Tag: service
-
New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS
Cybersecurity researchers have flagged a novel Java-based remote access trojan (RAT) called QuimaRAT that’s capable of targeting Windows, Linux, and macOS environments.According to LevelBlue, the cross-platform malware is advertised under a malware-as-a-service (MaaS) model, costing anywhere between $150 for one month to $1,200 for lifetime access. Other subscription tiers include $300 for First seen on…
-
Data governance is becoming a security services problem
First seen on scworld.com Jump to article: www.scworld.com/news/data-governance-is-becoming-a-security-services-problem
-
BlueVoyant startet Sicherheitsdienst für KI-Agenten in Microsoft-Umgebungen
BlueVoyant stellt den Microsoft Agent 365 Security Deployment Service vor. Der Dienst soll KI-Agenten in Microsoft-Umgebungen sichtbar, steuerbar und sicherer machen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/bluevoyant-startet-sicherheitsdienst-fuer-ki-agenten-in-microsoft-umgebungen/a45674/
-
Security Roundup: Apple’s Hide My Email Service Fails to Hide Your Email
Plus: Alleged Scattered Spider hacking member extradited, dozens of license plate reader errors, and Indian officials are concerned about WhatsApp’s username rollout. First seen on wired.com Jump to article: www.wired.com/story/security-roundup-apples-hide-my-email-service-fails-to-hide-your-email/
-
FBI Disrupts Widely Used NetNut Residential Proxy Service
2 Million Home Devices, Including Routers and Smart TVs, Tied to NetNut Botnet. The FBI and private-sector partners have disrupted NetNut, one of the world’s biggest and most popular residential proxy networks. Google researchers said it comprised 2 million secretly hijacked home devices and was often used to route and disguise cybercrime and cyberespionage activity.…
-
ARToken PhaaS exposes EvilTokens’ Microsoft 365 phishing toolkit
A new phishing-as-a-service (PhaaS) platform dubbed “ARToken” appears to operate as an affiliate of the EvilTokens phishing platform, giving researchers a glimpse into an extensive toolkit designed to compromise Microsoft 365. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/artoken-phaas-exposes-eviltokens-microsoft-365-phishing-toolkit/
-
Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut
Google disrupted NetNut, a major proxy network that routed internet traffic through compromised home devices used by cybercriminals. Google has disrupted NetNut, one of the world’s largest residential proxy networks. The service routed internet traffic through home devices, allowing customers to hide their real location and identity. >>Today, in coordination with the FBI, Lumen, and…
-
SAESL turbocharges aircraft engine maintenance with data and AI
The world’s largest supplier of Rolls-Royce engine maintenance services is working with Kyndryl to modernise its IT infrastructure, build a single source of truth for data and scale up the use of AI across its business First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366645474/SAESL-turbocharges-aircraft-engine-maintenance-with-data-and-AI
-
How Dragos Acquisition Expands Accenture’s OT Security Reach
Joint Accenture-Dragos Platform Adds OT, Threat Intelligence and Incident Response. Accenture says its acquisition of Dragos combines managed security services with leading OT threat intelligence, asset discovery and incident response capabilities, helping industrial organizations strengthen defenses as AI adoption and IT-OT convergence increase cyber risk. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/how-dragos-acquisition-expands-accentures-ot-security-reach-a-32148
-
Anthropic’s AI Finds Bugs. IBM Bets $5B It Can Fix Them.
IBM and Red Hat assign 20,000 engineers to the new Project Lightwell service as Anthropic’s Mythos findings ignite debate over how to secure the open-source software supply chain. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/anthropic-s-ai-finds-bugs-ibm-bets-5b-it-can-fix-them-
-
EvilTokens-Linked ARToken Panel Exposes 80+ APIs for Microsoft 365 Token Theft
A fully featured phishing-as-a-service (PhaaS) panel named “ARToken” that closely mirrors the EvilTokens infrastructure first profiled in early 2026, but with a broader and deeper post-compromise toolkit. ARToken’s React single-page application exposes more than 80 API endpoints enabling device-code phishing, Primary Refresh Token (PRT) persistence, mailbox takeover, business email compromise (BEC) workflows, and SharePoint exfiltration…
-
EvilTokens-Linked ARToken Panel Exposes 80+ APIs for Microsoft 365 Token Theft
A fully featured phishing-as-a-service (PhaaS) panel named “ARToken” that closely mirrors the EvilTokens infrastructure first profiled in early 2026, but with a broader and deeper post-compromise toolkit. ARToken’s React single-page application exposes more than 80 API endpoints enabling device-code phishing, Primary Refresh Token (PRT) persistence, mailbox takeover, business email compromise (BEC) workflows, and SharePoint exfiltration…
-
FortiBleed Campaign Linked to INC and Lynx Ransomware Operations
A direct operational link between the large-scale FortiBleed credential-harvesting campaign and two active ransomware-as-a-service (RaaS) groups: INC Ransom and Lynx. This finding provides the first confirmed evidence that mass theft of FortiGate credentials is being integrated into ransomware deployment processes, significantly increasing the threat posed by exposed firewall infrastructure. FortiBleed Campaign Linked to INC and…
-
ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365
Talos has identified “ARToken,” a phishing-as-a-service platform that targets Microsoft 365. The ARToken panel exposes 80+ API endpoints for device code phishing, Primary Refresh Token persistence, email access, BEC operations, and SharePoint exfiltration. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/artoken-inside-an-eviltokens-affiliate-panel-targeting-microsoft-365/
-
The Gentlemen Ransomware Targets Large Corporations and Critical Infrastructure Worldwide
The Gentlemen ransomware group has emerged in 2026 as a highly adaptive and technically sophisticated ransomware-as-a-service (RaaS) operation targeting large corporations and critical infrastructure across multiple regions. Public reporting places The Gentlemen among the top 10 ransomware actors by victim announcements on its data leak site during the first half of 2026 (see ransomware.live/stats/2026), and…
