Earlier in Cybersecurity
Two GitHub Actions, specifically actions-cool/issues-helper and actions-cool/maintain-one-comment, were found to have been re-enabled and resumed executing malware, months after their initial compromise. These repositories, part of the actions-cool organization, were first compromised during the May 2026 Mini Shai-Hulud campaign.
Cybersecurity researchers have identified a significant evolution in the PamStealer malware targeting macOS, with the latest variants incorporating advanced techniques for live Command and Control (C2) payload decryption and multi-layer persistence.
Cryptocurrency exchange Bitget has reported that suspected North Korean threat actors have stolen $351.6 million from its hot and warm wallets. The incident was detected on September 24, 2026, at 18:31 UTC when Bitget's security systems identified unauthorized transfers.
The Canadian Centre for Cyber Security has issued a warning that a critical pre-authentication SQL injection vulnerability affecting Roundcube Webmail is currently being actively exploited in the wild. This vulnerability, identified as CVE-2026-48842, carries a high severity score of 8.1…