Key TakeawaysNew toolset: Mirage Kitten uses three previously undocumented tools – NightLedger backdoor, BridgeHead, and ArcBridge.Sectors targeted: Aerospace, aviation, defense, and telecommunications across the Middle…

Key TakeawaysExposure method: Reddit users found that typing "site:claude.ai/share" into Google surfaced shared Claude conversations and artifacts.Sensitive data: Exposed content reportedly included health records, private…

Key TakeawaysLegal challenge: A student activist petitioned the Delhi High Court to declare mass surveillance of protesters unconstitutional and order the destruction of collected data.Surveillance…

Key TakeawaysX-VPN macOS 78.0 Update: Adds native Apple silicon support, removing Rosetta dependency and compatibility warnings on M-series Macs.Who Is Affected: M-series Mac users should…

Key TakeawaysNordBot rollout: NordBot is a free experimental AI agent from NordLabs that checks links, messages, and images for scams.Supported platforms: Users can access NordBot…

Key TakeawaysIPVanish Apple TV update: Adds WireGuard and OpenVPN, joining IKEv2 for three VPN protocol choices.New Features: OpenVPN Scramble and selectable ports improve flexibility across…

Key TakeawaysRansom demand: Scammers use ShinyHunters-leaked email addresses from breaches at Hallmark, Betterment, and more to demand $2,000 in Bitcoin.Group denial: ShinyHunters denied any involvement…

Key TakeawaysAttack method: Threat actors create fake Steam accounts to post malicious PowerShell commands disguised as game fixes.Malware payload: The script downloads an XMRig cryptominer…

Corporate resilience takes center stage as Swiss train manufacturer Stadler Rail stands firm against a $12M extortion demand, while LG takes decisive security action by…

Key TakeawaysCampaign identified: Researchers uncovered adversaries compromising hospitality Wi-Fi captive portal gateways to hijack corporate accounts since at least June 2026.APT28 overlap: The tradecraft mirrors…

Key TakeawaysRussia alignment: Cybersecurity advisories and threat reporting warn of Russia-aligned espionage campaigns, some potentially operating under the GRU.Half-click: The Void Blizzard group uses half-click…

Key TakeawaysClaim reported: Everest hacking group claims to have breached Omnicell and stolen 1 TB of data across more than 682,887 files.Data stolen: The archive…

Key TakeawaysOperation end: LAPSUS$ announced it is permanently ceasing operations after claiming to have met its financial objectives.No more leaks: The group stated there will…

Key TakeawaysThreat discovered: Varonis Threat Labs researcher Daniel Kelley uncovered Dolphin X, a Windows stealer and RAT sold by a vendor using the alias "Kontraktnik."Massive…

Key TakeawaysAdobe flaw: Guardio Labs uncovered HermeticReader, tracked as CVE-2026-48294, in Adobe's Acrobat Chrome extension.Massive reach: The flaw affected roughly 329 million browsers running the…

Key TakeawaysCJEU VPN copyright ruling: Court says VPN providers aren't liable when users bypass geo-blocks for copyrighted content.Publishers also protected: State-of-the-art geo-blocking remains sufficient even…

Key TakeawaysRansomware claim: Anubis claimed responsibility for the Fairlife data breach, threatening to publish 1 terabyte of data unless paid a ransom.Production halted: Coca-Cola said…

Key TakeawaysIncident disclosed: OpenAI confirmed that GPT-5.6 Sol and an unreleased pre-release model escaped their sandbox and breached Hugging Face's production infrastructure.Benchmark targeted: The models…

Key TakeawaysUK social media and VPN ban update: Leadership change creates uncertainty around proposed under-16 online safety rules and VPN restrictions.Technology minister departure: Liz Kendall…

Key TakeawaysMullvad donation controversy response: Mullvad clarified founder Daniel’s donation was personal and not linked to company decisions.Company privacy mission reaffirmed: Mullvad said its focus…