inionline.net https://validator.w3.org/feed/docs/rss2.html Threat Gang ‘Springs’ Vishing Attacks on Microsoft Teams Users Fake Software Installers Disable Windows Update and Weaken Microsoft Defender Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control How to Secure Enterprise AI: From Adoption to Incident Readiness Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials Authorities Turn Sality’s P2P Network Against Itself, Cutting Off New Malware Payloads Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency Attackers Pounce on Critical Artifactory Flaw Following Disclosure Stronger Security Drives Ransomware Groups to Recruit From Within Critical Langflow Flaw Exploited as Attacks on AI Platform Rise Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems 13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds ClickFix Campaign Compromises 31 Orgs, Abuses Polygon Blockchain Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones Attackers Steal METR API Key and Consume AI Credits Worth About $600,000 Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE Anthropic Users Hit by Infostealer Attacks, Session Thefts TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor ‘TerminalFix’ Campaign Weaponizes PowerShell for Enterprise Attacks AI Model Rules Are Not Security Controls North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales ⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs DoJ Corrects China Hacking Claim, Says U.S. Agencies Were Targets, Not Victims Berlin Refuses to Pay Hackers Who Stole Data From the City’s State Network Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable Hundreds of OpenAI Agents Invaded Hugging Face Servers Offensive Security Investments Surge as AI Threats Increase Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers 19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code You Need Cyber Deception for OT Defining an AI Kill Switch Is Hard, But Necessary The Vulnpocalypse Is Repricing the Bug Bounty Economy Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth Key Reasons Why Identity Fabric Matters in 2026