Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets
What's new: A malicious NuGet package named "Sicoob.Sdk" (versions 2.0.0 to 2.0.4) has been discovered, designed to steal banking credentials,...
Year: 2026
Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices
What's new: Dutch authorities have dismantled a botnet comprising at least 17 million infected devices, including computers, tablets, smartphones, and...
NSAuditor AI EE 0.16.4: a false-clean post-mortem — when an audited cloud surfaced zero of eight CRITICALs
NSAuditor AI EE 0.16.4 (with Community Edition 0.1.95 and agent-skill 0.1.63) shipped on 2026-05-30 to close a defect of the...
ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface
What's new: Researchers have identified a vulnerability in OpenAI's ChatGPT, dubbed ChatGPhish, which exploits the AI's trust in Markdown links...
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
What's new: A medium-severity vulnerability in PAN-OS and Prisma Access, tracked as CVE-2026-0257 (CVSS score: 7.8), allows authentication bypass in...
