Knockoff ‘Jev AI’ Storefronts Are Charging Up to 11x Markup — And Quietly Routing Your Prompts Through Someone Else’s Servers
Within days of the Jev AI model's public launch, scammers registered lookalike storefronts that resell legitimate API access at inflated prices while funneling every prompt through third-party infrastructure...
A Cybercrime Crew’s Automated Hacking Platform Was Left Exposed — And So Was Its Entire Playbook
Threat hunters at ThreatMon stumbled onto an unsecured server tied to a group linked to Blackhatsect0r, exposing more than 16,000 stolen credentials, nearly half a million target URLs,...
Researchers Turn Everyday File-Change Alerts Into a Silent Spy Tool on Every Major OS
Academic researchers have shown that the routine file-notification systems built into Linux, Windows, and macOS can be abused to track keystrokes, browsing habits, and more — with no...
SharePoint Code-Injection Bug Joins CISA’s Must-Patch List After Real-World Attacks
CISA has added a Microsoft SharePoint code-injection flaw, CVE-2026-65660, to its Known Exploited Vulnerabilities catalog after confirming it is being used in live attacks. The agency gave federal...
ShinyHunters Evades WAF Rules to Reopen Critical PeopleSoft Attack Path
ShinyHunters has resumed mass exploitation of a critical Oracle PeopleSoft flaw by encoding part of the attack path to slip past some WAF rules. Compromised servers received web...
OpenCode Web Interface Flaw Let Hostile Sites Run Commands on Developer PCs
A flaw in OpenCode’s local web interface allowed a malicious website to turn an upgrade request into code execution on a developer machine. Version 1.18.22 fixes both the...
NeedyMantis Malware Gives Espionage Operators a Modular Foothold in Sensitive Networks
Microsoft has detailed NeedyMantis, a modular implant used after attackers gain access to selected organizations. Its covert loading chain, encrypted communications and downloadable modules make it a durable...
Pentagon Personnel System Breach Exposes Data on More Than 3 Million People
A breach of a Defense Manpower Data Center system exposed sensitive information tied to more than three million living and deceased people. The long intrusion window and the...