Category: Cyber Security News

SailPoint disclosed that unauthorized access to a subset of its GitHub repositories was detected on April 20 and quickly contained after the company’s response team terminated the activity. The company says the intrusion came through a vulnerability in a third-party application, with no evidence of access to production or staging customer…

Small and medium-sized businesses face average cyberattack costs of more than $250,000, making a full-time CISO too expensive for many and leaving them vulnerable to increasingly sophisticated threats. The article argues that vCISO and fractional CISO models, backed by CISA, SBA, NIST, Congress, and federal procurement rules, can give SMBs affordable executive-level cybersecurity leadership and better supply-chain protection. #CISA #SBA #NIST

German police announced the shutdown of the second version of Crimenetwork, a German-speaking crime marketplace that was rebuilt after its original takedown in December 2024. The platform facilitated illegal trades and cryptocurrency payments, and investigators seized data and assets while arresting a suspected administrator in Mallorca. #Crimenetwork #Bitcoin #Litecoin #Monero…

Operation HookedWing is a long-running phishing campaign that has operated for more than four years, stealing over 2,000 credentials from more than 500 organizations across multiple sectors. It uses Microsoft- and Outlook-themed lures, GitHub-hosted infrastructure, and increasingly tailored landing pages to collect email, password, IP address, geolocation, and organization data. #OperationHookedWing…

Attackers are abusing Google Ads and legitimate Claude.ai shared chats to trick macOS users searching for “Claude mac download” into running malware through terminal commands. The campaign delivers polymorphic shell scripts and, in one variant, a MacSync infostealer that steals browser credentials, cookies, and Keychain data. #Claude.ai #MacSync #TrendyolGroup #AppleSupport

German authorities shut down the relaunched Crimenetwork marketplace after it generated at least €3.6 million and seized illicit assets and user data. A 35-year-old German suspect was arrested in Mallorca for rebuilding and operating the new infrastructure shortly after the original takedown. #Crimenetwork #BKA #ZIT #Frankfurt #Mallorca

Researchers disclosed CVE-2026-7482, a critical out-of-bounds read in Ollama’s GGUF model loader that could let a remote attacker leak process memory, including API keys, system prompts, and conversation data. Separate unpatched Windows update flaws, CVE-2026-42248 and CVE-2026-42249, can be chained for persistent code execution through Ollama’s updater and Startup folder behavior….

The official JDownloader website was compromised to serve malicious Windows and Linux installers, and the Windows payload installed a Python-based remote access trojan. Only users who downloaded the affected alternative installer links between May 6 and May 7, 2026 were at risk, and the developers advised reinstalling systems and resetting passwords if the malware was executed. #JDownloader #AppWorkGmbH #ThomasKlemenc #ZiplineLLC #TheWaterTeam

A malicious Hugging Face repository impersonated OpenAI’s “Privacy Filter” project and used a deceptive loader to deploy the Sefirah infostealer against Windows users. HiddenLayer found the typosquatted Open-OSS/privacy-filter campaign after it reached #1 on Hugging Face, gained 244,000 downloads, and was linked to related infrastructure and an npm typosquatting operation. #OpenAI #HuggingFace #HiddenLayer #OpenOSS #privacyfilter #sefirah #WinOS40

cPanel has released updates for three vulnerabilities in cPanel and WHM that could lead to arbitrary file read, Perl code execution, denial-of-service, and possible privilege escalation. The patches are available across multiple supported versions, and users on older CentOS 6 or CloudLinux 6 systems should update to 110.0.114 while noting that…

Tom Parker has emerged as a possible candidate to lead CISA after 16 months without a Senate-confirmed director, drawing support for his mix of technical expertise, business experience, and public-sector cybersecurity policy work. If nominated, he would face a difficult confirmation process and the challenge of restoring trust in CISA while addressing AI-driven threats and strengthening partnerships with industry. #CISA #TomParker #MarkwayneMullin #SeanPlankey #RonWyden #SaltTyphoon

ShinyHunters claims it carried out a second breach of Instructure, the company behind the Canvas LMS, even after Instructure said the incident was contained and over. The attack allegedly exposed data from thousands of schools and institutions, including student records and private messages, while forcing Canvas offline again to contain the ongoing incident. #ShinyHunters #Instructure #Canvas #FreeForTeacher