Category: Cyber Security News

AI bills of materials are emerging as a way to document the models, datasets, training history, licensing, and runtime dependencies that traditional SBOMs miss. Regulators, standards groups, and security leaders are pushing AI BOMs to improve visibility into high-risk AI systems as the AI supply chain grows more complex and opaque. #AI_BOM #SBOM #EU_AI_Act #NIST #CISA #G7

Microsoft disrupted Fox Tempest, a cybercrime service that sold more than 1,000 code-signing certificates to help malicious software appear trusted and bypass security defenses. The operation supported multiple ransomware groups and malware families, and Microsoft seized its infrastructure to raise costs for attackers. #FoxTempest #Rhysida #VanillaTempest #Storm0501 #Storm2561 #Storm0249 #INC #Qilin #Akira #Oyster #LummaStealer #MuddyWater #Vidar

Mini Shai-Hulud has resurfaced as a self-replicating worm inside hundreds of npm packages, with TeamPCP using stolen tokens and CI/CD access to spread poisoned releases and persist on infected systems. The malware steals credentials, plants backdoors that survive package removal, and continues monitoring victims through services like kitty-monitor and gh-token-monitor. #MiniShaiHulud #TeamPCP #npm #AntV #TallyUI #echartsforreact #timeagojs #TanStack #UiPath #MistralAI

Microsoft says Windows Update may fail in network-restricted environments after installing the January 2026 optional non-security preview updates, showing error code 0x80010002 on affected devices. Administrators can use Known Issue Rollback group policies as a workaround while Microsoft works on a permanent fix. #WindowsUpdate #KnownIssueRollback #KB5083806 #KB5083631

BleepingComputer will host a live webinar on June 2, 2026, featuring Edgar Ortiz from Tines to discuss how AI-assisted workflows and automation can fix gaps in network incident response. The session will show how to reduce manual triage, improve coordination, and speed up resolution across alerting, investigation, routing, and remediation. #BleepingComputer #Tines #EdgarOrtiz

B1ack’s Stash has announced the free release of 4.6 million stolen credit card records after detecting sellers reselling its data on competing platforms. SOCRadar says the dump contains highly detailed payment and identity information, with 4.3 million records appearing new and usable for fraud, and the cards are largely sourced from…

An unpatched flaw in ChromaDB, tracked as CVE-2026-45829 and dubbed ChromaToast, can let unauthenticated attackers execute code remotely and gain shell access before authentication checks run. Successful exploitation could expose API keys, environment variables, mounted secrets, and other sensitive files on affected systems. #ChromaDB #CVE-2026-45829 #ChromaToast #HuggingFace…

MSHTA, a long-standing Windows component, is increasingly being abused by threat actors as a living-off-the-land binary to quietly deliver malware through social engineering and remote script execution. Bitdefender observed campaigns using MSHTA to spread Lumma, Amatera, ClipBanker, Emmenhtal, and PurpleFox, showing that legacy trust mechanisms remain highly effective for attackers. #MSHTA…

Researchers uncovered a new Mini Shai-Hulud supply chain campaign that compromised numerous npm packages in the @antv ecosystem, including echarts-for-react, and used stolen maintainer and CI/CD tokens to push trojanized releases at scale. The attack steals cloud, developer, and infrastructure credentials, exfiltrates data through GitHub and external servers, and is linked…

Researchers uncovered a compromised Nx Console extension, rwl.angular-console 18.95.0, on the Microsoft Visual Studio Code Marketplace that silently executed an obfuscated payload to steal developer secrets and enable supply chain abuse. The attack was traced to leaked GitHub credentials from a developer account and affected the Nx ecosystem, prompting users to…

Universal Robots has fixed CVE-2026-8153, a critical command injection flaw in the Dashboard Server interface of PolyScope 5 that could allow remote code execution on cobot controllers. Security researchers warned that flat, poorly segmented OT networks could let attackers compromise individual cobots or even an entire fleet. #UniversalRobots #PolyScope5 #CVE-2026-8153 #Claroty…

A software supply chain attack compromised the GitHub Actions workflow actions-cool/issues-helper, using imposter commits and poisoned tags to steal credentials from CI/CD pipelines. StepSecurity also found 15 compromised tags in actions-cool/maintain-one-comment, while the exfiltration domain t.m-kosche[.]com may be linked to the Mini Sha-Hulud campaign. #actions-cool/issues-helper #actions-cool/maintain-one-comment #StepSecurity #MiniSha-Hulud…

OpenAI is rolling out a ChatGPT feature that lets users connect financial accounts for personalized money advice, with support from Plaid and future integration with Intuit. Privacy and security experts warn that even view-only access could expose highly sensitive financial details and create a valuable target for account takeover attacks. #OpenAI…

AI-assisted bug reports are flooding vulnerability disclosure channels, forcing GitHub and other programs to demand stronger validation, proof of concept, and real-world exploitability before accepting submissions. While Anthropic’s Mythos appears better at chaining exploits and generating proof-of-concept code, researchers like curl maintainer Daniel Stenberg say its gains over earlier models may be modest. #GitHub #Anthropic #Mythos #OpenAI #Cloudflare #curl