New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens 
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT 
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests 
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code 
NSAuditor AI Enterprise 0.32.4: Closing Three RDS Blind Spots — Cleartext Proxy Connections, Backups That Outlive Their Database, and One Coherent Aurora Verdict 
North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign
What's new: North Korean hackers linked to the Contagious Interview campaign have published 108 malicious packages and browser extensions across...
U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case
What's new: A U.S. government entity reportedly paid approximately $1 million to the Kairos group to prevent the public release...
NSAuditor AI CE 0.2.23 / Enterprise 0.31.9 — Cloud Audits That Run Only When You Ask, and AI Conclusions That Don’t Disappear
Nsasoft US LLC has published NSAuditor AI Community Edition 0.2.23 alongside Enterprise 0.31.9 and agent-skill 0.2.21 — a bug-fix cycle...
European Parliament Member Investigating Spyware Was Hacked With Pegasus
What's new: Stelios Kouloglou, a former Member of the European Parliament, was hacked with Pegasus spyware while serving on a...
Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer
What's new: A new threat actor, Armored Likho, has been identified targeting government agencies and the electric power sector in...