Threat intel
Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX.
Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX.
Source: The Hacker News
Threat intel
Cisco Talos researchers say a highly sophisticated APT tracked as UAT-11473 exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances, to gain unauthorized access and deploy the KeyDrift malware.
AI-written summary Source: Cisco Talos Blog · Fetched
Threat intel
The China-nexus cyber espionage group Volt Typhoon has been attributed to a now-disrupted covert access network called Silent Train that was used for zero-day exploitation and strategic access, according to a Lumen Technologies Black Lotus Labs report shared with The Hacker News.
AI-written summary Source: The Hacker News · Fetched
Threat intel
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the background.
Summary from source Source: The Hacker News · Fetched
Authorized-only · evidence-based · point-in-time. Aegis cannot guarantee the absence of weaknesses or hidden devices. On this machine, live external HTTP/TLS may be network-blocked and shown as an honest coverage gap. Severity and confidence are kept separate. Finished assessments persist in the encrypted store while durable storage is bound. A theme choice may persist in this browser. Export remains available for a copy you can take with you.