The CyberSignal (Page 30)

Latest

Editorial illustration of stacked app windows on a laptop collapsing toward a password box, marking the ClickLock macOS stealer that forces password entry.

Malware

Researchers Document “ClickLock” macOS Stealer That Reportedly Kills Apps Until Victim Enters Password

A novel macOS stealer technique with credential-and-crypto targeting — defender posture review for Mac-issuing organizations this week.

Editorial illustration of a video-call window and a data dashboard each wearing a patch, marking Zoom's CVSS 9.8 Windows fix and Splunk's companion patches.

Vulnerabilities

Zoom Publishes Critical Windows Vulnerability Patch (CVE-2026-53412, CVSS 9.8); Splunk Ships Companion Critical Patches

A CVSS 9.8 Zoom Windows flaw and companion Splunk patches — defender teams verify across enterprise deployments this week.

Editorial illustration of a judge's gavel resting on a transit farecard, marking two Scattered Spider members jailed for the £29M Transport for London attack.

Policy & Government

Two Scattered Spider Members Sentenced to Five-and-a-Half Years for £29 Million TfL Attack

The biggest cybercrime conviction in UK history — Scattered Spider's TfL attackers face five-and-a-half years, and the £29M cost lands as a defender-team reminder this week.

Editorial illustration of a server rack behind a bulletproof shield with a gavel and a broken seal, marking the US indictment of Russian hosting operators.

Policy & Government

US Unseals Indictment Charging Russian “Bulletproof” Web Hosts Over Cyberattacks That Netted $62 Million

A US indictment against Russian bulletproof hosting operators — law-enforcement continuation coverage this week.

Editorial illustration of a shared-document portal showing three cracks beside an alarm bell, marking CISA's warning on three exploited SharePoint flaws, two zero-days.

Vulnerabilities

CISA Urges Immediate Patching for Three Exploited SharePoint Vulnerabilities (Two Are Zero-Days)

CISA raises the SharePoint patch stakes — three actively exploited flaws, two of them zero-days, and defender teams accelerate verification this week.

Editorial illustration of a timeline with a wide gap between an early marker and a patch marker, marking SonicWall SMA zero-days exploited weeks before disclosure.

Vulnerabilities

CyberScoop Reports SonicWall SMA 1000 Zero-Days Were Reportedly Exploited Three Weeks Before Vendor Disclosure

A three-week pre-disclosure exposure window for the SonicWall SMA zero-days — defender teams review the timeline this week.

Editorial illustration of a weathered legacy beehive with a lifted honeycomb frame beside a calendar, marking the LegacyHive Windows zero-day PoC on Patch Tuesday.

Vulnerabilities

Chaotic Eclipse / Nightmare-Eclipse Drops "LegacyHive" Windows Zero-Day PoC Hours After Patch Tuesday

A Windows User Profile Service PoC drops the same day as Patch Tuesday — the researcher's fourth CyberSignal-tracked disclosure this cycle, and a defender review for this week.

Editorial illustration of an npm package emitting nested loader boxes toward a node cluster, marking compromised @asyncapi packages delivering a botnet loader.

Supply Chain Attack

Compromised @asyncapi npm Packages Deliver Multi-Stage Botnet Loader

Another JavaScript-ecosystem supply-chain compromise, confirmed by four vendors: four @asyncapi npm packages were observed distributing a multi-stage botnet loader, and all five malicious versions have since been pulled from npm — defender inventory work this week.

Editorial illustration of an open national risk register with a hazard-warning triangle rising from the page, marking the UK's catastrophic cyber-attack warnings.

Policy & Government

UK Government Updates National Risk Register with Catastrophic Cyber-Attack Warnings

The UK Government adds catastrophic cyber warnings to its National Risk Register — UK-operating defenders align posture this week.

Editorial illustration of a patched industrial control panel beside a calendar, marking ICS Patch Tuesday advisories from Siemens, Schneider and Rockwell.

Vulnerabilities

ICS Patch Tuesday: Siemens, Schneider Electric, and Rockwell Publish Dozens of Vulnerability Advisories

A big ICS Patch Tuesday cycle — defender teams for industrial operators concentrate patch verification this week as Siemens, Schneider Electric, and Rockwell Automation publish dozens of advisories.

Editorial illustration of two patched browser windows beside a blueprint scroll, marking Chrome 150 and Firefox 152 critical fixes and a public Firefox PoC.

Vulnerabilities

Google Chrome 150 and Mozilla Firefox 152 Ship Critical Patches; Public PoC Exists for Firefox Flaws

A same-week Chrome and Firefox critical patch cycle lands with public exploit code reportedly circulating for the Firefox flaws — making browser-fleet verification the defender task of the week.

Editorial illustration of a gateway appliance with a severity dial pinned to maximum, marking SonicWall SMA 1000 zero-days CVE-2026-15409 and CVE-2026-15410.

Vulnerabilities

SonicWall SMA 1000 Zero-Days Detailed: CVE-2026-15409 (CVSS 10.0 SSRF) and CVE-2026-15410 (Admin Command Execution)

SonicWall's SMA 1000 zero-days now have CVE-level detail — defender teams accelerate patch verification this week.

See all