Storm-0940 Hits ConnectWise With ARTEX Agentic AI
A Cloud Breach in Under Three Hours A cloud breach can fit inside a single work meeting. Microsoft has disclosed a large operation by the actor Storm-0940. Its members used the ARTEX AI platform...
Author: Nam Phong
Jerome School District Cyberattack Closes Campuses
Threat actors no longer need to encrypt classroom computers to disrupt academic instruction. In Idaho, cybercriminals seized control of connected security cameras, electronic door locks, and heating systems. Consequently, the Jerome School District cyberattack...
GrapheneOS Duress PIN Case Reveals DHS Search Motive
A Privacy Feature Meets a Federal Charge An ordinary privacy feature has led to a threat of five years in prison. New court documents also point to a different reason for the search than...
PAN-OS Flaw Fuels Qilin and Inc Ransomware Attacks
A Firewall Bug Becomes a Ransomware Tool A flaw in Palo Alto Networks enterprise firewalls has become a full-fledged ransomware tool. It lets attackers enter protected networks without a password. Unit 42 confirmed that...
Plex2Shell Exploit Chain Hits Plex Media Servers
A Home Media Server Turns Into a Botnet Node An ordinary home media server can become a tool for cryptocurrency mining and for hidden relaying of other people’s traffic. Researchers found a chain of...
Attackers Hijack 333 Tor Exit Nodes With Ebury
A Large Tor Exit Node Attack An unknown attacker took over 333 Tor exit nodes. That gave the intruder a way to intercept SSH connections and unencrypted correspondence. The hijacked relays made up about...
Nigerian Hacker Gets Eight Years for Tax Fraud
A Phishing Scheme Worth Over $10 Million Ordinary phishing emails grew into a multimillion-dollar scheme built on tax refunds and government loans. A US federal court has sentenced Chukwuemeka Victor Amachukwu, 40, to eight...
Flawed Security Patches Surge Across Open Source Projects
A security patch can neutralize a vulnerability while simultaneously exposing a direct path to the next exploit. Recently, cybersecurity firm Terra Security investigated how security patches became maps for attackers across the digital ecosystem....
Critical PHP Vulnerabilities Trigger Emergency Patch
The PHP security team recently issued an urgent alert across the web ecosystem. Specifically, maintainers scheduled an expedited update on Wednesday, 21 October 2026 at 14:00 UTC to remediate two severe flaws. Although officials...
eMudhra Intermediate Certificates Revoked Over Weak Keys
Security researchers recently uncovered a catastrophic cryptographic blunder at Indian certificate authority eMudhra, operating as emSign. Specifically, auditors discovered that private keys for eight intermediate certificate authorities were compromised. Because intermediate certificates issue downstream...
Autonomous AI Agents Attack Over 100 Online Retailers
A Chinese-speaking threat actor recently directed autonomous AI agents to conduct large-scale cyberattacks against online storefronts. Beginning on September 25, these autonomous systems targeted more than 1,200 commercial websites across four nations. According to...
Linux PwnEscape Flaw Enables Cloud Virtual Machine Escapes
A critical architectural flaw in the Linux IPv4 network stack allows unprivileged guest machines to escape isolation. Specifically, threat actors can seize total root control over the underlying physical host. The vulnerability carries an...
