SparTech Software

India's CERT-In has issued new guidance urging organizations to patch critical internet-facing vulnerabilities within 12 hours amid rising AI-driven attacks.

Iran-linked group Screening Serpens is using new MiniJunk V2 and related RATs in tailored spear-phishing against aerospace, defense and telecom targets.

Actively exploited Drupal Core SQL injection flaw CVE-2026-9082 hits PostgreSQL-backed sites; patches are out and admins are urged to update fast.

SANS' SEC670 course is teaching red teamers stack-string and obfuscation tactics for building Windows implants, raising the bar for defenders.

European investigators have seized First VPN, a criminal infrastructure service allegedly used by ransomware crews and fraudsters, exposing 5,000 users.

Lawmakers demand answers after a contractor exposed AWS GovCloud keys and other CISA secrets on a public GitHub repo, raising security culture concerns.

US and Canadian authorities arrested alleged Kimwolf DDoS botnet admin Jacob Butler, tying him to a vast Android TV botnet-for-hire operation.

SANS ISC dissects a three-module malware that steals Chromium-based browser credentials, exfiltrates sensitive files, and opens a WebSocket backdoor.

Canadian police arrested a 23-year-old alleged administrator of the Kimwolf IoT botnet, which powered record DDoS attacks, amid ongoing U.S. cross-border probe.

GitHub says a poisoned VS Code extension on an employee device led to exfiltration of about 3,800 internal repos, likely via the compromised Nx Console.