Mandiant open sources tool to prevent leaky Salesforce misconfigs Summary Mandiant has released AuraInspector, an open-source, read-only tool designed to help Salesforce administrators detect and remediate misconfigurations in Aura components…
FBI Flags Quishing Attacks From North Korean APT Summary The FBI has issued a flash alert warning that North Korea’s state-sponsored APT group Kimsuky is using “quishing” — QR-code-based phishing…
Armenia probes alleged sale of 8 million government records on hacker forum Summary Hackers claiming the alias “dk0m” advertised a dataset of about 8 million Armenian government-related records on an…
Infamous BreachForums forum breached, spilling data on 325K users Summary BreachForums — a repeatedly resurrected marketplace for stolen data — was itself breached, leaking roughly 324,000 unique user records. The…
Chinese nuclear fusion reactor pushes plasma past crucial limit: what happens next Article Date: 09 January 2026 Article URL: https://www.nature.com/articles/d41586-026-00063-4 Article Image: https://media.nature.com/lw767/magazine-assets/d41586-026-00063-4/d41586-026-00063-4_51917120.jpg Summary Researchers working on China’s Experimental Advanced…
Russia’s Fancy Bear APT Doubles Down on Global Secrets Theft Summary Fancy Bear (APT28 / Recorded Future’s BlueDelta), a GRU-linked threat actor, ran low-cost, targeted credential-harvesting campaigns from February to…
China-linked cybercrims abused VMware ESXi zero-days a year before disclosure Summary Huntress reports that China-linked attackers were using a VMware ESXi VM-escape toolkit in December 2025 that appears to have…
At least $26 million in crypto stolen from Truebit platform as crypto crime landscape evolves Summary Hackers stole more than $26 million (8,535 ETH) from the Truebit platform on Thursday…
QR codes a powerful new phishing weapon in hands of Pyongyang cyberspies Summary The FBI warns that North Korea-linked threat actor Kimsuky has been using QR codes to deliver credential‑stealing…
Maximum Severity HPE OneView Flaw Exploited in the Wild Summary A maximum-severity remote code execution vulnerability, CVE-2025-37164, affects Hewlett Packard Enterprise’s OneView management platform and has been added to CISA’s…
