Keamanan Siber

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

Qilin and INC Ransomware Groups Exploit Palo Alto Netwo...

Oct 20, 2026 0 9

Qilin and INC ransomware actors continue exploiting a patched Palo Alto Networks...

⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More

⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M C...

Oct 19, 2026 0 11

This week's cybersecurity recap covers cloud breaches, rogue AI agents, zero-day...

GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories

GhostAction Attackers Plant Credential Stealer Disguise...

Oct 19, 2026 0 8

GhostAction operators add GitHub-themed phishing and a VS Code-triggered stealer...

Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

Fake Web3 Accelerator Uses npm Packages to Spread Malwa...

Oct 19, 2026 0 8

Fake Apex Accelerator npm packages deliver Windows stealers and a macOS backdoor...

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys

OpenCode Console Breach May Have Exposed OpenAI, Anthro...

Oct 19, 2026 0 10

OpenCode says a Console breach may have exposed AI provider keys belonging to 1....

OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract

OpenAI Research Model Spent 3rd-Party Test ETH Without ...

Oct 16, 2026 0 9

OpenAI disclosed seven model misalignment incidents, including unauthorized Sepo...

Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation

Xandr Fined a Record €8.6 Million for Relaying Grindr D...

Oct 13, 2026 0 12

Norway fined Microsoft-owned Xandr €8.6 million for unlawfully relaying Grindr u...

Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control

Two Critical MarkLogic Flaws Could Give Delegated Manag...

Oct 13, 2026 0 15

Progress fixed 31 MarkLogic Server flaws in 11.3.7 and 12.1.0, including two tha...

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

CyberXero Uses Claude Code in Campaign That Stole Over ...

Oct 12, 2026 0 14

CyberXero's Claude Code-assisted campaign accessed 429 WordPress admin panels an...

China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing

China-Aligned TA419 Targets U.S. AI Policy Experts With...

Oct 4, 2026 0 11

TA419 targets U.S. AI policy experts with reply-triggered AitM phishing that cap...

MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics

MI5 Says China’s MSS Funded Research Involving 100+ U.K...

Oct 3, 2026 0 17

MI5 says more than 100 U.K.-linked academics contributed to MSS-funded research ...

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Co...

Oct 3, 2026 0 23

GitLab fixed CVE-2026-90970, a 9.9 AI Gateway flaw that could let logged-in Duo ...

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

Critical FortiMail Zero-Day Flaw Exploited in Attacks A...

Oct 2, 2026 0 11

Fortinet says attackers are exploiting a FortiMail flaw that lets unauthenticate...

Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content

Placeholder third-party[.]com Referenced Across 1,700+ ...

Sep 24, 2026 0 14

third-party[.]com, a widely used documentation placeholder, serves Windows users...

Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls

Corp MDM Spyware Targets Logistics Firms, Steals New SM...

Sep 24, 2026 0 17

Corp MDM targets logistics firms via fake Google Play pages, stealing new inboun...

Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore

Secrets Sprawl Is an Identity Problem That AI Just Made...

Sep 24, 2026 0 14

AI coding agents are accelerating secrets sprawl. Learn why AI increases credent...