The malicious package also uses Unicode steganography to evade detection.

Google suspects Scattered Spider targeted UK retailers Marks & Spencer, the Co-op and Harrods.

Palo Alto Networks researchers spot instances where threat actors are using AI platforms.

The EUVD, maintained by ENISA, compiles information from the CVE program, CSIRTs and vendors.

A second zero-day flaw was found in addition to exploitation of Netweaver by ransomware groups.

Browser fingerprinting and additional payload encryption are the most recent methods used.

Patches include five vulnerabilities actively targeted in the wild, as well as two others with public exploit code available.

CISA responded to concerns that the flaw potentially lets attackers access entire message histories from Signal clones.