A Chinese cyber-espionage campaign attributed to Calypso, also known as Red Lamassu, has been targeting telecommunications providers in Asia Pacific and the Middle East with newly discovered Linux and Windows malware. The operation uses Showboat and JFMBackdoor to enable persistence, espionage, proxying, and internal network movement across compromised systems. #Calypso #RedLamassu #Showboat #JFMBackdoor
Category: Cyber Security News
Modern crypto theft has evolved into Drainer-as-a-Service platforms like Lucifer DaaS, where affiliates drive traffic to fake crypto, NFT, and DeFi sites while operators handle wallet approvals and asset transfers. Flare’s analysis of underground posts shows a professionalized ecosystem focused on automation, affiliate commissions, resilience, and scalability, making wallet theft faster and harder to disrupt. #LuciferDaaS #Flare #Permit2 #InfernoDrainer
Apple rejected more than 2 million App Store submissions in 2025 and blocked 1.1 million fraudulent account creations, using AI and human review to stop abuse at scale. The company said these efforts prevented over $2.2 billion in potentially fraudulent transactions and disrupted illegal distribution channels hosting malware and pirated apps….
Ocean has emerged from stealth with $28 million in funding to advance its agentic email security platform, backed by Lightspeed Venture Partners, Picture Capital, Cerca Partners, and angel investors. The New York City and Tel Aviv-based startup uses specialized AI agents to analyze message intent, context, and evidence to stop sophisticated…
Cisco released fixes for a critical flaw in Secure Workload, tracked as CVE-2026-20223, that could let attackers gain Site Admin privileges and access or alter tenant resources through crafted REST API requests. The company also patched three medium-severity bugs in ThousandEyes and Nexus switches that could enable remote command execution or…
Organizations often believe they are ready for cyberwarfare and AI-driven threats, but the article argues that confidence can mask a lack of true resilience. It highlights how generative AI, expanding attack surfaces, and alert overload expose the gap between compliance-based preparedness and real-world defense, and calls for stronger cyber exposure management. #GenerativeAI #CyberExposureManagement
Black Kite’s 2026 report says supply chain security is being overwhelmed by rapid vulnerability growth, with more than 48,000 CVEs published in 2025 and exploitation often happening before patches are released. The report argues that organizations need far better visibility into which vulnerabilities are truly reachable and critical, especially as AI,…
Google’s Chrome security advisories show a sharp rise in vulnerabilities reportedly found internally, climbing from a few dozen in late March and April to 100 by May 5. The pattern suggests AI may be accelerating flaw discovery, while Google’s own tools like Big Sleep and CodeMender also point to a growing…
Microsoft patched two exploited zero-day vulnerabilities in Defender, including a privilege escalation flaw tracked as CVE-2026-41091 and a denial-of-service issue tracked as CVE-2026-45498. CISA added both bugs to its Known Exploited Vulnerabilities list and urged federal agencies to patch them by June 3. #MicrosoftDefender #CVE-2026-41091 #CVE-2026-45498 #CISA #BlueHammer #RedSun #UnDefend #ChaosEclipse…
GitHub confirmed that attackers accessed 3,800 internal repositories through a malicious Nx Console VS Code extension tied to the TanStack npm supply-chain attack. The incident was linked to TeamPCP, which also claimed stolen GitHub source code and private repositories for sale after stealing CI/CD credentials and secrets. #NxConsole #TanStack #TeamPCP #GitHub
Microsoft has released patches for two zero-day vulnerabilities in Microsoft Defender, including CVE-2026-41091 and CVE-2026-45498, after confirmation that they were exploited in attacks. CISA has added both flaws to its Known Exploited Vulnerabilities Catalog and ordered federal agencies to patch affected Windows systems within two weeks. #CVE-2026-41091 #CVE-2026-45498 #MicrosoftDefender #CISA
Discord announced that voice and video messages will now be end-to-end encrypted by default, with no opt-in required, across nearly all surfaces except stage channels. The move follows a broader industry split, as some platforms drop encryption while Google and Apple expand it, and Discord highlights its ability to support encrypted…
Drupal has released security updates for CVE-2026-9082, a critical flaw in Drupal Core that can enable SQL injection on PostgreSQL-backed sites and may lead to information disclosure, privilege escalation, or remote code execution. The issue affects only Drupal sites using PostgreSQL and can be exploited by anonymous users, with fixes available…
GitHub confirmed its internal repositories were breached through an employee device compromised by a poisoned Nx Console VS Code extension, linked to the broader TanStack supply chain attack. The short-lived malicious extension was used by TeamPCP to steal credentials from developer systems and access sensitive services, prompting GitHub to rotate secrets…
Ukrainian authorities say an 18-year-old suspect from Odesa is linked to an international cybercrime operation that compromised nearly 30,000 customer accounts at a U.S.-based online retailer and facilitated unauthorized purchases worth about $721,000. Investigators allege the group used info-stealing malware to harvest credentials and session data, then sold the stolen information…