Cybersecurity researchers have uncovered a new typosquatting campaign targeting RubyGems users with a Windows-based information stealer. The activity was discovered by OpenSourceMalware on August 15, 2026, and has been tracked as StubMaker. The campaign involved 16 malicious RubyGems packages designed to look like popular Ruby dependencies. Researchers said the packages were created with small spelling … Continued
Cybersecurity researchers have uncovered a previously undocumented Python-based malware framework called TWINLOOT, which uses trusted Microsoft services to hide its command-and-control activity. Ontinue’s Cyber Defense Center discovered the implant while investigating an active campaign in July 2026. TWINLOOT uses SharePoint Online, Microsoft Teams, and the victim’s own Microsoft Edge browser as part of its communication … Continued
Philips and General Electric are investigating claims from the Clop ransomware group that the attackers breached their systems and stole company data. Clop has listed both companies on its data leak site as part of a wider campaign targeting dozens of organizations. The group claims that it obtained sensitive information from the affected companies, but … Continued
France’s tax authority has confirmed a major cyberattack in which attackers accessed government systems and extracted data linked to about 678,000 individuals and professionals. The incident affects the General Directorate of Public Finances, known as DGFiP, which manages taxation and public finance services in France. The breach became public after a threat actor claimed on … Continued
A former data analyst contractor has been sentenced to two years in prison after using sensitive company information to carry out an extortion scheme against his former employer Brightly Software. The man, 27-year-old Cameron Curry from North Carolina, was also known online as “Loot.” He was previously found guilty of six counts of transmitting or … Continued
A critical flaw in VMware vCenter is now being actively exploited in a global cyber campaign just days after the vulnerability was disclosed. The flaw, tracked as CVE-2026-59310, affects the vCenter Syslog Server and has a maximum CVSS score of 9.8. Broadcom disclosed the issue on July 29 and warned that an attacker with network … Continued
Attackers have started exploiting a critical vulnerability in Microsoft SharePoint after technical proof-of-concept code was made publicly available. The flaw, tracked as CVE-2026-55040, allows remote attackers to bypass authentication without having valid credentials. Microsoft fixed the issue through its July 2026 security updates, but the recent release of exploit details has increased concern for organizations … Continued
WhatsApp has started testing a new security feature called Scam Alert, which is designed to warn users when a message may be part of a scam. The feature uses an on-device machine learning model to identify possible scam patterns in messages received from people who are not saved as contacts. WhatsApp is currently introducing the … Continued
Colombia’s Ministry of Justice was hit by a ransomware attack on August 2, 2026, affecting part of its technology infrastructure and reducing the availability of several public-facing digital services. The incident happened just five days before the country’s presidential handover on August 7, when Abelardo de la Espriella was scheduled to take office. The timing … Continued
North Korean hackers linked to the Lazarus group have exploited a Windows zero-day to target organizations in the defense, aerospace, and aviation sectors The attacks are connected to Operation Dream Job, where attackers pose as recruiters and use job opportunities to approach potential victims Researchers found activity affecting targets in Western Europe and India, with additional … Continued
