inionline.net https://validator.w3.org/feed/docs/rss2.html ‘CoSnitch’ Attack Tricked Copilot into Mapping Out Architecture Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers CISOs Break Their Silence in ‘Declassified’ Docuseries ‘Grandoreiro’ Malware Resurfaces With Mexico Campaign Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps Why “Shady AI” is Security’s Next Big Governance Problem No-Filter ‘Kriminal’ AI Platform Raises Cybercrime Concerns Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior SilkParasite Threatens Central Asian Orgs With Flurry of RATs SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs Phishing 3.0: The Fight Moves to Agent Versus Agent StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data China-Linked Hacker Shows AI Capabilities in APAC Attack CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P Critical GitLab Zero-Click Flaw Poses Mitigation Challenges NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000 ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud 40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets ‘Ransom Busters’: Ransomware Actor Poses as Incident-Recovery Service Silent ‘TwinLoot’ Cyber Threat Operates Entirely From Microsoft’s Cloud AI “Mind Viruses” Can Spread Between Agents Through Persistent Prompt Files TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks 16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025 SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code Video Call Exploit Chains Two Flaws in Unisoc Modems Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects ‘Turf War’ Between Claude Agents Leads to Self-Replicating Malware Adam Shostack Talks Hugging Face & PHANTOM-B Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic Linux Botnet Evooo1Bot Expands Mirai Capabilities Well Beyond DDoS ⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More How MCP Servers Can Expose Enterprise Secrets Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies