The Hacker News

🚨 Russian state-sponsored Sandworm wiped a Ukrainian logistics firm after UAC-0099 handed over access. The intrusion involved a new backdoor, MythicRatatoskr, controlled through the Yggdrasil mesh network. Inside the two-group operation ↓

🛑 Pegasus spyware infected the iPhone of a Serbian university rector who backs student protests. Citizen Lab confirmed the 0-click infection just 6 days before Serbia's election. A senior prosecutor was also flagged for likely spyware targeting. Read -

🚨 Russian state-sponsored Sandworm wiped a Ukrainian logistics firm after UAC-0099 handed over access. The intrusion involved a new backdoor, MythicRatatoskr, controlled through the Yggdrasil mesh network. Inside the two-group operation ↓

🚨 Researchers pushed over 2 million remote updates to disable a forgotten Popcorn Time updater that could have fueled a botnet. The flaw let anyone controlling its update domain deliver code with SYSTEM or root privileges. How they pulled it off ↓

🚨 PHP2Shell attackers accessed MFA secrets and password hashes at a European government entity in just 2 hours. That's not all. → Signs of agentic AI use in post-exploitation activity → Suspected Lazarus-linked operators scanning 216 targets worldwide Full details ↓

🔥 Your biggest AI insider threat may already be on an employee's laptop. AI agents can access API keys, passwords, and internal systems without proper oversight. Join Bitdefender's webinar to learn how to detect and govern shadow AI. Save your seat →