• CloudZ Malware Abuses Phone Link to Steal SMS OTPs
• CISA Urges Critical Infrastructure Providers to Make Plans to Remain Operational if hit by Cyber-Attack
• Iran-Linked APT Posed as Chaos Ransomware Member in Espionage Campaign
• One in Eight Workers Has Sold Their Corporate Logins
• Microsoft Flags Mass Phishing Campaign Using Fake Compliance Emails
• North Korean APT Targets Yanbian Gamers via Trojanized Platform
• Fake SSA Emails Drive Venomous#Helper Phishing Campaign
• AI Adoption Outpaces Safety Policies, Leaving Organizations Exposed to Cyber Risk
• NCSC Warns of an AI-Fuelled “Vulnerability Patch Wave”
• Trellix Reveals Unauthorized Access to Source Code
• Critical MOVEit Automation auth bypass vulnerability fixed (CVE-2026-4670)
• DigiCert breached via malicious screensaver file
• Multiple threat actors actively exploit cPanel vulnerability (CVE-2026-41940)
• Small Defense Firms Lack Network Data to Stop Nation-State Hackers, Analyst Says
• Two cybersecurity pros get prison time for helping ransomware gang
• Claude Security enters public beta with Opus 4.7 vulnerability scanning and patching
• 15-year-old detained over massive data breach at French government agency
• OpenAI To Extend Cyber Program to Government Agencies
• Anthropic Rolls Out Claude Security for AI Vulnerability Scanning
• Two American Cybersecurity Workers Jailed for BlackCat Ransomware Attacks
• Nine-Year-Old Zero-Day Flaw in Linux Kernel Discovered by AI-Equipped Security Researcher

Cisco Talos uncovers CloudZ RAT and Pheno plugin abusing Microsoft Phone Link to intercept SMS OTPs