Universal Bucket Hijacking Technique for Cloud Data Exfiltration
Executive Summary We recently identified a bucket hijacking technique impacting multiple services across major cloud...
Security
Close Encounters of the Human Kind
Welcome to this week’s Threat Source newsletter. I love a Spielberg summer. His ability to...
The Gentlemen RaaS: rapid growth and a new ransomware variant
Introduction This year saw the emergence of The Gentlemen, a prominent example of a group...
WinRAR flaw could allow attackers to take control of your computer
Rarlab has released a new version of the popular WinRAR tool to patch a vulnerability...
ESET takes part in Operation Endgame to disrupt Amadey and Stealc
A year ago, ESET Research was part of two major operations that disrupted some of...
US lifts export controls on Anthropic’s frontier cybersecurity AI models
Anthropic restored global access to its Fable 5 model on Wednesday, ending a roughly three-week...
Apple Security Update Fixes 30+ Flaws In IOS 26.5.2
The latest Apple Security Update brings fixes for more than 30 security vulnerabilities in iOS...
Experts Warn: Passwords Still Winning Despite Passwordless Push
Today marks International Passwordless Day, an annual observance held on 23 June, the birthday of...
Security Affairs newsletter Round 584 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 584 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini July 05,...
OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat
Executive Summary OpenClaw is an AI agent that executes third-party skills from ClawHub, its dedicated...