem and Attackers Know It

Agentic AI’s Identity Crisis Exposes Organizations to Cyber Threats A growing concern in the cybersecurity community is that agentic artificial intelligence (AI) systems, which can authenticate, receive permissions, and take actions across production environments, are often given broad access with little oversight. This identity crisis has caught many organizations off guard, leaving them vulnerable to … Read more

Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse

A highly sophisticated cyber threat group, Gamaredon, has significantly expanded its malicious activities in Ukraine with the introduction of new malware and exploitation of cloud services. The attacks have targeted various organizations across the country, including government institutions, non-governmental organizations (NGOs), and private companies. Gamaredon’s tactics have evolved to incorporate advanced techniques, making it increasingly … Read more

Why Post-Quantum Cryptography Starts With Credentials

A new threat is emerging on the horizon, one that could potentially compromise even the most secure networks and systems. Post-quantum cryptography, designed to withstand the powerful computers of tomorrow, may seem like an esoteric concern for everyday users. But the truth is, it’s already having a profound impact on how we approach security. The … Read more

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers

A staggering 236,000 websites using DCloud’s Uni-App platform have been compromised in a massive-scale crypto scam and phishing operation, with hackers exploiting vulnerabilities to drain user wallets. The affected sites, which include online shopping platforms, social media outlets, and even charity organizations, are now being used to spread malware, phish sensitive information, and perpetuate wallet … Read more

⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More

As researchers continue to explore the dark side of artificial intelligence, two recent breakthroughs have shed light on the alarming potential for AI-powered malware and Linux kernel vulnerabilities that put millions of users at risk. The discovery of a new wave of software flaws, uncovered by advanced machine learning models, has left security experts scrambling … Read more

‘DirtyClone’ Linux Kernel Vulnerability Leads to Root Access

A recently disclosed Linux kernel vulnerability, tracked as CVE-2026-43503 and referred to as DirtyClone, has been found to allow any local user to gain root privileges on affected systems. The flaw was discovered by security researchers at JFrog, who have published technical details and a proof of concept (PoC) targeting the issue. The vulnerability exists … Read more

US seizes hundreds of FIFA World Cup illegal streaming domains

The US Justice Department’s Criminal Division has taken a major step in protecting consumers and enforcing intellectual property rights worldwide by seizing nearly 400 web domains used for illegally streaming matches at the FIFA World Cup. These websites, which provided unauthorized real-time streams of the tournament, were operating in clear violation of U.S. copyright law. … Read more