cyberintel.kalymoon.com · 9815 articles · updated every 4 hours · grows forever
The idea of a "human in the loop" in AI deployment was challenged during a security executive panel at the RSAC 2026 Conference this week.
A threat actor used the open source security tool to deploy an infostealer into CI/CD workflows and steal cloud credentials, SSH keys, tokens, and other sensitive secrets.
Two cybersecurity leaders tested out AI in their respective SOCs for six months — and here's what they learned.
The TeamPCP hacking group is targeting Kubernetes clusters with a malicious script that wipes all machines when it detects systems configured for Iran. [...]
The Tycoon2FA phishing-as-a-service (PhaaS) platform that Europol and partners disrupted on March 4 has already returned to previously observed activity levels. [...]
Mazda Motor Corporation (Mazda) announced that information belonging to its employees and business partners had been exposed in a security incident detected last December. [...]
OpenAI is rolling out a new feature called 'Library' for ChatGPT, which allows you to store your personal files or images on OpenAI's cloud storage, so you can reference those items in a future chat. …
The passwordless future is years away. Here is what businesses should do now The Next Web
Geordie AI Named “Most Innovative Startup” at RSAC 2026 Innovation Sandbox Yahoo Finance UK
March 11 Attack Claimed by Iranian Hacktivist Group Handala Medtech maker Stryker on Monday told regulators that it has "contained" a March 11 cyber incident and is "working around the clock" to prior…
A sophisticated macOS infostealer known as MioLab — also tracked as Nova — has emerged as one of the most advanced Malware-as-a-Service (MaaS) platforms targeting Apple users. Advertised on Russian-sp…
A Libyan oil refinery, a telecoms organization, and a state institution fell victim to a coordinated espionage campaign between November 2025 and February 2026. The attacks delivered AsyncRAT, a publi…
Cloud Software Group has released urgent security patches for NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway), addressing two significant vulnerabilities that could…
QNAP has released a critical security advisory addressing a severe vulnerability in its QVR Pro surveillance software. Tracked as CVE-2026-22898, this flaw allows remote, unauthenticated attackers to …
A sophisticated SEO poisoning campaign has been quietly targeting Windows users since at least October 2025, luring them into downloading trojanized installers for more than 25 popular software applic…
Every April, millions of Americans rush to file taxes before the deadline — and attackers count on it. A large-scale malvertising campaign, active since at least January 2026, has been exploiting that…
Tycoon2FA phishing platform resumes activity post-takedown, leveraging AITM techniques to bypass MFA
ISACA survey found that confusion over responsibility and lack of understanding around AI cyber-attacks makes containing them difficult
The North Korean threat actors behind the Contagious Interview campaign, also tracked as WaterPlum, have been attributed to a malware family tracked as StoatWaffle that's distributed via malicious Mic…
The TeamPCP hackers behind the Trivy supply-chain attack continued to target Aqua Security, pushing malicious Docker images and hijacking the company's GitHub organization to tamper with dozens of rep…
Popular anime streaming platform Crunchyroll is investigating a breach after hackers claimed to have stolen personal information for approximately 6.8 million people. [...]
VikingCloud Wins 2026 Global InfoSec Market Disruptor Compliance Award for CCS Advantage PR Newswire
Live from RSAC 2026: AI, Zero Trust & Cybersecurity Trends You Need to Know – RSAC26 #1 SC Media
10 Hot New Cybersecurity Tools Announced At RSAC 2026 crn.com