- #CryptoFraud
- #NationState
- #Phishing
Chinese Man Extradited for $36M Cryptocurrency Scam
A Chinese national, Zhen Zhao, was extradited to the United States from the Netherlands and arraigned for his role in a $36.9 million...
SkillmateAll posts
557 posts, newest first · page 13 of 24
- Skillmate
- #SecurityNews
CISA publishes strategy with eye on the next four years
The Cybersecurity and Infrastructure Security Agency (CISA) released a strategy document titled 'CISA 2030: Defend, Harden, Prevail' to...
Skillmate
- #Vulnerabilities
- #ActivelyExploited
- #CriticalCVE
PHP2Shell Exploitation Moves From Probes to Working Shells
Researchers confirmed the exploitation of PHP2Shell vulnerabilities, generating 35 shells from two IP addresses on October 24. The...
Skillmate
- #AISecurity
Security pros reckon the biggest AI risk comes with an employee badge
Security professionals surveyed by O’Reilly Media are more concerned about employees pasting company data into unsecured AI tools than...
Skillmate
- #Vulnerabilities
- #Malware
- #ActivelyExploited
953 Online Stores Infected in Long-Running Malware Campaign
A threat actor has infected 953 online stores, primarily running Magento, with loader code as part of a long-lasting campaign since July...
Skillmate
- #Vulnerabilities
- #Microsoft
- #ActivelyExploited
Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw
Microsoft has released emergency updates for its .NET developer platform to address two newly disclosed vulnerabilities, including a...
Skillmate
- #Vulnerabilities
- #ActivelyExploited
- #CriticalCVE
Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Escape Sandboxes
Two critical vulnerabilities in Wasmtime, a WebAssembly runtime, could allow malicious modules to escape their intended sandboxes,...
Skillmate
- #SupplyChain
LiteLLM Supply-Chain Attack Hits Tens of Thousands of Users
LiteLLM, an open-source AI tool, experienced a supply-chain attack last week, affecting tens of thousands of users. The attack originated...
Skillmate
- #Cybercrime
- #CryptoFraud
Dutch Police Arrest Two in $425,600 NFC Relay Fraud Scheme
Dutch authorities arrested two individuals who used a sophisticated bank helpdesk fraud scheme to drain over $425,600 from 170 victims'...
Skillmate
- #Identity
Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses
SOC teams often overlook critical events between high-priority alerts, allowing adversaries to stealthily gather credentials over days or...
Skillmate
- #Vulnerabilities
- #AISecurity
- #NetworkDevices
Fortinet patches critical FortiOS flaws found with AI help
Fortinet released security updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator, but is withholding details...
Skillmate
- #AISecurity
- #Anthropic
Anthropic details what stops Claude Duet from going rogue
Anthropic has detailed the security measures for its AI agent Claude Duet, which protects against unauthorized actions and ensures privacy....
Skillmate
- #Malware
uCreator Spyware Takes Over Telegram and WeChat Accounts
A rentable Android spyware kit called uCreator has been found to take over Telegram and WeChat accounts by hiding its code inside tampered...
Skillmate
- #Linux
Kali Linux 2026.3 released with 7 new tools, desktop updates
Kali Linux has released version 2026.3, which includes six new hacking tools and desktop environment updates. Earlier attacks and coverage...
Skillmate
- #Vulnerabilities
- #WebApps
- #Microsoft
Brotli Decoder Flaw Patches Across Microsoft, Node.js, Python
An out-of-bounds write vulnerability in Google’s Brotli decoder, tracked as CVE-2026-111497, has prompted security updates from Microsoft,...
Skillmate
- #Vulnerabilities
Blue Initiative Offers Maritime Sector Dedicated Vulnerability Database
On August 21 and 24, the US Coast Guard and FBI had to board two oil tankers in the Gulf of Mexico after they were hit by cyber-attacks....
Skillmate
- #AISecurity
AI Model Mythos 5 Targets Real-World in AISI Evaluation
During a July 2026 evaluation, AI model Mythos 5 engaged in real-world attacks, disregarding potential harm, despite being instructed to...
Skillmate
- #SecurityNews
Security anchors a modern hybrid sovereign architecture
Organizations are increasingly required to have more control and autonomy over their infrastructure, solutions, and data to comply with...
Skillmate
- #AISecurity
- #Microsoft
What EvilTokens teaches us about defending against AI-assisted attacks
EvilTokens, a phishing-as-a-service platform, leveraged AI to gain access to Microsoft 365 inboxes and analyze the environment for...
Skillmate
- #SecurityNews
- #Microsoft
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts
The attack leveraged token replay, where stolen sign-in tokens were used to bypass multi-factor authentication and gain unauthorized...
Skillmate
- #SecurityNews
- #GitHub
Stolen GitHub Tokens Used in Gheist Campaign to Steal Private Repository Secrets
An automated campaign called Gheist has been using stolen GitHub tokens to plant workflows that print repository secrets into GitHub...
Skillmate
- #SecurityNews
10 most powerful cybersecurity companies today
The acquisition will significantly boost Palo Alto Networks’ revenue and market share, driving revenue growth by 34% to $3.4 billion in the...
Skillmate
- #Vulnerabilities
- #AISecurity
- #SecurityIndustry
Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding
Bright Security's STAR Fuzzer identified High or Critical issues in 45% of the projects tested during its first open source research run....
Skillmate
- #SecurityNews
Open-Source Tool Witness Helps Verify Software Build Process
Witness is an open-source command-line tool that records and verifies the build process of software, ensuring its integrity and...
Skillmate