SecurityWeek

The infection chain includes a fake CAPTCHA page, a Bash script, a Nuitka loader, and the Python-based infostealer.

The group that it was making available for download emails and other documents from Patel’s account.

Other noteworthy stories that might have slipped under the radar: Heritage Bank data breach, new State Department unit tackles cyber threats, LA Metro disruptions.

Through the new program, OpenAI will reward reports covering design or implementation issues leading to material harm.

The security defects could be used to bypass authentication, execute arbitrary commands, and decrypt configuration files.

A summary of the announcements made by vendors on the third and fourth days of the RSAC 2026 Conference.

Coruna contains the updated version of a kernel exploit used in Operation Triangulation three years ago.

Police in Germany physically warned organizations about the critical PTC Windchill vulnerability tracked as CVE-2026-4681.

The holdings company says hackers stole names, Social Security numbers, and driver’s license numbers from its environment.

Specially crafted domains could be used to cause out-of-memory conditions, leading to memory leaks in the BIND resolvers.

The state-sponsored threat actor deployed kernel implants and passive backdoors enabling long-term, high-level espionage.

The high- and medium-severity flaws could lead to denial-of-service, secure boot bypass, information disclosure, and privilege escalation.

Hambardzum Minasyan of Armenia has been accused of being involved in the development and administration of the infostealer malware.

The computer giants have announced new security capabilities for PCs and printers.

The startup will invest in product development and go-to-market efforts as it expands into new sectors.

Ilya Angelov was a member of the cybercrime group tracked as TA-551, Shathak, Gold Cabin, Monster Libra, and ATK236.

PwC finds AI is amplifying speed and scale of attacks, as identity theft evolves into a cybercriminal supply chain.

Apple released security fixes for older devices as well, in iOS 18.7.7, iPadOS 18.7.7, macOS Sequoia 15.7.5, and macOS Sonoma 14.8.5.

The ban aligns with a White House determination that all routers produced abroad are a threat to national security.

A summary of the announcements made by vendors on the second day of the RSAC 2026 Conference.