Keamanan Siber

Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT

Google DoubleClick Abused in New Malspam Campaign to De...

Jun 4, 2026 0 4

DoubleClick redirects hide DesckVB RAT malspam, using dynamic lures and .NET loa...

Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes

Unpatched Windows Search URI Vulnerability Lets Attacke...

Jun 3, 2026 0 6

Unpatched Windows search: URI flaw leaks NTLMv2 hashes via SMB requests; disclos...

Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT

Pakistan-Linked SideCopy Targets Afghanistan Finance Mi...

Jun 2, 2026 0 15

SideCopy targeted Afghanistan's Finance Ministry with Xeno RAT via Pashto phishi...

Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded

Dashlane Discloses Brute-Force Attack, Encrypted Vaults...

Jun 2, 2026 0 9

Brute-force attacks bypassed 2FA on some Dashlane accounts on May 31, 2026, enab...

⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More

⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Pow...

Jun 1, 2026 0 12

Your Monday cybersecurity recap covers the latest digital threats, exposed weakn...

Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices

Dutch Authorities Dismantle Botnet Linked to 17 Million...

May 31, 2026 0 12

Dutch authorities dismantled a 17 million-device botnet backed by 200+ servers, ...

What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks

What 2,000 Exposed Vibe-Coded Apps Reveal About the Lim...

May 29, 2026 0 10

2,000+ AI-built corporate apps lacked access controls across 380,000 public asse...

Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels

Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor...

May 29, 2026 0 13

Kimsuky used fake security tools and Webex pages in March-April 2026 to deploy H...

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

Threat Actors Exploit Critical FortiClient EMS Flaw to ...

May 28, 2026 0 10

FortiClient EMS flaw CVE-2026-35616 enabled malware delivery via fake updates, r...

ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More

ThreatsDay Bulletin: Claude Security Plugin, Azure Priv...

May 28, 2026 0 14

ThreatsDay Bulletin: Kali365 MFA bypass, Azure priv-esc, FIFA scams, OAuth theft...

New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI "Power users"

New AI Usage Report: Enterprise AI Risk Is Heavily Conc...

May 28, 2026 0 11

More than 6% of enterprise AI conversations contain sensitive data, with DeepSee...

JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware

JINX-0164 Targets Cryptocurrency Firms with Fake Recrui...

May 28, 2026 0 10

JINX-0164 targeted cryptocurrency organizations using recruitment-themed social ...

Malicious npm Package Stole Files From Claude AI User Directory via GitHub

Malicious npm Package Stole Files From Claude AI User D...

May 27, 2026 0 14

Malicious npm package downloaded 676 times stole Claude AI files via GitHub uplo...

3 SOC Steps that Shut Down Incident Risks Early

3 SOC Steps that Shut Down Incident Risks Early

May 27, 2026 0 12

ANY.RUN helps SOCs detect threats earlier with real-time IOC feeds and AI report...

5 Steps to Managing Shadow AI Tools Without Slowing Down Employees

5 Steps to Managing Shadow AI Tools Without Slowing Dow...

May 27, 2026 0 13

Shadow AI adoption grows as 69% of organizations detect unauthorized AI tools, i...

Gitea Vulnerability Exposes Private Container Images without Authentication

Gitea Vulnerability Exposes Private Container Images wi...

May 27, 2026 0 9

Gitea flaw CVE-2026-27771 exposed private container images across 30,000 deploym...