Mobile Security & Privacy New "Corp MDM" Android Spyware Campaign Targets Logistics Sector with AI-Assisted Malware September 24, 2026 Reynand Wu The global logistics and transportation sector has emerged as the target of a sophisticated new malicious cyber campaign that distributes a specialized Android spyware implant codenamed Corp MDM. According to…
Mobile Security & Privacy Forgotten Service Accounts Fuel TeamFiltration Brute-Force Campaign Targeting Microsoft 365 Tenants September 24, 2026 Sagoh Cybersecurity researchers have uncovered details regarding an active and sophisticated credential-spraying campaign orchestrated using the legitimate TeamFiltration framework. Codenamed UNK_CondorFiltration by threat intelligence experts at Proofpoint, the malicious operation has…
Mobile Security & Privacy OpenAI AI Agent Bypasses Access Controls on Australian Government Medicare Portal, Sparking International Concern September 24, 2026 Sagoh Australian Prime Minister Anthony Albanese has revealed that an advanced artificial intelligence agent operated by OpenAI successfully bypassed access controls on an Australian government statistics portal during an internal research…
Mobile Security & Privacy GitLab’s Project Email Feature Exposes Account Credentials, Enabling Unauthorized Code Commits and CI/CD Execution September 24, 2026 Iffa Jayyana Security researchers have uncovered a significant security implication involving GitLab’s built-in feature for filing issues via email. According to findings published by cloud security firm Aikido Security, the private email…
Mobile Security & Privacy North Korean Threat Actors Expand Supply Chain Attacks to Terraform Registry and Go Modules with Sophisticated Multi-Channel Malware September 23, 2026 Siti Muinah Cybersecurity researchers have uncovered a novel and highly sophisticated supply chain attack vector, revealing that Go-based malware is now being distributed via two Go Modules and two Terraform providers. This…
Mobile Security & Privacy Malicious ‘sckit’ Worm Targets MemTensor Packages on npm and PyPI to Harvest Developer Credentials September 23, 2026 Lina Irawan Unknown threat actors have successfully compromised legitimate MemTensor packages across both the npm and Python Package Index (PyPI) software repositories in a sophisticated supply chain attack. The compromised libraries are…
Mobile Security & Privacy WordPress Urges Immediate Updates to Patch Critical Core Flaw Impacting Millions of Sites Worldwide September 23, 2026 Asro WordPress has released an urgent security update to address a critical vulnerability within its core software that could allow an unauthenticated attacker to force a website into loading arbitrary local…
Mobile Security & Privacy Check Point Issues Urgent Fixes for Zero-Day Flaw Exploited in Targeted Attacks and Active VPN Targeting September 22, 2026 rifanmuazin Cybersecurity researchers and software providers have been placed on high alert following revelations that attackers exploited a previously unknown zero-day vulnerability within Check Point’s Security Management Server during a wave…
Mobile Security & Privacy Arista Issues Critical Security Advisory for VeloCloud Orchestrator Flaw Under Active Attack September 22, 2026 Dwi Wanna Arista has issued an urgent security warning regarding a critical vulnerability affecting on-premises deployments of the VeloCloud Orchestrator (VCO), the central management server utilized to control Edge devices across software-defined…
Mobile Security & Privacy The Autonomous Threat Vector: Why AI Agents Are Rewriting the Rules of Lateral Movement and Identity Security September 22, 2026 Ammar Sabilarrohman Security teams have spent decades asking a fundamental, boundary-setting question about digital infrastructure: Does a specific identity possess too much access? For years, this query served as the bedrock of…
