The CyberSignal (Page 6)

Latest

Editorial illustration of a fake CAPTCHA checkbox wired to a command prompt, marking CERT-UA's Sandworm PowerShell-paste technique aimed at Ukrainian users.

Nation-State Cyber Threats

Ukraine and CERT-UA Document Sandworm CAPTCHA-PowerShell Trick Targeting Ukrainian Users

Another Sandworm-attributed technique lands from CERT-UA — end-user awareness and defender posture review this week for Ukraine-adjacent organizations.

Vulnerabilities

F5 Publishes Patches for Multiple NGINX and BIG-IP Vulnerabilities

F5's July patch cycle continues — defender verification across NGINX and BIG-IP deployments this week.

Editorial illustration of stacked app windows on a laptop collapsing toward a password box, marking the ClickLock macOS stealer that forces password entry.

Malware

Researchers Document “ClickLock” macOS Stealer That Reportedly Kills Apps Until Victim Enters Password

A novel macOS stealer technique with credential-and-crypto targeting — defender posture review for Mac-issuing organizations this week.

Editorial illustration of a video-call window and a data dashboard each wearing a patch, marking Zoom's CVSS 9.8 Windows fix and Splunk's companion patches.

Vulnerabilities

Zoom Publishes Critical Windows Vulnerability Patch (CVE-2026-53412, CVSS 9.8); Splunk Ships Companion Critical Patches

A CVSS 9.8 Zoom Windows flaw and companion Splunk patches — defender teams verify across enterprise deployments this week.

Editorial illustration of a judge's gavel resting on a transit farecard, marking two Scattered Spider members jailed for the £29M Transport for London attack.

Policy & Government

Two Scattered Spider Members Sentenced to Five-and-a-Half Years for £29 Million TfL Attack

The biggest cybercrime conviction in UK history — Scattered Spider's TfL attackers face five-and-a-half years, and the £29M cost lands as a defender-team reminder this week.

Editorial illustration of a server rack behind a bulletproof shield with a gavel and a broken seal, marking the US indictment of Russian hosting operators.

Policy & Government

US Unseals Indictment Charging Russian “Bulletproof” Web Hosts Over Cyberattacks That Netted $62 Million

A US indictment against Russian bulletproof hosting operators — law-enforcement continuation coverage this week.

Editorial illustration of a shared-document portal showing three cracks beside an alarm bell, marking CISA's warning on three exploited SharePoint flaws, two zero-days.

Vulnerabilities

CISA Urges Immediate Patching for Three Exploited SharePoint Vulnerabilities (Two Are Zero-Days)

CISA raises the SharePoint patch stakes — three actively exploited flaws, two of them zero-days, and defender teams accelerate verification this week.

Editorial illustration of a timeline with a wide gap between an early marker and a patch marker, marking SonicWall SMA zero-days exploited weeks before disclosure.

Vulnerabilities

CyberScoop Reports SonicWall SMA 1000 Zero-Days Were Reportedly Exploited Three Weeks Before Vendor Disclosure

A three-week pre-disclosure exposure window for the SonicWall SMA zero-days — defender teams review the timeline this week.

Editorial illustration of a weathered legacy beehive with a lifted honeycomb frame beside a calendar, marking the LegacyHive Windows zero-day PoC on Patch Tuesday.

Vulnerabilities

Chaotic Eclipse / Nightmare-Eclipse Drops "LegacyHive" Windows Zero-Day PoC Hours After Patch Tuesday

A Windows User Profile Service PoC drops the same day as Patch Tuesday — the researcher's fourth CyberSignal-tracked disclosure this cycle, and a defender review for this week.

Editorial illustration of an npm package emitting nested loader boxes toward a node cluster, marking compromised @asyncapi packages delivering a botnet loader.

Supply Chain Attack

Compromised @asyncapi npm Packages Deliver Multi-Stage Botnet Loader

Another JavaScript-ecosystem supply-chain compromise, confirmed by four vendors: four @asyncapi npm packages were observed distributing a multi-stage botnet loader, and all five malicious versions have since been pulled from npm — defender inventory work this week.

Editorial illustration of an open national risk register with a hazard-warning triangle rising from the page, marking the UK's catastrophic cyber-attack warnings.

Policy & Government

UK Government Updates National Risk Register with Catastrophic Cyber-Attack Warnings

The UK Government adds catastrophic cyber warnings to its National Risk Register — UK-operating defenders align posture this week.

Editorial illustration of a patched industrial control panel beside a calendar, marking ICS Patch Tuesday advisories from Siemens, Schneider and Rockwell.

Vulnerabilities

ICS Patch Tuesday: Siemens, Schneider Electric, and Rockwell Publish Dozens of Vulnerability Advisories

A big ICS Patch Tuesday cycle — defender teams for industrial operators concentrate patch verification this week as Siemens, Schneider Electric, and Rockwell Automation publish dozens of advisories.

See all