Russian Hacker Used Gemini to Manage a Botnet

Trend Micro announced that a Russian hacker used Gemini CLI to manage a small botnet, delegating a significant portion of the technical tasks, including code writing, debugging, command execution, and even transferring the command and control (C2) server, to this AI tool.

Qualys researchers have disclosed a high-severity vulnerability in Ubuntu’s snap-confine component that allows an unprivileged local user to gain root access. Tracked as CVE-2026-8933, the flaw can give an attacker complete administrative control of an affected computer.

China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks.

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge.

Microsoft 365 outage affects Teams, SharePoint and other services.

EU fines Google $1 billion for search, app store antitrust violations.

Hackers abuse Notepad++ plugins to stealthily install malware.

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers.

CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild.

Millions of California-bought cars can be hijacked via Bluetooth.

Year-long Russian attacks infect users as soon as they look at an email.

New Dolphin X infostealer uses AI to identify high-value victims.

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs.

Europol flags 4,340 URLs for removal in 'The Com' crackdown.

Hackers use DNS poisoning on hotel Wi‑Fi to steal Microsoft 365 accounts.

Man gets six years for hacking 750 women's Snapchat accounts.

An Illinois man was sentenced on Tuesday to 76 months in prison and three years of supervised release for hacking the Snapchat accounts of over 750 women to steal nude photos, which he later traded or sold online.

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers.

In a newly released intelligence report, French authorities publicly identified the Russian organization they say has spent more than two decades conducting cyber espionage against French interests.

More unusually, they revealed where the operation is based, how it works and the specific military unit they believe is responsible.

Hackers Targeting US Water and Energy Control Systems.

Malicious sites use JavaScript to build malware in browser memory.

A large-scale cyberattack against IMCO, a supplier to the Israeli defense industry. Simultaneously, the group "Cyber Support Front" announced on LeakForum that it had gained access to 30 terabytes of data from the company and has released a portion of it.