DarkSword Exploit Service Uses Coruna Malware to Steal iPhone Wallet Recovery Phrases
Researchers uncovered exposed infrastructure showing how DarkSword and Coruna turn iPhone exploitation into a commercial wallet-theft service. The toolkit injects modules into wallet apps and searches photos and...
FBI Seizes Seven Domains Supporting Flax Typhoon Scanning and Phishing Operations
U.S. authorities seized seven domains linked to scanning, phishing, malware delivery, and persistence tools allegedly operated by China-based Integrity Technology Group. The disruption affects infrastructure associated with Flax...
Password-Free Login Flaw in Sungrow’s Solar Cloud Platform Could Have Enabled Grid-Wide Disruption
A business-logic flaw in Sungrow's iSolarCloud platform let attackers authenticate into any customer account using only an email address, with no password required and no login alert sent....
Microsoft Teams to Add Third-Party Deepfake Detection as Synthetic-Media Attacks Escalate
Microsoft plans to roll out synthetic audio and video detection in Teams starting November 2026, routing meeting media through certified third-party providers to flag possible deepfakes. The move...
Public Exploit Code Raises Urgency Around Critical Atlassian File-Read Flaw
A proof-of-concept exploit is now public for CVE-2026-21589, a critical, unauthenticated file-read flaw affecting Jira, Confluence, Bitbucket, and other self-managed Atlassian Data Center products. In certain Crowd-connected setups...
Fake Cloudflare Verification Pages Used to Push LUNEXSTEALER Malware on 100+ Hacked Sites
Ukraine's CERT-UA is tracking a campaign, dubbed UAC-0277, that has compromised more than 100 legitimate websites to show visitors a convincing but fake Cloudflare verification screen. Clicking through...
Breach at Discord Bot Provider Double Counter Exposes Data on Millions of Users
An intrusion into Double Counter, a third-party company behind a popular Discord moderation bot, let an attacker pull tens of millions of user records and briefly hijack the...
Pwn2Own Ireland 2026: Researchers Cash In on 32 Zero-Days Across Samsung, Oracle, and AI Platforms
On the opening day of Pwn2Own Ireland 2026, competing research teams chained together 32 previously unknown vulnerabilities across flagship phones, AI services, and smart-home gear, collecting $388,500 in...