Warden Stealer Rust Infostealer Targets AI Coding-Agent Tokens
October 12, 2026
Gen Threat Labs details Warden Stealer, a Rust malware-as-a-service infostealer that steals AI coding-agent tokens, browser data and crypto from
News
Warden Stealer Rust Infostealer Targets AI Coding-Agent Tokens
Gen Threat Labs details Warden Stealer, a Rust malware-as-a-service infostealer that steals AI coding-agent tokens, browser data and crypto from Windows PCs.
UAT-11985 Uses AI-Written Lures to Steal Google Logins in Taiwan
Cisco Talos tracks UAT-11985, which uses AI-written event lures and an adversary-in-the-middle kit to steal Google logins from Taiwan researchers despite MFA.
Phishers Abuse Power BI Dashboards to Install ScreenConnect
Huntress reports a phishing campaign using public Power BI dashboards to push ScreenConnect remote-access installs, with persistence via scheduled tasks.
GhostAction Campaign Hits 500+ GitHub Accounts to Steal API Keys
Socket reports GhostAction, a campaign compromising more than 500 GitHub accounts and injecting workflows that harvest cloud, AI and package-registry secrets.
Silent Ransom Group Allegedly Extorted $207M From 27 Law Firms
Leaked chats suggest Silent Ransom Group extorted about $207 million from 27 law firms through phone social engineering, without encrypting any files.
Midnight Mimosa Malware Found Preinstalled on Budget Android Phones
Bitdefender found Midnight Mimosa malware embedded in firmware on budget MediaTek Android phones sold in more than 150 countries, and users cannot remove it.
Tampered Ledger Nano X Devices Tied to CryptoBilis and $93M Drain
Ledger confirmed a hidden implant in a Nano X bought from reseller CryptoBilis, as wallet drains estimated at $93.2 million hit 315 wallets from October ...
JetBrains Patches Critical Exposed SQL Injection and TeamCity Flaws
JetBrains fixed CVE-2026-108474, a CVSS 9.8 SQL injection in Exposed, and two TeamCity flaws, CVE-2026-106218 and CVE-2026-106219; no exploitation reported.
FBI Arrests CYPFER Co-Founder Edward Dubrovsky in Extortion Case
Edward Dubrovsky, co-founder of ransomware negotiation firm CYPFER, was arrested in Pennsylvania on extortion charges; a link to ShinyHunters is unconfirmed.
Attackers Hijack Three Country TLDs to Forge Google Certificates
Google says attackers compromised the .gh, .sl and .as registries, altered DNS records and obtained fraudulent HTTPS certificates for Google and other domains.
UAT-11985 Uses AI-Written Lures to Steal Google Logins in Taiwan
October 12, 2026
Cisco Talos tracks UAT-11985, which uses AI-written event lures and an adversary-in-the-middle kit to steal Google logins from Taiwan researchers
Phishers Abuse Power BI Dashboards to Install ScreenConnect
October 12, 2026
Huntress reports a phishing campaign using public Power BI dashboards to push ScreenConnect remote-access installs, with persistence via scheduled tasks.
GhostAction Campaign Hits 500+ GitHub Accounts to Steal API Keys
October 12, 2026
Socket reports GhostAction, a campaign compromising more than 500 GitHub accounts and injecting workflows that harvest cloud, AI and package-registry
Silent Ransom Group Allegedly Extorted $207M From 27 Law Firms
October 12, 2026
Leaked chats suggest Silent Ransom Group extorted about $207 million from 27 law firms through phone social engineering, without encrypting
Midnight Mimosa Malware Found Preinstalled on Budget Android Phones
October 12, 2026
Bitdefender found Midnight Mimosa malware embedded in firmware on budget MediaTek Android phones sold in more than 150 countries, and
Tampered Ledger Nano X Devices Tied to CryptoBilis and $93M Drain
October 12, 2026
Ledger confirmed a hidden implant in a Nano X bought from reseller CryptoBilis, as wallet drains estimated at $93.2 million
JetBrains Patches Critical Exposed SQL Injection and TeamCity Flaws
October 12, 2026
JetBrains fixed CVE-2026-108474, a CVSS 9.8 SQL injection in Exposed, and two TeamCity flaws, CVE-2026-106218 and CVE-2026-106219; no exploitation reported.
FBI Arrests CYPFER Co-Founder Edward Dubrovsky in Extortion Case
October 12, 2026
Edward Dubrovsky, co-founder of ransomware negotiation firm CYPFER, was arrested in Pennsylvania on extortion charges; a link to ShinyHunters is
Attackers Hijack Three Country TLDs to Forge Google Certificates
October 8, 2026
Google says attackers compromised the .gh, .sl and .as registries, altered DNS records and obtained fraudulent HTTPS certificates for Google
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.