www.thecyberwire.com Cyber Command Modernization Amid Location Data Risks and Major Breaches
Article Content
- •U.S. military personnel are at risk due to exposed location data from commercial sources.
- •A UK visa site leak has compromised 100,000 passports and selfies.
- •Carnival's data breach affects 6 million customers, linked to the ShinyHunters group.
Cyber Command's new chief is advocating for modernization as lawmakers express concerns over commercial location data potentially exposing U.S. troops. A third-party UK visa site has leaked 100,000 passports and selfies, raising serious privacy issues. Microsoft has criticized uncoordinated zero-day disclosures, emphasizing the need for better vulnerability management. A new macOS malware campaign targeting crypto developers has been identified, alongside the spread of cryptojacking malware through SEO poisoning and AI chatbots. Carnival has confirmed a significant data breach involving 6 million customer records linked to the ShinyHunters group. The alleged developer of VenomRAT has been extradited to France, and a Romanian hacker has received a five-year prison sentence for breaching Oregon state systems. The episode features Courtney Guss from Semperis discussing crisis response planning.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track shinyhunters, Jinx-0164 and VenomRAT in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploit in BeyondTrust Remote Support Disclosed BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE. The flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring credentials or user… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…