Kaspersky says attackers are using fake WhatsApp document attachments to run VBScript malware and install ManageEngine RMM Central.
Get the latest international news and world events from around the world.
DoJ Seizes Huione Cloud Account Tied to Cyber Scam Money Laundering
DoJ seized HuiOne cloud infrastructure as Treasury sanctioned Prince Group-linked entities over crypto fraud and money laundering.
Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root
Threat actors have begun to exploit a recently disclosed critical security flaw impacting Cisco Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition (Unified CM SME).
The vulnerability, tracked as CVE-2026–20230 (CVSS score: 8.6), is a case of improper input validation for specific HTTP requests that could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device.
“An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device,” Cisco said in an advisory released earlier this month. “A successful exploit could allow the attacker to write files to the underlying operating system that could be used later to elevate to root.”
FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation
FortiBleed targeted 430,000 FortiGate firewalls with sniffers and brute-force pipelines that identified over 110 million credentials.
Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents
AIR says its fake AI skill passed scanner checks by using a mutable external link, exposing a blind spot in agent skill vetting.
Agentic AI: The Weapon That No Longer Needs a Warrior
Agentic AI is pushing offensive security beyond chatbots into autonomous recon, social engineering, exploit testing, and malware adaptation.
New macOS ClickFix attack silently mounts DMGs to push infostealer
A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from malicious disk image (DMG) files.
The campaign is infecting Mac devices with the Atomic macOS Stealer (AMOS) infostealer, which steals browser credentials, cryptocurrency wallet data, Keychain data, messaging app information, and user documents.
Researchers at Palo Alto Networks Unit 42 first discovered the campaign and say it begins with a fake CAPTCHA page that tells users to open Terminal and paste a malicious command to verify themselves.
GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns
GitHub’s actions/checkout v7 now blocks risky fork PR checkouts in privileged workflows to reduce common pwn request attacks.
Earth’s energy imbalance has doubled—here’s why that matters
Heatwaves across Europe and South Asia have dominated the news recently. But these events are really a surface expression of more fundamental changes affecting our planet: Earth itself is accumulating heat faster than ever before.
We lead a large international team of scientists who come together every year to provide an update on the state of the climate system. This year, we find that Earth’s energy imbalance—the difference between the amount of energy entering and leaving the planet—has doubled in recent decades and is now at record levels.
This extra heat is a key indicator of the pace and scale of human-caused climate change. In a climate unaffected by human greenhouse gas emissions, Earth’s energy imbalance would be zero. But since the 1970s, Earth has become increasingly out of balance. This rate of increase is faster than expected, and work is underway to understand exactly why this is happening.
Scaling deep learning for materials discovery
A protocol using large-scale training of graph networks enables high-throughput discovery of novel stable structures and led to the identification of 2.2 million crystal structures, of which 381,000 are newly discovered stable materials.