Group-IB uncovers new Nimbus Manticore infrastructure, an SSH tunneler, and a TWOSTROKE-like C++ backdoor across Europe and the Middle East.

NovaCookies proxies Microsoft 365 sign-ins through attacker infrastructure to steal sessions using Docusign lures and OAuth redirects.

CISA red teams reach domain-level compromise at two critical infrastructure organizations, but only one SOC detects and contains initial intrusion.

Meta has reached a proposed settlement worth up to approximately $18 billion with a bipartisan coalition of 52 attorneys generals over allegations that Facebook and Instagram were deliberately designed to encourage compulsive use by children and teenagers.

The settlement, which is awaiting court approval, resolves a lawsuit filed in 2023 by California Attorney General Rob Bonta and a bipartisan coalition of state attorneys general.

The lawsuit accused Meta of designing features that drove compulsive use among young users while misleading users, families, and the public about the risks of its platforms.

Blocking the kinase BRAF reduces nociceptive transmission in spinal cord after injury.

As demand for CAR T therapies grows, modular platforms are offering process development teams new ways to improve cell expansion, recovery and scale-up.

A world-first trial has shown that light encoded with topological information can withstand severe atmospheric distortion.

:

Infrasound describes sound wave frequencies below 20 Hz, which are typically imperceptible to humans. Some animals perceive and demonstrate aversion to infrasound, raising concerns about its potential adverse effects as an anthropogenic pollutant. Recent research suggests humans may also respond to infrasound, despite being below the conventional limit of human hearing. This study explored the non-auditory impact of infrasound on human mood and stress responding.

A campaign uses 24 npm packages and unpkg mirrors to host fake Cloudflare CAPTCHA pages that can redirect users to attacker-chosen sites.

Attackers are scanning for two miniOrange SAML flaws, including CVE-2026–15981, that can bypass login and grant WordPress admin access.