Carbonato targets unauthenticated Docker daemons, installs Hermes Agent, and uses Telegram to run operator-directed ...

UTA0565 exploited a Chrome-Windows zero-day chain through fake websites to deploy CLEANGULP malware against Asian government entities.

Die mutmaßlich chinesische Gruppe griff Regierungsstellen mit einer Chrome-Windows-Exploit-Kette und der Malware CLEANGULP an ...

Two unpatched Citrix NetScaler zero-day vulnerabilities are reportedly being exploited in attacks, with cybersecurity ...

BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand attackers full control of a victim's PC with one phishing link click. Proofpoint's ...

Browser AI agent security research: security researcher Gal Weizman of Forever Security demonstrated that one ordinary browser extension can hijack AI agents in Chrome, Edge, Perplexity Comet, Opera ...

2026年9月16日，全球主机破解圈迎来一场无声海啸——PS5 Linux项目灵魂人物TheFloW（本名Andy Nguyen）在X平台发布一条仅17个单词的推文：‘I’m stepping away from the PS5 scene. It’s all down the sink.’（我决定退出PS5破解圈！全都打水漂了。） 没有告别仪式，没有技术复盘，只有一句带着金属锈味的叹息。而这句话 ...

Forescout researchers showed AI can port RCE exploits to PLCs, achieving DoS and shellcode execution Effort required heavy researcher input and $500+ in API usage, making attacks impractical for ...

2026年9月下旬，科技圈突然安静了三秒——然后炸了。 不是因为马斯克又发了火星殖民新推文，也不是因为苹果悄悄发布了Vision Pro 3，而是OpenAI在毫无预兆的深夜邮件里，向全球头部安全厂商、政企CTO和红蓝队指挥官们，扔下了一颗‘逻辑核弹’：GPT-6 Cyber，即将开启限量预览！ 没错，你没看错——不是GPT-5，不是GPT-5.5，而是直奔‘第六代’命名的GPT-6 Cyber。

Two China-linked groups ran identical Chrome/Windows zero-day exploits against NGOs, deploying different backdoors each.

Multiple espionage-motivated threat actors have rapidly adopted a newly discovered exploit kit that chains Chrome browser and Microsoft Windows vulnerabilities to deploy backdoors and surveillance ...

Spread the love“`html Alright, let’s get real for a moment. If you’ve been following the news, you know the cybersecurity ...