Telegram channels expose rapid weaponization of SmarterMail flaws
• SmarterMail CVE-2026-24423 and CVE-2026-23760 enable remote code execution and auth bypass. • Attackers weaponized these flaws within days of disclosure, sharing exploits on Tele
Threat-Intelligence
Researchers Show Copilot and Grok Can Be Abused as Malware C2 Proxies
• AI assistants like Copilot and Grok can be hijacked as stealthy C2 proxies, blending into legitimate traffic. • Check Point researchers demonstrated the technique using anonymous
HoneyMyte updates CoolClient and deploys multiple stealers in recent campaigns
• HoneyMyte upgraded CoolClient backdoor with new features, enhancing persistence and stealth. • The group deployed multiple browser login data stealers across recent campaigns. •
VoidLink: Evidence That the Era of Advanced AI-Generated Malware Has Begun
• VoidLink showcases AI-generated malware capable of crafting polymorphic code. • The malware leverages generative models to evade traditional signature-based detection. • Checkpoi
Organisational use of Enterprise Connected Devices
• Enterprise connected devices expand attack surface, enabling lateral movement across corporate networks. • Insider threats amplified as employees use personal devices for work, b
Joint report on publicly available hacking tools
• Joint report reveals surge in publicly available hacking toolkits targeting critical infrastructure. • Analysts highlight increased ease of access via dark web marketplaces and o
Decrypting diversity: Diversity and inclusion in cyber security report 2021
• Cybersecurity workforce remains 70% male, with women under 20% in technical roles. • Minority representation below 15%, limiting diverse threat perspective. • 2021 report links d
What you need to know about Process Ghosting, a new executable image tampering attack
• Process Ghosting exploits the delay between process creation and thread notification, enabling pre‑scan tampering. • Attack writes malware to disk, deletes it, yet execution cont