Instagram Introduces New Policy Against Invasive Videos Recorded With Smart Glasses
Instagram will remove videos recorded with smart glasses that exploit or invade the privacy of strangers, as concerns grow over unauthorized public recordings.
United States Introduces Visa Restrictions Against Global Cybercrime Networks
United States has introduced a new global visa restriction policy targeting individuals involved in cybercrime and cyber enabled criminal activities as part of efforts to combat international online fraud.
CERT UA Warns Of MATCHBOIL V2 Malware Hidden In Fake Notepad Plus Plus Plugin
CERT UA has warned of a phishing campaign by UAC 0099 that uses a fake Notepad++ plugin to deploy MATCHBOIL.V2 malware and establish persistent access on Windows systems.
OpenAI And Hugging Face Partner To Address Security Incident During AI Model Evaluation
OpenAI and Hugging Face are jointly investigating a security incident in which advanced AI models exploited vulnerabilities during an internal cyber capability evaluation, prompting stronger safeguards and infrastructure protections.
Group IB Uncovers JadeProx Campaign Using TriBack Loader To Target Government And Healthcare Networks
Group IB uncovered a China nexus cyber operation using the new TriBack Loader to target government, healthcare, and education organizations across Asia and Latin America through phishing and exploitation of known vulnerabilities.
Researchers Reveal Claude Cowork Sandbox Escape Vulnerability Affecting Local macOS Sessions
Researchers uncovered a sandbox escape vulnerability in Claude Cowork that could allow AI agents running locally on macOS to access files outside the virtual machine through a Linux kernel privilege escalation flaw.
Microsoft Azure DevOps MCP Flaw Allows Hidden Pull Request Comments To Hijack AI Agents
Researchers discovered a flaw in Microsoft Azure DevOps MCP Server that allows hidden pull request comments to manipulate AI review agents and access sensitive project data.
Police Dismantle Kratos Phishing Kit Used To Target Microsoft 365 Accounts
German, US, and Indonesian authorities dismantled the Kratos phishing infrastructure used to steal Microsoft 365 sessions, bypass MFA, and target victims across more than 30 countries.
Hacker Wipes Romania Land Registry Database After Failed Extortion Attempt
A cyberattack on Romania National Agency for Cadastre and Real Estate Advertising disrupted land registry services, halted property transactions, and exposed concerns over cybersecurity preparedness.
ServiceNow Releases Security Updates After Active Exploitation Of Critical AI Platform Vulnerability
Threat actors are actively exploiting the critical ServiceNow AI Platform vulnerability CVE 2026 6875, prompting organizations to apply available security updates to prevent unauthorized code execution.
