inionline.net https://validator.w3.org/feed/docs/rss2.html Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain Large Enterprises Targeted in Fake Merger & Acquisition Scams What We Missed: Did ShinyHunters ‘Breach’ ReliaQuest? GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth Traps + 17 More Stories Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data AI’s Vulnerability Surge May Be More Manageable Than First Feared SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE AI Gives Cybercriminals a Dangerous Time Advantage Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs Threat Gang ‘Springs’ Vishing Attacks on Microsoft Teams Users Fake Software Installers Disable Windows Update and Weaken Microsoft Defender Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control AI ‘Machine Speed’ Cuts 2-Week Attack Down to 10 Hours ‘Breeze Comet’ Tears Into Brazilian & Global Financial Systems US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries How to Secure Enterprise AI: From Adoption to Incident Readiness Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks Shai-Hulud’s Reach Just Grew to 469 Credential Locations. Here’s What That Means Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another Authorities Turn Sality’s P2P Network Against Itself, Cutting Off New Malware Payloads Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency Attackers Pounce on Critical Artifactory Flaw Following Disclosure Stronger Security Drives Ransomware Groups to Recruit From Within Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member’s iPhone Critical Langflow Flaw Exploited as Attacks on AI Platform Rise Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems 13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds ClickFix Campaign Compromises 31 Orgs, Abuses Polygon Blockchain Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding Tests Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones Attackers Steal METR API Key and Consume AI Credits Worth About $600,000 Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners Anthropic Users Hit by Infostealer Attacks, Session Thefts ‘TerminalFix’ Campaign Weaponizes PowerShell for Enterprise Attacks AI Model Rules Are Not Security Controls North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales ⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions