CyberSecure Specialist

30 Sep

Timeshare exit scams: From fake buyers to recovery fraud

Information

Con artists are targeting timeshare owners who want out – and some victims are hit twice Phil Muncaster 29 Sep 2026  •  , 6 min. read Timeshares don’t have the best reputation in the world. But many consumers still invest in them. Estimates suggest the global marketplace was worth nearly $20 billion in 2025, and could exceed $38 billion by 2034. Yet many holidaymakers eventually want out, whether because of rising maintenance fees, life changes,…

Read More
30 Sep

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery

Information, News

The number of vulnerabilities disclosed each month doubled in 2026, and the monthly average of vulnerabilities exploited in the wild nearly doubled, according to a new report from Google Threat Intelligence Group (GTIG). Analyzing disclosures from January 2025 through August 2026, GTIG found that monthly disclosures rose from 5,045 in January 2026 to 10,477 in July, peaking at 10,740 in August. “We found that AI is measurably changing not just the pace of vulnerability discovery…

Read More
29 Sep

The devil is still in the email – but wearing a new mask

Information

Business Security When phishing can increasingly pass familiar checks, avoiding or limiting the damage depends on how quickly your company can detect and contain the attack Tomáš Foltýn 28 Sep 2026  •  , 6 min. read Many of today’s phishing attempts are no longer betrayed by poor grammar, a sketchy URL or a crude login page. To be sure, it does still pay to look out for these red flags, but their absence doesn’t make…

Read More
29 Sep

DARPA Selects Xint to Use AI in Securing Military Messaging Apps

Information, News

The Defense Advanced Research Projects Agency (DARPA) selected Xint to research the use of autonomous AI application security for deep analyses of internally and externally developed messaging applications that are used throughout the Department of War. DARPA was established in 1958 following the USSR’s launch of Sputnik in 1957. The purpose was to ensure the US would never again be surprised by the technological achievements of foreign countries. DARPA consequently partners with and supports private…

Read More
28 Sep

Modulate Raises $25 Million to Advance Deepfake Detection

Information, News

Frontier AI firm Modulate has raised an additional $25 million funding from Future Ventures, with participation from Hyperplane and Lakestar, bringing its total funding to $60 million. Modulate builds audio-native AI models that enable machines to understand the nuances in human conversation, whether natural or fake.  It uses a proprietary Ensemble Listening Model (ELM) architecture to generate the individual AI models that power its Velma platform. Velma brings together more than 100 of these specialized…

Read More
28 Sep

Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation

Information, Insights

Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect’s arrest, remaining ShinyHunters members dramatically escalated their attacks, stealing highly sensitive data from the FBI and extorting the Russian ransomware group Cl0p. According to three sources familiar with the matter, the Dutch man arrested by authorities this month is Pepijn van der Stap,…

Read More
27 Sep

Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

Attacks, Insights, Malware

CISA is amplifying Citrix’s disclosure of eight new vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway products: CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778.  CISA has added CVE-2026-88771 and CVE-2026-88772 to its Known Exploited Vulnerabilities (KEV) Catalog. Both are critical, zero-day vulnerabilities that can independently enable remote code execution. CISA has received reports and partner threat intelligence confirming that threat actors are actively exploiting these vulnerabilities globally. Because updating Citrix NetScaler appliances…

Read More
27 Sep

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

Information, News

A Microsoft SharePoint vulnerability tracked as CVE-2026-65660 is now being exploited in attacks, roughly six weeks after Microsoft announced patches and a couple of days after researchers disclosed technical details. CVE-2026-65660 is a remote code execution vulnerability fixed by Microsoft with its August 2026 Patch Tuesday updates. The company’s advisory describes it as a code injection issue that lets an authenticated attacker with low-level access to an affected server execute arbitrary code without user interaction. …

Read More
26 Sep

Is that vibe coded app safe? 5 checks before you download

Information

Mobile Security As AI lets anyone build software, here’s how to vet that shiny new app before it exposes your data Phil Muncaster 25 Sep 2026  •  , 6 min. read AI platforms are transforming many industries. But perhaps none more so than software development. “Vibe coding” was only coined as a term in February 2025. Yet just a few months later, one report suggested 84% of developers were using or planning to use AI…

Read More
26 Sep

New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining

Information, Malware, News

A threat actor has been selling access to a new Windows botnet that relies on AI to maintain persistence on infected hosts, Qrator reports. Dubbed x47.c, it is advertised by a threat actor named WraithTools as providing distributed denial-of-service (DDoS) and credential theft capabilities, SOCKS5 proxies, and an AI API drain method. In early August, the threat actor offered the botnet’s base package for $200 and asked $150 for the DDoS add-on. The entire x47.c…

Read More