Jutsu

Author at Jutsu

Published Posts

10 posts

AIJun 19, 2026

Trusted Systems, Hidden Threats: The New Attack Surface

Ransomware moved into Microsoft Teams and nobody noticed DragonForce ransomware did not bother with sketchy servers this time. They built a backdoor called Backdoor.Turn and hid its entire command-and-control traffic inside Microsoft Teams relay infrastructure. Your firewall sees Teams traffic. Teams traffic is whitelisted. The malware just sits there passing instructions through a platform your […]

CybercrimeJun 12, 2026

Europol Shuts Down AudiA6, a €336M Crypto Laundering Pipeline for Ransomware

Ransomware runs on more than malware. It runs on money movement. This week, European authorities cut a major artery. Europol confirmed the disruption of AudiA6, a cryptocurrency laundering service used by ransomware gangs and wider cybercriminal networks. The takedown, described as severing a “key financial pipeline,” targeted a service estimated to have washed more than […]

Data BreachJun 11, 2026

ShinyHunters exploits Oracle PeopleSoft zero‑day (CVE‑2026‑35273) to breach universities

ShinyHunters is abusing an unpatched Oracle PeopleSoft flaw to break into enterprise systems, steal data, and extort victims. Universities took the brunt of it. What happened Google’s Mandiant attributes the campaign to UNC6240 with activity from May 27 to June 9. Oracle didn’t publish its advisory until June 10, which means this was a zero‑day […]

AI SecurityJun 11, 2026

New Attacks Make OpenClaw Run Code and Leak Secrets

Two separate teams just proved it: OpenClaw, the popular self-hosted AI agent, can be pushed to execute attacker-controlled code or leak sensitive data through inputs that look routine. Imperva hid instructions inside shared contacts, vCards, and location pins—payloads the victim never saw but the agent executed. Varonis built a test agent, gave it a mailbox […]

CybersecurityJun 11, 2026

The Gentlemen Ransomware: 478 Victims, Worm‑Like Spread

The Gentlemen isn’t a sideshow—it’s a fast, adaptive ransomware operation with scale. New reporting shows the crew began as a double-extortion affiliate, leveraging resources from RaaS programs like LockBit (aka Tenacious Mantis), Qilin (aka Pestilent Mantis), and Medusa (aka Venomous Mantis). Today, it’s operating its own program—and it’s effective. PRODAFT’s detailed report tracks the group […]

AwardsJun 11, 2026

Cybersecurity Stars Awards 2026: Winners Across 95 Subcategories

Most security wins stay invisible. Today, we surface them. The 2026 Cybersecurity Stars Awards winners are announced across 95 subcategories in four main award categories. Cybersecurity is full of work that deserves recognition and rarely gets it. Products that close real gaps. Teams that stop incidents quietly. Companies that lift the baseline for everyone. Once […]

CybersecurityJun 11, 2026

AI Broke Vulnerability Management—CISOs Are Shifting to BAS

For three decades, vulnerability management survived on a buffer: the time between finding a flaw and someone turning it into a weapon. Triage. Schedule. Validate. Move on. That buffer made the model viable. That buffer is gone. AI didn’t slow your team. It accelerated the attacker—compressing discovery-to-exploit from months to hours. A process built for […]

Cyber EspionageJun 11, 2026

OceanLotus targets Vietnam investors and infrastructure with SPECTRALVIPER via FireAnt

OceanLotus is moving differently. The Vietnam‑aligned threat actor has been tied to two distinct campaigns that hit domestic entities and Vietnam stock investors with the SPECTRALVIPER backdoor, according to new research from ESET. Domestic espionage against a Vietnamese infrastructure and transport construction corporation (mid‑2024 to February 2026) A supply chain attack abusing the FireAnt Metakit […]

Developer SecurityJun 11, 2026

GitHub: npm v12 Disables Install Scripts by Default to Curb Supply Chain Attacks

GitHub is flipping npm’s default posture. With npm v12, install-time scripts are off by default to blunt supply chain attacks. Release ships next month. Why this matters: install-time lifecycle scripts are the largest code-execution surface in the npm ecosystem. npm install runs scripts from every transitive dependency, which means one compromised package anywhere in the […]

BotnetsJun 10, 2026

China-Linked JDY Botnet Surges Past 1,500 Devices for Structured Reconnaissance

JDY is back—and bigger. Lumen’s Black Lotus Labs calls it a “resurgence and expansion.” The China‑linked covert network has grown into a centrally controlled, high‑performance scanner built from more than 1,500 compromised SOHO and IoT devices. Its mission: discover, fingerprint, and continuously map exposed services at scale. From KV-botnet cluster to stand‑alone recon engine JDY […]

Subscribe to our newsletter

Get the latest security tips, product updates, and news delivered to your inbox.