Argentina’s judicial system is under a sophisticated cyberattack, with threat actors now abusing legitimate court documents and GitHub repositories to deploy a potent Remote Access Trojan (RAT) known as COVERT RAT. This ongoing campaign, dubbed Operation Covert Access, is specifically targeting federal courts, legal professionals, government justice agencies, and academic…

Apple has released a critical security update to address a newly discovered vulnerability in its WebKit framework, a key component underpinning Safari and other applications across iOS, iPadOS, and macOS. The vulnerability, tracked as CVE-2026-20643, could allow malicious web content to bypass security measures, potentially leading to unauthorized access or…

A critical security vulnerability affecting the GNU InetUtils telnet daemon (telnetd) has been disclosed, presenting a severe risk to unauthenticated remote attackers seeking to execute arbitrary code with elevated privileges. The flaw, identified as CVE-2026-32746, carries a CVSS score of 9.8 out of 10.0, underscoring its severity. Cybersecurity researchers at…

Iranian cyber operations in early 2026 saw state-linked actors establish persistent footholds within US and Canadian networks, while simultaneously targeting surveillance cameras across the Middle East for battlefield intelligence. This dual-pronged approach highlights a sophisticated, multi-faceted cyber strategy aimed at both espionage and real-time operational awareness. The Iranian APT group…

A sophisticated supply chain attack targeting developers using popular React Native packages was detected on March 16, 2026. The threat actor, identified as Glassworm, compromised two widely downloaded npm packages, react-native-country-select and react-native-international-phone-number, turning them into tools for silently stealing credentials and cryptocurrency. This incident highlights critical vulnerabilities in the…

Google Warns Ransomware Actors Are Shifting Tactics as Profits Fall and Data Theft Rises The ransomware threat landscape underwent a significant transformation in 2025, as criminal enterprises experienced a sharp decline in profits. Once a lucrative business model, ransomware operations are facing financial pressure due to falling ransom payment rates,…

Cybersecurity researchers have unveiled a novel technique enabling data exfiltration from AI code execution environments through the exploitation of Domain Name System (DNS) queries. This discovery, detailed in a recent report, highlights potential security gaps in how artificial intelligence services handle sensitive information and network isolation. BeyondTrust, a cybersecurity firm,…

A sophisticated supply chain attack has been uncovered targeting OphimCMS, a popular content management system used for building Vietnamese-language movie streaming websites. Six malicious Composer packages, masquerading as legitimate themes, were published on Packagist under the “ophimcms” namespace. These packages contained trojanized JavaScript, specifically fake jQuery libraries, designed to redirect…

Attackers are exploiting SEO poisoning techniques to trick enterprise users into downloading malicious VPN software, leading to the theft of sensitive credentials. A threat actor known as Storm-2561 has been actively running this campaign since May 2025, targeting employees seeking legitimate remote access tools like Pulse Secure, Fortinet, and Ivanti.…

A new ransomware variant named ‘Payload’ is posing a significant cybersecurity threat, employing Babuk-style encryption techniques and advanced anti-forensic measures against both Windows and ESXi systems. This new strain, active since at least February 17, 2026, has already targeted 12 organizations across seven countries, exfiltrating substantial amounts of data. The…

Phishing attackers are subverting a critical security feature, URL rewriting, to bypass defenses and deliver malicious payloads. This tactic allows threat actors to weaponize trusted safe links, turning a defensive mechanism into a tool of deception. What was once a safeguard is now being exploited to disguise malicious content, posing…

Phishers are now leveraging legitimate customer support tools, specifically the widely-used SaaS platform LiveChat, to execute sophisticated phishing attacks aimed at stealing sensitive user data. This emerging tactic bypasses traditional phishing methods, creating a more personalized and difficult-to-detect threat for consumers and businesses alike. Instead of directing users to fake…