Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary measure for nine hours over the weekend after it received threat intelligence about an imminent cyber attack. “Kiteworks received credible threat intelligence from federal intelligence authorities indicating that a threat actor may attempt to target someRead More »Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack

A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims. One ofRead More »U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

A four-stage attack chain linked to the Lunex Malware-as-a-Service platform has been identified and reverse-engineered. 

Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign. The affected GitHub Actions are listed below – actions-cool/issues-helper actions-cool/maintain-one-comment Visiting either of the repositories now shows the message: “AccessRead More »Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

Cybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered using a server-side decryption chain. The latest artifacts, per Jamf Threat Labs, continue to rely on the same JavaScript for Automation (JXA) dropper mechanism, but modify the lure and the deliveryRead More »PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence