Amazon has fixed a high-severity security vulnerability in Amazon Q Developer that could have allowed attackers to execute malicious code on a developer’s computer through specially crafted repositories. The flaw has been assigned CVE-2026-12957 with a CVSS score of 8.5. Security researchers at Wiz discovered the issue and responsibly reported it to Amazon before the … Continued
Security researchers have uncovered a new Linux kernel vulnerability called DirtyClone, tracked as CVE-2026-43503, that allows a local attacker to gain root privileges on vulnerable systems. The flaw was discovered by JFrog Security Research while reviewing recent Linux kernel patches. Researchers found that although earlier fixes addressed the DirtyFrag vulnerability family, a similar weakness remained … Continued
Security researchers have uncovered a new supply chain attack involving malware called Miasma, which targets developers by abusing npm packages and GitHub Actions workflows. Instead of attacking users directly, the campaign focuses on software development environments where malicious code can spread through trusted projects. Researchers say this approach allows attackers to compromise systems before applications … Continued
Microsoft has uncovered a new phishing campaign that has been targeting hotels and other hospitality businesses across Europe and Asia since April 2026. The attackers send emails pretending to be hotel guests asking about lost belongings. These messages include what appears to be a ZIP file containing photos of the missing item, encouraging hotel staff … Continued
A new investigation has revealed that Russian authorities used digital forensic tools made by Cellebrite to unlock the iPhone of jailed Russian activist Andrei Pivovarov. The finding is significant because Cellebrite had already announced in March 2021 that it was ending all business with Russia and Belarus. Researchers say the case raises important questions about … Continued
Google’s Threat Intelligence Group (GTIG) has uncovered a new malware called STOCKSTAY, which has been linked to the Russian state-backed hacking group Turla. The backdoor has been used in cyber espionage campaigns targeting government and military organizations in Ukraine. Researchers also found that some organizations connected to Italian foreign policy were targeted during these operations. … Continued
Cisco has disclosed a new zero-day vulnerability, tracked as CVE-2026-20245, that affects Cisco Catalyst SD-WAN Manager. The flaw has already been exploited in real-world attacks before a security update was available. According to Cisco, the issue allows attackers to gain root-level access, giving them complete control over the affected system once the attack succeeds. This … Continued
Europe is rapidly becoming one of the most attractive targets for ransomware gangs, according to new cybersecurity research. After a relatively quieter period in 2024 and 2025, ransomware activity has surged again across the region. Experts say attackers are increasingly focusing on European organizations because of the financial opportunities available. The trend shows that cybercriminals … Continued
A Minnesota man known online as “Snoopy” has been sentenced to 18 months in prison for his involvement in a hacking operation that targeted user accounts on DraftKings, a popular fantasy sports and betting platform. U.S. authorities announced the sentence after he pleaded guilty to conspiracy to commit computer intrusion. The case is part of … Continued
Security researchers have uncovered a new macOS backdoor that uses prompt injection techniques to avoid detection during AI-assisted malware analysis. Instead of relying only on code obfuscation or anti-debugging tricks, the malware attempts to manipulate AI-powered triage systems that security teams increasingly use to examine suspicious files. Researchers say this approach represents a new challenge … Continued
