inionline.net https://validator.w3.org/feed/docs/rss2.html Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations 16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems JadePuffer: The First Complete LLM-Driven Ransomware Attack Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure ⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More How to Evaluate an AI SOC Platform in 2026: 6 Capabilities That Separate Leaders from Bolt-On AI solutions Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign Ivanti Sentry Pre-Authentication RCE SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices New “Bad Epoll” Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android New Avalon Malware Framework Packs CrownX Ransomware Capabilities North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords Crafty Phishing Campaigns Auto-Adapt to Victim’s Device, OS Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer Chinese LLMs Broaden the Gap Between Attackers & Defenders And the Winner in Dominant Malware Delivery? ClickFix Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters FortiBleed Actors Collaborating With Inc, Lynx Ransomware Gangs CitrixBleed-ing Again? NetScaler Vulnerability Under Attack Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials Ransomware Thugs Masquerade as Interpol to Entice Small Biz ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API 19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer Anthropic’s AI Finds Bugs. IBM Bets $5B It Can Fix Them. Identity Lifecycle Management Wasn’t Built for AI Agents  AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation European Parliament Member Investigating Spyware Was Hacked With Pegasus SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic Aussies Face Reduced Cybercrime Risk, as Pressure Shifts to SMBs ‘Phantom Squatting’: An Emerging AI-Driven Supply Chain Threat Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands Apple Reverses Age-Old Patch Policy to Keep Up With AI Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts Safe Events Start With Threat Intel and Digital Security ‘BusySnake’ Infostealer Slithers into Critical Infrastructure Networks