A newly discovered cyberattack technique called HalluSquatting has revealed a serious security risk for developers who rely on AI coding assistants. Security researchers found that attackers can take advantage of AI-generated mistakes by creating fake software packages with names that AI models invent but do not actually exist. If developers trust these suggestions without checking … Continued
A newly disclosed Linux kernel vulnerability named GhostLock (CVE-2026-43499) has raised serious security concerns after researchers revealed that it had remained hidden in the operating system for nearly 15 years. The flaw affects most major Linux distributions and allows a local attacker to gain full root privileges on an unpatched system. Security researchers also confirmed … Continued
A newly released court filing has revealed that a unique Windows device identifier played an important role in helping the FBI identify and trace an alleged member of the Scattered Spider cybercrime group. Investigators said Microsoft provided technical information that helped connect the suspect’s Windows device to online activity. The case has drawn attention because … Continued
A newly disclosed Linux kernel vulnerability, named Januscape and tracked as CVE-2026-53359, has raised serious concerns for organizations that use virtual machines. The flaw exists in the Linux Kernel-based Virtual Machine (KVM) hypervisor and affects both Intel and AMD x86 systems. Researchers say the vulnerability has remained hidden in the Linux kernel for nearly 16 … Continued
Cybersecurity researchers have uncovered a new cyber-espionage campaign, named Operation DragonReturn, that is targeting Indian taxpayers, tax professionals, chartered accountants, corporate finance teams, and businesses. The campaign has been linked with medium-to-high confidence to a suspected China-nexus threat cluster based on its infrastructure, attack techniques, and similarities with previously observed espionage operations. The activity was … Continued
Cybersecurity researchers have discovered a new Java-based remote access trojan (RAT) called QuimaRAT that is designed to infect Windows, Linux, and macOS systems. The malware stands out because it is written in Java, allowing attackers to use the same malicious code across multiple operating systems. Researchers found that QuimaRAT is being sold as a Malware-as-a-Service … Continued
The Qilin ransomware group has become the most active ransomware operation in the world, showing how cybercrime is becoming more organized instead of being spread across many small groups. Security researchers found that ransomware activity remains very high, but a few major gangs are now responsible for most attacks. This shift shows that experienced cybercriminal … Continued
Chinese artificial intelligence models are rapidly improving in cybersecurity, raising fresh concerns among security experts around the world. Recent research shows that some Chinese large language models (LLMs) can now match leading U.S. AI systems in specific security tasks such as finding software vulnerabilities. This marks a major shift in the global AI and cybersecurity … Continued
Google has announced a major cybersecurity operation targeting NetNut, one of the world’s largest residential proxy networks. The action was carried out with support from the FBI, Lumen Technologies, and several industry partners. According to Google’s Threat Intelligence Group (GTIG), the operation has significantly reduced NetNut’s ability to use compromised home devices across the world. … Continued
Anthropic has restored access to its Claude Fable 5 AI model after export restrictions were lifted, allowing users around the world to use the model again. The company also introduced updated safety protections designed to block certain high-risk requests more effectively. These changes were added before the model returned to public use. Users on supported … Continued
