Scarlet Shark General News Feed An RSS security news feed sourced from reputable and high-quality providers. https://scarletshark.com/intel-lists/rss_newsfeed.php https://cdn.scarletshark.com/images/favicon-192.png Scarlet Shark General News Feed https://scarletshark.com/intel-lists/rss_newsfeed.php Scarlet Shark RSS Generator 102026-08-21 00:00:00 2026-08-21 00:00:00 Hackers abuse FTP server banners to deliver new Windows malware https%3A%2F%2Fwww.bleepingcomputer.com%2Fnews%2Fsecurity%2Fhackers-abuse-ftp-server-banners-to-deliver-new-windows-malware%2F 2026-08-21 00:00:00 Solar Winds Part 2 Avoided: N-Able Passportal Vault Leak https%3A%2F%2Famibeingpwned.com%2Fblog%2Fsolar-winds-part-2-avoided 2026-08-20 00:00:00 Zero-click Grok data theft: Cryptographic Context Injection attack leaks chat histories https%3A%2F%2Fadversa.ai%2Fblog%2Fcryptographic-context-injection-grok-data-theft%2F 2026-08-20 00:00:00 Manic: Blend between Banking Malware & Spyware https%3A%2F%2Fwww.threatfabric.com%2Fblogs%2Fmanic-blend-between-banking-malware-and-spyware 2026-08-20 00:00:00 UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities https%3A%2F%2Fblog.talosintelligence.com%2Fuat-10147-deploys-spectre-a-cross-platform-implant-with-linux-rootkit-and-byovd-capabilities%2F 2026-08-20 00:00:00 UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations https%3A%2F%2Fblog.talosintelligence.com%2Fuat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations%2F 2026-08-20 00:00:00 Prison for data analyst who tried to extort $2.5 million from his employer https%3A%2F%2Fwww.bitdefender.com%2Fen-us%2Fblog%2Fhotforsecurity%2Fprison-data-analyst-extort-employer 2026-08-19 00:00:00 Analyzing Stripe Vendors Breach: Confirmed Vendor Exposure and Claims of 20,000 Compromised APIs https%3A%2F%2Fwww.infostealers.com%2Farticle%2Fanalyzing-stripe-breach-confirmed-vendor-exposure-and-claims-of-20000-compromised-apis%2F 2026-08-19 00:00:00 Mirage2FA Hijacks Companies’ Microsoft 365 Sessions, with Over 4K Victims in the US https%3A%2F%2Fany.run%2Fcybersecurity-blog%2Fmirage2fa-phishing-targets-us-companies%2F 2026-08-18 00:00:00 Beware the Ransomware Rescuer: Ransom Busters https%3A%2F%2Fwww.guidepointsecurity.com%2Fblog%2Fbeware-ransom-busters%2F 2026-08-18 00:00:00 CISA: Windows Task Host flaw now exploited by ransomware gangs https%3A%2F%2Fwww.bleepingcomputer.com%2Fnews%2Fsecurity%2Fcisa-windows-task-host-flaw-now-exploited-by-ransomware-gangs%2F 2026-08-18 00:00:00 Critical and High-Severity GraphQL CVEs in GitLab: Code Injection and CSRF via One Directive https%3A%2F%2Fwww.ox.security%2Fblog%2Fgitlab-graphql-cve-2026-19478-19650%2F 2026-08-18 00:00:00 CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower https%3A%2F%2Fwww.varonis.com%2Fblog%2Fcosnitch 2026-08-18 00:00:00 Device Roles in Microsoft Defender XDR: Better Context for Threat Hunting and Detection Engineering https%3A%2F%2Facademy.bluraven.io%2Fblog%2Fdevice-roles-in-microsoft-defender-xdr 2026-08-18 00:00:00 C2Looper: A New Backdoor Likely Tied To Ransomware With GitHub C2 https%3A%2F%2Fwww.zscaler.com%2Fblogs%2Fsecurity-research%2Fc2looper-new-backdoor-likely-tied-ransomware-github-c2 2026-08-17 00:00:00 Update your Mac: Screen Sharing vulnerability exploited in the wild https%3A%2F%2Fwww.malwarebytes.com%2Fblog%2Fbugs%2F2026%2F08%2Fupdate-your-mac-screen-sharing-vulnerability-exploited-in-the-wild 2026-08-17 00:00:00 Philips and GE investigating Clop ransomware data theft claims https%3A%2F%2Fwww.bleepingcomputer.com%2Fnews%2Fsecurity%2Fphilips-and-ge-investigating-clop-ransomware-data-theft-claims%2F 2026-08-17 00:00:00 Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR https%3A%2F%2Fwww.wiz.io%2Fblog%2Fred-agent-snowflake-copilot-cicd-bug 2026-08-17 00:00:00 ExfilSquad: New Data Extortion Group Leaks Microsoft D365 Data, Likely Linked to Misconfigured Power Pages https%3A%2F%2Fwww.fortra.com%2Fblog%2Fexfilsquad-data-extortion-group-ransoming-microsoft-d365-data 2026-08-13 00:00:00 Multi-Functional Linux Botnet “Evooo1Bot” https%3A%2F%2Fwww.fortinet.com%2Fblog%2Fthreat-research%2Fmulti-functional-linux-botnet-evooo1bot 2026-08-13 00:00:00 AmnesiaStealer: a multi-stage Rust-based macOS infostealer that hijacks Chromium browsers https%3A%2F%2Fwww.jamf.com%2Fblog%2Famnesia-stealer-macos-infostealer-clickfix%2F 2026-08-13 00:00:00 The “City-Forum” Campaign - An advanced attacker is targeting Salesforce and ServiceNow instances worldwide https%3A%2F%2Fwww.reco.ai%2Fblog%2Fcity-forum-campaign-salesforce-servicenow%3Futm_source%3Dhackernews 2026-08-12 00:00:00 How We’re Building Scam Alert on WhatsApp With End-to-End Encryption and Verifiability Guarantees https%3A%2F%2Fengineering.fb.com%2F2026%2F08%2F12%2Fsecurity%2Fhow-were-building-scam-alert-whatsapp%2F 2026-08-12 00:00:00