Tag: security

German defense technology company Quantum Systems confirmed that it detected an incident in late October that was part of an active cyberattack by “hostile actors.” The company responded quickly, working with relevant authorities to resolve the issue swiftly and ensure its unmanned systems could safely resume operations. Quantum Systems is a German defense technology company […]

Vulnerable Check Point Security Gateway instances have been targeted in PHP2Shell attacks that deployed data-wiping malware on VMware ESXi hosts. The attacks started on October 30, initially against Israeli organizations, and were conducted by an actor that ran the entire campaign, from initial access to lateral movement and launching PHP webshells. In some instances, researchers […]

Imagine an AI agent being created. Not by an identity team, nor by a security professional. This one is built by someone in accounts at a mid-sized company. The agent’s job is relatively simple: read an inbox, match invoices against the ERP, and post a daily summary to Slack. And since a frontier model was […]

Check Point Software has released emergency hotfixes to address a high-severity flaw that hackers have been exploiting to gain root privileges and establish persistence on vulnerable devices since late October. Tracked as CVE-2026-123039, this local privilege escalation vulnerability was found in the DynamicCLI IPC (Inter-Process Communication) interface used to send privileged command requests to the […]

Authorities arrested 354 suspects in a joint international operation targeting vendors and buyers on the Archetyp, Nemesis, Tor2Door, Bohemia, and Kingdom dark web marketplaces. Codenamed ‘Operation TorNado,’ this law enforcement action ran from May 2025 to October 2026 and involved agencies from 14 countries. “Additionally, law enforcement targeted vendors and buyers active on forums, single-vendor […]

A new worm-like malware toolkit named SCKit was deployed in the recent ScreenConnect attacks targeting managed service providers (MSPs), designed to spread from infected customer devices to MSP technicians’ computers and compromise additional managed networks. The malware toolkit uses a worm-like technique that exploits a previously patched ScreenConnect vulnerability, CVE-2026-84869, to execute malicious code on […]

Tens of thousands of GitHub repositories were targeted in a campaign dubbed ‘wfx-loot’ that uses malicious workflows to steal GitHub Actions secrets and cloud credentials. Although not all repositories ran the payload, researchers confirmed that the threat actor stole secrets from at least 1,835 targets. The threat actor used thousands of compromised GitHub accounts to […]