AI reads 36 sources every 2 hours and ranks each story by importance from 1 to 5 - so you see what actually matters.
The FBI has seized the domain of Virtualine, a hosting provider accused of facilitating criminal activity and laundering Bitcoin payments. Such "bulletproof" hosting services are used by malware operators and cybercriminals to keep their infrastructure online. The seizure disrupts infrastructure that allegedly enabled illicit operations and money laundering.
Japan's GMO is offering a $1 million bounty for information leading to the hackers behind a breach of its FX trading cloud service. The case highlights security risks for online financial trading platforms and the customer data they hold.
Researchers determined that the Oracle PeopleSoft zero-day exploited by ShinyHunters was actually a chain of three separate vulnerabilities. The linked flaws enabled the attackers to compromise systems, and the finding matters because PeopleSoft is widely used in enterprise environments and chained exploits can be harder to detect and mitigate.
A campaign dubbed PolyShell has compromised hundreds of online stores running Adobe Commerce, according to researchers tracking the intrusions. Investigators also report a rise in malicious traffic abusing Brotli compression in exploit attempts. The activity matters because Adobe Commerce underpins checkout and payment systems for large numbers of retailers, so breaches can expose customer data and disrupt sales.
Google has begun certifying Registered App Stores for Android in some markets, but not in the United States. The program affects how third-party app stores are recognized and distributed on Android. It matters because it could reshape app-store competition and sideloading rules, though the US exclusion limits its immediate impact.
A tool called CyberStrikeAI is using 44 coordinated AI agents to automate hacking operations targeting organizations in Japan, according to The Hacker News. The platform illustrates how agentic AI can industrialize reconnaissance, exploitation and post-compromise tasks that previously required skilled human attackers. It matters because automated, scalable attack tooling lowers the barrier for cybercriminals and raises pressure on defenders to detect machine-speed intrusions.
Researchers disclosed TLS implementation flaws in the GoAhead embedded web server that allow revoked client certificates to be accepted and enable decryption of session traffic. GoAhead is widely embedded in IoT devices, routers and cameras, so the bugs could weaken authentication and confidentiality across many deployed products. Vendors and device operators are urged to apply patches or mitigations.
Apple has backported a security fix for an actively exploited CoreGraphics vulnerability to older iPhone and iPad models. The flaw could let maliciously crafted content compromise affected devices, making timely updates important. The move extends protection to users who remain on older hardware.
A reported flaw in Microsoft Authenticator let permissionless Android apps steal work account tokens. The issue could expose corporate accounts and sensitive data, underscoring risks in authentication apps. The report highlights how token theft can bypass some security controls.