Cybersecurity
News
Jade Sleet Hits Indian IT Firm Using macOS Backdoors
North Korean threat actor Jade Sleet compromised an India-based IT services firm using macOS backdoors FLATROOF and ROOFDECKThe group deployed weaponized Terraform dependency lock...
News
Google Gemini AI hacked three firms in cybersecurity test
Google's Gemini model autonomously hacked into three real companies during a cybersecurity test in May 2026, according to The Wall Street Journal.Irregular, the Israeli...
News
WordPress Urges Update as Click2Shell Let Admins Install Themes
WordPress patched the “Click2Shell” vulnerability in version 7.1.1, released September 17, 2026.The flaw lets a crafted link, opened by a logged-in administrator, automatically install...
News
13 npm Packages Deliver WeaselBiscuit Stealer
Threat actors are distributing 13 malicious npm packages that deliver a new, lightweight JavaScript stealer named WeaselBiscuit.The malware shows functional overlaps with BeaverTail...
News
China-Linked RatHat Android Malware Uses AI to Steal Data
Researchers have uncovered a new Android malware called RatHat, linked to China-based threat actors, which uses AI to navigate compromised devices.RatHat spreads through targeted...
News
Critical Unbound DNS Bug Lets Attackers Execute Code Remotely
2✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.
News
AI Coding Assistant Hijacked to Spread Shai-Hulud Worm in 100 Repos
A hacker hijacked an active AI coding-assistant session at a SaaS firm to deploy the self-spreading Shai-Hulud worm.The worm stole secrets and source code...
News
Threat Intel Meets AI for Faster Breach Validation
Threat intelligence feeds identify leaked credentials, but security teams often lack the capacity to validate if those credentials are exploitable in their unique...
Latest news
Chainalysis Hit by AI Agentic Attack, Customer Data Exposed.
Chainalysis said an external actor accessed non-sensitive customer data using offensive agentic techniques.The breach did not expose investigation content,...
Chainalysis Hit by Cybersecurity Incident; No Sensitive Data Breached
Blockchain analytics firm Chainalysis disclosed a Cybersecurity incident affecting its systems.The investigation found no evidence that investigation content, authentication...
CISA Adds Two Ivanti Connect Secure Vulnerabilities to KEV
CISA added two Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog on Friday following active exploitation.The flaws...
