Cybersecurity

Jade Sleet Hits Indian IT Firm Using macOS Backdoors

North Korean threat actor Jade Sleet compromised an India-based IT services firm using macOS backdoors FLATROOF and ROOFDECKThe group deployed weaponized Terraform dependency lock...

Google Gemini AI hacked three firms in cybersecurity test

Google's Gemini model autonomously hacked into three real companies during a cybersecurity test in May 2026, according to The Wall Street Journal.Irregular, the Israeli...

WordPress Urges Update as Click2Shell Let Admins Install Themes

WordPress patched the “Click2Shell” vulnerability in version 7.1.1, released September 17, 2026.The flaw lets a crafted link, opened by a logged-in administrator, automatically install...

13 npm Packages Deliver WeaselBiscuit Stealer

Threat actors are distributing 13 malicious npm packages that deliver a new, lightweight JavaScript stealer named WeaselBiscuit.The malware shows functional overlaps with BeaverTail...

China-Linked RatHat Android Malware Uses AI to Steal Data

Researchers have uncovered a new Android malware called RatHat, linked to China-based threat actors, which uses AI to navigate compromised devices.RatHat spreads through targeted...

Critical Unbound DNS Bug Lets Attackers Execute Code Remotely

2✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.

AI Coding Assistant Hijacked to Spread Shai-Hulud Worm in 100 Repos

A hacker hijacked an active AI coding-assistant session at a SaaS firm to deploy the self-spreading Shai-Hulud worm.The worm stole secrets and source code...

Threat Intel Meets AI for Faster Breach Validation

Threat intelligence feeds identify leaked credentials, but security teams often lack the capacity to validate if those credentials are exploitable in their unique...

Latest news

Chainalysis Hit by AI Agentic Attack, Customer Data Exposed.

Chainalysis said an external actor accessed non-sensitive customer data using offensive agentic techniques.The breach did not expose investigation content,...

Chainalysis Hit by Cybersecurity Incident; No Sensitive Data Breached

Blockchain analytics firm Chainalysis disclosed a Cybersecurity incident affecting its systems.The investigation found no evidence that investigation content, authentication...

CISA Adds Two Ivanti Connect Secure Vulnerabilities to KEV

CISA added two Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog on Friday following active exploitation.The flaws...