Mobile Security & Privacy Ruby Security Updates Address Critical Onigmo Regex Engine Flaws Linked to GitLab RCE Vulnerabilities October 24, 2026 Suro Senen The Ruby programming language maintainers have officially released versions 4.0.9, 3.4.12, and 3.3.13 to remediate a series of deep-seated bugs within Onigmo, the built-in regular expression engine utilized by the…
Mobile Security & Privacy China-Linked APT41 Targets Central Asian Diplomats with Sophisticated "BlackX" UEFI Bootkit October 24, 2026 Nila Kartika Wati Diplomatic organizations across Central Asia have found themselves in the crosshairs of a highly sophisticated cyberespionage campaign involving a newly uncovered Unified Extensible Firmware Interface (UEFI) bootkit designated as BlackX.…
Mobile Security & Privacy CISA Adds Five Flaws Exploited by China-Linked Flax Typhoon to KEV Catalog Amid Global Warning October 9, 2026 Asep Darmawan The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog following confirmed abuse by a China-linked threat actor known as…
Mobile Security & Privacy International Law Enforcement Exposes Sophisticated Cyber Espionage Campaign Linked to Chinese Firm October 9, 2026 Suro Senen An international coalition of law enforcement and cybersecurity agencies has issued a sweeping joint advisory detailing a multi-year cyber espionage campaign targeting critical infrastructure, government organizations, law enforcement agencies, healthcare…
Mobile Security & Privacy International Law Enforcement and Intelligence Agencies Expose Sophisticated Cyber Espionage Campaign Linked to Chinese Firm October 8, 2026 Nana Law enforcement and intelligence agencies across seven countries have issued a sweeping joint advisory detailing an extensive, multi-year cyber espionage campaign orchestrated by hackers tied to a prominent Chinese cybersecurity…
Mobile Security & Privacy China-Linked Warlock Ransomware Group Continues Exploitation of Microsoft SharePoint Vulnerabilities Targeting Critical Infrastructure October 4, 2026 rifanmuazin The suspected China-linked threat actor known as Warlock is actively continuing to weaponize Microsoft SharePoint vulnerabilities, leveraging both older and recently disclosed flaws in a sustained campaign directed at organizations…
Mobile Security & Privacy Google Warns of Renewed Mass Exploitation of Oracle PeopleSoft Vulnerability as ShinyHunters Linked to Global Campaign September 27, 2026 rifanmuazin Google has issued a serious warning regarding a renewed wave of mass exploitation targeting a known security vulnerability in Oracle PeopleSoft. The campaign, which impacts multiple sectors across the globe,…
