-
Afghan telecom providers and South Asian critical infrastructure organizations have emerged as the target of a new ongoing campaign that delivers a previously undocumented backdoor called PATCHCORD. According to Acronis Threat Research Unit (TRU), the backdoor is a compiled C/C++ implant delivered by means of sector-specific lures, including fake VPN installers impersonating Afghan Telecom (
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cybersecurity researchers have disclosed details of a new macOS-oriented, Rust-based information stealer called AmnesiaStealer that’s capable of hijacking Chromium web browsers to steal session data. The multi-stage stealer is spread via a counterfeit GitHub download page titled “Download for macOS” and claims to be from a verified publisher. The page employs a ClickFix-style lure that
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A China-linked threat group tracked as Jewelbug has turned public Google Docs into a resilient command-and-control delivery channel, embedding freshly obfuscated malware payloads in documents that victim implants retrieve and execute. The technique allows malicious traffic to resolve through Google-owned infrastructure, helping the operators blend into legitimate web activity and potentially evade reputation-based filtering. Jewelbug, […]
The post Jewelbug Uses Public Google Docs as Malware Command-and-Control Delivery Channel appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft has released security updates that address six vulnerabilities in Exchange Server. These vulnerabilities include flaws that could allow remote code execution (RCE), privilege escalation, denial-of-service (DoS), spoofing, and bypass of security features. The vulnerabilities were disclosed on August 11, 2026, with CVE-2026-62913 receiving an update the following day. Microsoft Exchange Server Vulnerabilities The most […]
The post Microsoft Exchange Server Vulnerabilities Allow DoS, Privilege Escalation, and RCE appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
This week in cybersecurity from the editors at Cybercrime Magazine
Sausalito, Calif. – Aug. 13, 2026Kai was founded on a simple and radical conviction: you cannot win a machine-speed war with human-speed defenses. Not with more tools. Not with more headcount. Not with AI bolted onto the same fragmented stack. The only real answer is to stop deploying tools and start deploying intelligence – an agentic layer that executes security work end-to-end, the way attackers already operate.
The Wall Street Journal reports that Kai recently raised $125 million in a combined seed and Series A round led by Evolution Equity Partners.
Galina Antova, Co-Founder and CEO at Kai, told Cybercrime Magazine that Fortune 500 companies have on average 80 to 120 security tools. “When attackers are coming and attacking organizations, they’re not stopping at the door to ask – excuse me, what Gartner category should I get through.”
While 89 percent of security leaders say they’re prepared for AI-driven attacks, most organizations still rely on manual vulnerability management and human intervention, according to Kai’s 2026 State of Autonomous Defense Report.
“The only chance that we have is machine-to-machine, AI agent to AI agent communication, and autonomously executing on that defense,” said Antova.
Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:
- SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
- NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
- HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
- VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
- M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
- BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
- PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
- PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
- RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.
Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.
The post Kai: The Agentic AI Platform Built To Fight AI-Enabled Attacks appeared first on Cybercrime Magazine.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Dell has disclosed a significant security vulnerability in its Virtual Storage Integrator (VSI) for VMware vSphere Client. This vulnerability could allow unauthenticated remote attackers to execute arbitrary operating system commands with root privileges. Tracked as CVE-2026-67261, this flaw affects versions of Dell VSI for VMware vSphere Client before 10.11.1.0. Dell has addressed the issue in […]
The post Critical Dell VMware vSphere Client Flaw Lets Remote Attackers Execute Commands as Root appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Trump administration has issued a presidential memorandum that establishes a federal program allowing vetted U.S. private-sector companies to conduct government-directed cyber surveillance and cyber operations against foreign cyber-enabled transnational criminal organizations (CE-TCOs). This initiative expands Executive Order 14390, issued on March 6, 2026, which directed federal agencies to combat cybercrime, fraud, and predatory schemes […]
The post Trump Administration Authorizes Cyber Operations Against Foreign Criminal Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Palantir has secured another lucrative commitment from the Defense Department: a pledge to pay the company up to $243.9 million to use its software through March 31, 2027.
In a memo viewed by Washington Technology, Deputy Defense Secretary Steve Feinberg has directed DOD departments to identify options for more spending on Palantir products from April 1, 2027, and Dec. 28, 2028.
In the memo, Feinberg says Palantir's software is "providing valuable support to improve efficiencies with the defense industrial base"—for example, by flagging delays in munitions and delivery-vehicle production and maintenance.
Feinberg made no mention of specific contracts or vehicles.
The action follows a July award of a 10-year, $10 billion Army agreement that consolidated many of Palantir’s existing contracts into a single pact.
The Feinberg memo appears to be part of a trend in federal contracting, where no-compete contracts are growing as a percentage of all awards. No-compete contracts accounted for 14.8% of all awards in the first half of 2026, up from 12.6% for the period in 2025.
Federal News Radio reported that DOD said it has issued similar memos involving other companies.
No-compete contracts are allowed by the Federal Acquisition Regulation if agencies properly document why a sole-source contract is the best use of federal funds. Reasons for a no-compete contract can include urgency, only one responsible source, critical follow-on work, and national security.
Feinberg's memo mentions none of those reasons for directing the spending to Palantir.
Palantir's portfolio of no-compete contracts includes an Agriculture Department award for the One Farmer, One File program. The department also used Palantir's software for its return-to-the-office initiative.
According to GovTribe data, the company has received $3.2 billion in contract obligations since 2024, roughly half through no-compete contracts.
Last week, Palantir reported second-quarter revenues of $1.9 billion, up 93 percent year-over-year. Federal contracts accounted for $809 million of that, up 90 percent from last year.Palantir is ranked No. 40 on the 2026 Washington Technology Top 100, rising 22 spots in a year.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The LiteLLM supply-chain compromise has shifted from a short-lived malicious package incident into a sprawling enterprise exposure event. Analysis of an alleged 153GB attacker archive has linked 118,829 CI runner dumps to 2,488 corporate domains, exposing the depth of secrets accessible inside modern build environments. The campaign, publicly attributed to TeamPCP, began upstream of LiteLLM. […]
The post LiteLLM Hack Exposes Secrets From 2,488 Companies Across 118,829 CI Runner Dumps appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A previously unseen Android near field communication (NFC) relay malware family dubbed WindRelay is being deployed in conjunction with a known remote access trojan (RAT) called SpyNote as part of a contactless payment fraud scheme. The purpose-built malware, according to Group-IB, is designed to capture live card data via NFC and transmit it to fraudsters in real time. It was first detected in
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
