Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to ...
American Hospital Association

H-ISAC TLP White Vulnerability Bulletin BeyondTrust Patches Critical Authentication Bypass Flaws

BeyondTrust has urged customers to patch two critical Authentication Bypass vulnerabilities, tracked as CVE-2026-40138 and CVE-2026-40139, affecting its Remote Support (RS) and Privileged Remote ...
The Hacker News

Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials

Arctic Wolf says Anubis affiliates abused RMM tools, VPN logins, RDP, PsExec, and cloud-transfer tools before ransomware ...