SCM feed for Latest

Malware campaign uses VirusTotal manipulation, legitimate news sites to gain reputation

2026-06-18T18:53:36-04:00

The clipboard hijacker campaign also uses “ghost networks” on social media to boost engagement.

Agentjacking attack exploits AI coding tools with fake error reports

2026-06-18T18:13:15-04:00

The Agentjacking attack bypasses the need for stolen credentials or direct network access.

Cloudflare blocked 38.5 billion cyberattacks against civil society organizations

2026-06-18T17:59:59-04:00

The majority of attacks against these organizations were DDoS floods, with a notable difference in duration compared to attacks on Cloudflare's broader customer base.

Icarus threat actors exploit Klue OAuth breach to steal Salesforce data

2026-06-18T17:56:42-04:00

The attack involved the theft of OAuth credentials from Klue's Battlecards integration, which threat actors then used to access and exfiltrate data from customer Salesforce instances.

Law enforcement disrupts SocGholish botnet and Evil Corp servers

2026-06-18T17:47:14-04:00

Authorities from the Netherlands, Canada, the United States, and Germany removed the SocGholish malware and backdoors from 14,971 compromised WordPress websites, also taking 106 servers and domains offline.

Apple releases security update for Beats Studio Buds vulnerability

2026-06-18T17:42:10-04:00

The vulnerability, identified as CVE-2025-20701, was discovered by researchers Dennis Heinze and Frieder Steinmetz of ERNW GmbH.

Nintendo confirms employee survey data stolen from third-party service

2026-06-18T17:29:04-04:00

The Shadowbyt3$ threat group claimed responsibility for the incident, alleging the exfiltration of sensitive employee data, including bank statements and W-9 forms.

BlackFog launches AI detection for macOS

2026-06-18T17:21:26-04:00

The new ADX Vision for macOS targets the increasing use of unsanctioned generative AI tools within organizations.

Texas Parks & Wildlife data breach exposes millions of driver's licenses, passport numbers

2026-06-18T17:06:24-04:00

The Texas Parks & Wildlife department disclosed that hackers gained access to its license system vendor, which processes hunting and fishing license sales.

Identity is the foundation of trust. That makes it everyone’s problem.

2026-06-18T10:39:20-04:00

Identiverse 2026 highlighted identity’s expanding role in AI, trust and governance.