Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages.

Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak.

iOS 26.5 Brings Default End-to-End Encrypted RCS Messaging Between iPhone and Android.

Cookie thieves caught stealing dev secrets via fake Claude Code installers.

cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor.

New GhostLock tool abuses Windows API to block file access.

Apple Patches Dozens of Vulnerabilities in macOS, iOS.

Foxconn (Taiwan) confirms a cyberattack disrupting parts of its North American operations, including the U.S. An employee says outages began Friday, forcing some teams to revert to “pen and paper” as systems went offline.

Microsoft is reportedly investigating potential misuse of its Azure cloud by Israel’s Unit 8200, with several senior executives in its Israel branch stepping down.

A hacker group has claimed responsibility for a large-scale cyberattack against eBay, which caused severe disruptions for two days and damages amounting to hundreds of millions of dollars.

The group, “The Islamic Resistance in Iraq,” claims it attacked Spotify.

GemStuffer used more than 150 RubyGems packages to exfiltrate scraped U.K. council portal data, not distribute malware.

The gems collected ModernGov pages, built .gem archives, and published them to RubyGems with hardcoded credentials.

Microsoft patched 138 security flaws across its products, including 30 Critical bugs and Windows DNS, Netlogon, Azure, Dynamics 365, and Hyper-V issues.

"Mira"; Telegram's intelligent assistant for chat, image, and tool management

Telegram has introduced a new AI assistant called "Mira" that offers features such as unlimited text chat, voice-to-text conversion, text-to-speech, internet search, image analysis, and management of the TON network wallet.