-
This phishing kit looks more like BEC-as-a-service
Cisco Talos’ research on ARToken builds on what’s known about the related EvilTokens phishing-as-a-service. First seen on cyberscoop.com Jump to article: cyberscoop.com/artoken-bec-platform-cisco-talos/
-
Self-harm and cyberflashing added to online safety offences list
The Online Safety Act has been updated to include ‘self-harm’ and ‘cyberflashing’ as ‘priority offences’, meaning online service providers will need to update their risk assessments of both categories First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366645166/Self-harm-and-cyberflashing-added-to-online-safety-offences-list
-
Fluentd Security Flaws Enable Remote Code Execution, SSRF, DoS, and Credential Exposure
Tags: credentials, cyber, data, dos, flaw, github, open-source, remote-code-execution, service, vulnerabilityFluentd, a widely used open-source data collector for unified logging, has reported several high-impact vulnerabilities that could enable attackers to achieve remote code execution (RCE), server-side request forgery (SSRF), denial-of-service (DoS), and the exposure of sensitive credentials. These issues, documented in multiple GitHub Security Advisories, affect Fluentd versions up to 1.19.2 and have been resolved…
-
New RustDuck Botnet Targets IoT Devices and Servers With Weak Passwords and RCE Exploits
A sophisticated new botnet family dubbed RustDuck emerged in early 2026, leveraging a two-stage Loader and Core architecture to compromise IoT devices, routers, and enterprise servers through brute-force credential attacks and remote code execution vulnerabilities. RustDuck employs a multi-pronged infection strategy combining weak password attacks against Telnet and SSH services with exploitation of known RCE…
-
Glitch SPY RAT Abuses Android Accessibility Service for Full Device Control
An emerging Android remote-access trojan platform, tracked as Glitch SPY, that leverages a fraudulent Polish apartment-rental website to trick victims into sideloading a malicious APK. The dropper, identified as the Brokewell Android Loader, presents a plausible rental-app experience while secretly installing Glitch SPY and coercing users to enable Android Accessibility Service an abuse that gives…
-
Anthropic buffa Library Zero-Day Lets Attackers Trigger Memory-Amplification DoS
Anthropic’s Rust-based protobuf library, buffa, has been discovered to have a zero-day memory amplification denial-of-service (DoS) vulnerability. This flaw allows attackers to deplete system memory using relatively small inputs. Endor Labs identified the issue through its AI-powered static application security testing (SAST) engine and is now tracked as CVE-2026-55407. This situation underscores how logic flaws…
-
Citrix NetScaler ADC and Gateway Flaws Let Attackers Trigger Memory Overread and DenialService
Citrix has issued a critical security bulletin addressing multiple high-severity vulnerabilities in NetScaler ADC and NetScaler Gateway. These vulnerabilities could allow attackers to trigger memory overreads, arbitrary file access, and denial-of-service (DoS) conditions across affected deployments. The vulnerabilities are tracked as CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474. They impact widely deployed enterprise networking and…
-
Nika: Open-source code analysis tool
Many serious security bugs in web applications sit across several files at once. Request data enters through a controller, moves through data objects and service layers, and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/01/nika-open-source-code-analysis-tool/
-
Hackers Use Vulnerable Windows Drivers to Kill EDR in Ransomware Attacks
Hackers increasingly rely on vulnerable, legitimately signed Windows drivers to neutralize endpoint defenses, turning defense evasion into a decisive phase of modern ransomware attacks. Over the past three years the Bring Your Own Vulnerable Driver (BYOVD) technique has migrated from research proof-of-concept into a commoditized, routinely deployed capability in ransomware-as-a-service toolkits. By abusing signed kernel…
-
Citrix Patches Six NetScaler Flaws Allowing File Read and DenialService
Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) that could be exploited by an attacker to facilitate arbitrary file reads or trigger a denial-of-service (DoS) condition.The vulnerabilities are listed below – CVE-2026-8451 (CVSS score: 8.8) – An insufficient input validation First…
-
Arcova launches integrated data center development service
First seen on scworld.com Jump to article: www.scworld.com/brief/arcova-launches-integrated-data-center-development-service
-
Secret Service lax phone security puts leaders at risk, report finds
First seen on scworld.com Jump to article: www.scworld.com/brief/secret-service-lax-phone-security-puts-leaders-at-risk-report-finds
-
XSS.is, The Forum That Ran the Ransomware Supply Chain Is Down. The Market Isn’t
Police arrested the alleged admin of XSS.is, a major cybercrime forum whose trusted escrow service helped power the underground economy. On 22 July 2025, French and Ukrainian police arrested a 38-year-old man in Kyiv and shut down XSS.is, the most influential Russian-language cybercrime forum of the past decade. Europol, which coordinated the operation under the…
-
DICOM Toolkit Bugs Raise Medical Imaging Security Risks
Common AI Tools Helped Researcher Discover Hidden Flaws. Several newly identified vulnerabilities in a DICOM toolkit used in medical-imaging software could expose patient information, crash imaging services offline and pose other serious problems if exploited, said the researcher who discovered the flaws using commonly used artificial intelligence tools. First seen on govinfosecurity.com Jump to article:…
-
RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS
A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, then stitching them into a network built to knock websites and online services offline.Researchers at QiAnXin’s XLab have tracked it since February 2026, and say the real story is not how big it is today, but…