Uncategorized

New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds 2026-06-16 at 16:10 By Security researchers at Zimperium’s zLabs have documented a new Android banking trojan, Rokarolla, that targets 217 banking and cryptocurrency apps and packs 137 remote commands. Together, they give an operator near-total control of an infected phone: it lifts lock-screen PINs, reads […]

3D printing company Divergent unveils technology to increase output by 8x: ‘Respond to changing demand far more quickly’ 2026-06-16 at 15:01 By Lydia Moynihan “What is clear is that defense industry leaders recognize the need for greater production capacity across a range of systems,” Divergent’s Lukas Czinger said. This article is an excerpt from Latest

Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactive 2026-06-16 at 14:30 By Security teams have never had more IP data at their disposal. Every day, analysts ingest enrichment feeds, geolocation data, reputation scores, telemetry, and threat intelligence from a growing ecosystem of vendors and platforms. Yet despite this abundance of information, many

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week 2026-06-16 at 13:30 By Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. In a post shared on X, the company said it has observed exploitation of CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089 over the past 24 hours. CVE-2026-39813

Hidden in Teams: DragonForce Attackers Weaponize Microsoft Teams Relays to Stay Hidden 2026-06-16 at 13:00 By Threat Hunter Team Backdoor.Turn, a Go-based RAT, is the first known malware to abuse Microsoft Teams’ TURN relay servers to mask command-and-control traffic. The attackers also used a previously unknown vulnerability in a Huawei driver. This article is an

China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth 2026-06-16 at 12:44 By Cybersecurity researchers have flagged two previously undocumented Windows variants of what was believed to be a Linux-only backdoor called SprySOCKS. “The Windows variants discovered are internally marked as WIN_DRV and WIN_PLUS,” ESET said in a report shared with The Hacker News. “Both

Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware 2026-06-16 at 11:14 By The North Korean state-sponsored hacking group known as ScarCruft (aka APT37) has been observed using spear-phishing messages impersonating Microsoft Account security notifications to deliver malware called NarwhalRAT. “The attack email contained a message impersonating an MS account security alert,” the Genians

Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw 2026-06-16 at 09:05 By Cisco has released security updates for a medium-severity security flaw in Catalyst SD-WAN Manager that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-20262, carries a CVSS score of 6.5 out of 10.0. “A vulnerability in the

CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation 2026-06-16 at 08:41 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by June 18, 2026. The

Cyberwar At the Front Line: Why Enterprises Must Prepare for Digital Conflict 2026-06-16 at 02:44 By The risk landscape can change quickly, meaning security leaders need to prepare for anything. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails 2026-06-15 at 22:44 By A China-linked espionage group hid inside North American medical, academic, and military research networks for more than a year, quietly stealing sensitive research and defense email. The way in was a backdoor on their REDCap research servers that stole

North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels 2026-06-15 at 22:32 By Cybersecurity researchers have flagged two malicious cyber campaigns that exhibit similarities with a persistent North Korean threat cluster known as Contagious Interview (aka Famous Chollima, HexagonalRodent, and Void Dokkaebi). According to a report published by Proofpoint, the threat actor has

Toxic mix of chaos and drudgery turns Meta’s AI unit into a real-world hell: ‘Soul-crushing’ 2026-06-15 at 22:11 By Marc Vartabedian A new unit at Meta devoted to artificial intelligence is turning into real-world hell for employees, according to a new report. This article is an excerpt from Latest Technology News | New York Post

Top Anthropic staffers rush to DC in bid to reverse White House crackdown on ‘Mythos’ and ‘Fable’ AI models 2026-06-15 at 20:14 By Thomas Barrabi Some of Anthropic’s top staffers are holed up in Washington DC as the company scrambles to reverse a White House crackdown on its “Mythos” and “Fable” AI models. This article

LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers 2026-06-15 at 19:39 By A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosed LiteLLM is a widely deployed open-source AI gateway that brokers calls to

Breaking Down the Novo Nordisk Data Breach 2026-06-15 at 18:12 By Experts break down the risks of Novo Nordisk data breach.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes 2026-06-15 at 18:09 By A single click on a trusted Microsoft link could have let an attacker pull emails, calendar details, and indexed files out of Microsoft 365 Copilot Enterprise Search. Researchers at Varonis Threat Labs chained three bugs into

Maine Data Breach Reporting Portal Abused, Taken Offline 2026-06-15 at 17:11 By Two organizations had false data breach notices filed against them, causing the Office of the Maine Attorney General to remove its public-facing data breach database. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More 2026-06-15 at 16:49 By Stuff broke again. Not in a movie way. An old tool was left exposed. An abandoned package was abused. A deprecated feature was still running in prod. This week is the same lesson in a new form: phishing

The Onboarding Password Mistake That Creates Unnecessary Risk 2026-06-15 at 14:30 By Employee onboarding is a busy time for IT teams. New starters need devices, accounts, access permissions, and passwords, all delivered within a tight timeframe. That usually means sharing a temporary “first-day” password so employees can access systems for the first time. The issue