Find a story
Search Spins
Search titles, summaries, and missing voices across published articles — press releases, announcements, and media coverage.
31 results for “Security researchers”
Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt
Cybersecurity researchers identified 'Poison Claude', an illicit service advertising unauthorized access to Anthropic's LLMs on underground forums, raising concerns about model leakage, prompt interception, and AI supply chain integrity.
Aug 5, 2026
Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain
Cybersecurity researchers identified a novel malware technique called NullReceiver that hides command-and-control server IP addresses in empty Ethereum transaction destination addresses within compromised npm packages.
Aug 5, 2026
QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer
A supply chain attack compromised QuickFox's Windows installer to deliver the FDMTP backdoor, targeting overseas Chinese users since at least August 2025.
Aug 5, 2026
Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access
A cybersecurity threat campaign named SMOKE#SCREEN is actively using fake Adobe and Zoom update lures to socially engineer users into installing ConnectWise ScreenConnect — a legitimate RMM tool — for unauthorized, persistent remote access.
Aug 4, 2026
New Pass-ta-key attacks let malware hijack Google-synced passkeys
Security researchers identified three novel malware-based attacks that exploit Google's synced passkey infrastructure on compromised Windows devices to steal private keys and hijack accounts without user verification.
Aug 4, 2026
Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments
A nine-year cyberfraud operation cloned websites of Russian industrial firms to trick international buyers into sending advance payments to fraudulent accounts.
Jul 29, 2026
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass
A critical authentication bypass vulnerability (CVE-2026-16232, CVSS 9.3) in Check Point’s SmartConsole login process has been actively exploited in the wild, and researchers have now released a public proof-of-concept exploit.
Jul 29, 2026
24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login
Security researchers discovered 24,650 internet-exposed BMCs leaking IPMI password hashes pre-authentication — a critical credential exposure risk enabling offline brute-force attacks.
Jul 28, 2026
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
A security research team released a proof-of-concept exploit for a known, patched GitLab remote code execution vulnerability — enabling authenticated users to execute arbitrary commands as the 'git' system user on unpatched self-managed instances.
Jul 25, 2026
ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
A critical vulnerability dubbed AgentForger was disclosed in OpenAI's ChatGPT Workspace Agents, enabling unauthorized deployment of autonomous AI agents via phishing links; it has been patched as of June 8.
Jul 24, 2026
How AI guardrails are impeding the work of offensive cybersecurity researchers
Cybersecurity researchers report that AI model guardrails from OpenAI and Anthropic are interfering with legitimate offensive security research, raising concerns about unintended constraints on vulnerability discovery.
Jul 24, 2026
Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files
A sandbox escape vulnerability was disclosed in Anthropic's Claude Cowork AI agent, enabling unauthorized file access on macOS hosts by breaking out of its Linux VM confinement.
Jul 23, 2026
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs
A high-severity local privilege escalation vulnerability (CVE-2026-8933, CVSS 7.8) in snap-confine allows unprivileged users to gain root access on default Ubuntu Desktop installations (24.04, 25.10, 26.04), posing immediate system compromise risk.
Jul 23, 2026
If you pay a hacker’s ransom, chances are that they’ll come back for more
The article states a widely accepted security principle: paying ransomware demands incentivizes repeat attacks because attackers face no penalty and gain confirmation of victim willingness to pay.
Jul 22, 2026
Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library
A malicious typosquat package named 'Newtonsoftt.Json.Net' was discovered on NuGet, impersonating the legitimate Newtonsoft.Json library to inject code that manipulates live game outcomes for Digitain.
Jul 22, 2026
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
A software supply chain attack named SleeperGem deployed three malicious RubyGems packages to compromise developer machines and deliver secondary payloads.
Jul 20, 2026
New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands
A new modular malware named TELEPUZ has been observed spreading since late April 2026 via compromised websites using ClickFix lures, enabling data theft and remote command execution.
Jul 16, 2026
TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development
Cybersecurity researchers disclosed TuxBot v3 Evolution, an IoT botnet framework exhibiting evidence of LLM-assisted development — but with flawed, non-functional code due to the LLM inserting safety disclaimers the developer overlooked.
Jul 16, 2026
CISA and Partners Publish Guidance to Help Software Manufacturers and Online Service Providers Work With Security Researchers
CISA and partners released voluntary guidance to help software manufacturers and online service providers collaborate more effectively with security researchers, aiming to improve vulnerability disclosure practices and strengthen digital infrastructure resilience.
Jul 15, 2026
LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts
A newly discovered Rust-based remote access trojan named LabubaRAT impersonates NVIDIA software to evade detection and establish persistent access on Windows systems.
Jul 14, 2026
RabbitMQ Flaws Could Leak OAuth Secrets and Expose Cross-Tenant Queue Metadata
Two access control flaws in RabbitMQ could allow attackers to leak OAuth client secrets and bypass tenant boundaries, posing risks to enterprise messaging infrastructure.
Jul 14, 2026
11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot
Security researchers identified 11 legacy Microsoft-signed UEFI shims with unpatched vulnerabilities that permit Secure Boot bypass, enabling persistent pre-OS malware execution.
Jul 14, 2026
Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory
An unknown threat actor used a PowerShell script exhibiting characteristics suggestive of AI-assisted coding ('vibe-coded') to enumerate and map Active Directory infrastructure, raising concerns about AI's role in lowering the barrier to sophisticated cyberattacks.
Jul 13, 2026
Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns
Cybersecurity researchers disclosed a multi-month cyber espionage campaign targeting Pakistani law enforcement systems—including Balochistan Police’s web applications handling criminal and citizen data—by suspected China- and India-aligned threat actors from February 2024 to April 2026.
Jul 12, 2026