The leaked DarkSword iOS exploit now spreads across 100+ sites, dropping the GHOSTBLADE implant. Censys maps the operator panels. Update to iOS 26 now.

Related Posts:

• SMOKE#SCREEN Campaign Abuses ScreenConnect RMM for Stealthy Remote Access
• Astaroth WhatsApp Spambot Turns Brazil Victims Into Unwitting Malware Distributors
• Canadian Man Pleads Guilty to Cloud Hacking Extortion Scheme That Hit 165 Companies

The post DarkSword iOS Exploit Spreads Across 100+ Sites and Drops GHOSTBLADE appeared first on Daily CyberSecurity.

Unit 42 analyzes npm supply chain evolution post-Shai Hulud. Discover wormable malware, CI/CD persistence, multi-stage attacks and more.

The post The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15) appeared first on Unit 42.

Scammers are already gearing up for the FIFA World Cup 2026 with phishing attacks, online scams and a whole lot of social engineering as emotions and reckless behavior runs high among fans. 

The post FIFA World Cup 2026: A Match Between Fans and Scammers   appeared first on Security Boulevard.

Starkiller is a new SaaS-style phishing framework that runs real brand websites inside headless Chrome containers, acting as a live reverse proxy to steal credentials, session tokens, and MFA-protected accounts while evading traditional detection.

The post Starkiller Phishing Framework Bypasses Defenses with Reverse Proxies, Takes an SaaS Approach  appeared first on Security Boulevard.