Nicholas Robert - The CyberSignal (Page 12)

Editorial illustration of a diplomatic training portal with a long shadow and a lifted file, marking South Korea's nine-month diplomatic-academy breach.

Data Breaches

South Korea's Foreign Ministry Confirms Nine-Month Breach of Diplomatic Training System

A nine-month South Korean foreign-ministry breach — allied foreign-ministry defender posture review this week.

Flat line-art of a fake official video call beside a lookalike browser window — the FBI warning on deepfake videos impersonating IC3 leadership.

phishing

FBI Warns of Deepfake Videos Impersonating IC3 Leadership in Fraud-Revictimization Campaign

An FBI advisory on deepfake-driven revictimization of fraud victims — consumer awareness this week.

Editorial illustration of a defaced presidential webpage showing a wallet address, marking Kenya's probe into the hack of President Ruto's website with a Bitcoin ransom.

Policy & Government

Kenya Probes Hack of President William Ruto's Website Following Bitcoin Ransom Demand

A Kenyan presidential-website hack draws a Bitcoin-ransom demand — government-website defender awareness this week.

Ransomware

Sysdig Reports JadePuffer Deploys ENCFORGE Ransomware Purpose-Built to Wipe AI Model Files

The first purpose-built AI-model ransomware lands from JadePuffer — a defender review for organizations hosting AI infrastructure this week.

Editorial illustration of an IP security camera turned toward supply trucks, marking the AIVD/MIVD warning on Russian camera-hijacking across NATO and Ukraine.

Nation-State Cyber Threats

AIVD and MIVD Warn Russian Intelligence Hijacks IP Cameras Across NATO States and Ukraine to Track Military Logistics

A Dutch intelligence advisory raises the stakes on Russian camera-hijacking activity — critical-infrastructure defender teams review IP-camera posture this week.

Supply Chain Attack

Researchers Document "FakeGit" Campaign Using 7,600 Malicious GitHub Repositories to Deliver SmartLoader Malware

A scale-significant GitHub impersonation campaign hits AI-tooling users — defender inventory work this week.

Editorial illustration of an opened archive box releasing a spark during extraction, marking the 7-Zip CVE-2026-14266 heap overflow in XZ chunked data handling.

Vulnerabilities

Trend Micro ZDI Discloses 7-Zip CVE-2026-14266 Heap Buffer Overflow in XZ Chunked Data Handling

A crafted XZ archive can run code in 7-Zip — defender teams verify the 26.02 update this week.

Editorial illustration of many website blocks toppling like dominoes past an alarm bell, marking wp2shell WordPress mass exploitation putting millions of sites at risk.

Vulnerabilities

wp2shell WordPress Mass Exploitation Expands; Millions of Sites at Risk

wp2shell moves from active exploitation to mass takeover — hosting providers and defender teams accelerate remediation this week.

Editorial illustration of a hospital billing ledger with pages pulled out, marking Craneware's disclosure of data theft affecting US hospital finance software.

Data Breaches

Craneware Discloses Data Theft Affecting US Hospital Finance Software

A financial-software provider serving thousands of US hospitals confirms significant data theft — sector-advisory coverage this week.

Editorial illustration of a figure stepping out of a cracked sandbox tray — ServiceNow AI Platform CVE-2026-6875, a CVSS 9.5 sandbox escape under active attack.

Vulnerabilities

ServiceNow AI Platform CVE-2026-6875 (CVSS 9.5 Sandbox Escape) Under Active Exploitation

A ServiceNow AI Platform sandbox escape under active attack — defender teams accelerate patch verification this week.

Editorial illustration of a calendar page dated far in the future holding a hidden note, marking HollowGraph malware abusing Microsoft 365 calendars for C2.

Threat Intelligence

Group-IB Documents “HollowGraph” Malware Abusing Microsoft 365 Calendars for C2

A novel Microsoft 365 calendar-abuse malware framework — defender detection-engineering review this week.

Editorial illustration of a key ring being rotated beside an AI vault as shields fail, marking Hugging Face's token-rotation guidance after the autonomous-agent breach.

Data Breaches

Hugging Face Confirms Breach Detail: Frontier LLMs Failed to Stop the Autonomous Agent; Users Urged to Rotate Tokens

Hugging Face's autonomous-agent breach gets user-action guidance — and a Chinese open-weight model, GLM 5.2, reportedly powered the attack while frontier LLMs failed to help defenders.

See all