Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign. The affected GitHub Actions are listed below – actions-cool/issues-helper actions-cool/maintain-one-comment Visiting either of the repositories now shows the message: “Access to this
Cybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered using a server-side decryption chain. The latest artifacts, per Jamf Threat Labs, continue to rely on the same JavaScript for Automation (JXA) dropper mechanism, but modify the lure and the delivery method. “Where earlier variants embedded
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence Read More »
Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and already visible: AI has made a failed attack cheap to retry. The routine version looks like this. An attacker lands on a low-privilege cloud account, and the first try at privilege escalation goes nowhere. That
The SOC Doesn’t Need to Start Over with Every Alert Read More »
OpenAI appears to be preparing a new ChatGPT Pro Max subscription that could cost $500 per month, but it’s unclear when it’ll begin rolling out. […]
OpenAI is preparing a $500 ChatGPT Pro Max plan with faster Codex Read More »
AI agents can operate through human credentials and take actions that existing SOC 2 controls may not distinguish from human activity. Token Security explains why SOC 2 needs to adapt to address the security gaps created by agent identities. […]
With the Rise of AI Agents, SOC 2 Should Adapt or Risk Irrelevance Read More »
Microsoft announced it will deprecate the Windows Deployment Services (WDS) server role starting with the next Windows Server release. […]
Microsoft plans to deprecate Windows Deployment Services Read More »
A Kosovar national has pleaded guilty to operating Rydox, a large illegal online marketplace that sold stolen personal information, login credentials, credit card details, and cybercrime tools. […]
Rydox marketplace admin pleads guilty, faces 22 years in prison Read More »
Microsoft has confirmed that some users may experience desktop loading issues, including black screens, after installing the August 2026 preview updates and subsequent updates. […]
Microsoft: Recent Windows updates cause desktop loading issues Read More »
Cryptocurrency exchange Bitget disclosed today that suspected North Korean hackers have stolen $351.6 million from its hot and warm wallets. […]
Hackers steal $351.6 million in Bitget crypto exchange hack Read More »
A flaw in Cloudflare Containers let a paying customer read data that other customers’ containers had left behind on the same server, Cloudflare and the researchers who found it said on Thursday. The data came from disk space that earlier containers had used and given up, not from any live workload, and an attacker could
Cloudflare Fixes Flaw That Let One Container Read Another Customer’s Leftover Disk Data Read More »