COSMOS INTELLIGENCE SYSTEM·NVD SYNC: IDLE·KEV: 0 ENTRIES·RATE: 0/HR0%

·LAST SYNC: 04:44:18 AM NPT

Intelligence News Scholarships Blog Projects Resources Events Certificates Arsenal Tools About

LIVE

Loading…

Cybersecurity intelligence, research, and operational infrastructure.

Platform

Home
Intelligence
News
Digest
Scholarships
Blog
Projects
Resources
Events
Certificates
Arsenal
Tools
About

Connect

GitHub
LinkedIn
Email

© 2026 COSMOS.// all systems operational

Skip to content

COSMOS INTELLIGENCE SYSTEM·NVD SYNC: IDLE·KEV: 0 ENTRIES·RATE: 0/HR0%

·LAST SYNC: 04:44:18 AM NPT

Intelligence News Scholarships Blog Projects Resources Events Certificates Arsenal Tools About

LIVE

// news

Cybersecurity intelligence, research, and operational infrastructure.

Platform

Home
Intelligence
News
Digest
Scholarships
Blog
Projects
Resources
Events
Certificates
Arsenal
Tools
About

Connect

GitHub
LinkedIn
Email

© 2026 COSMOS.// all systems operational

// live feed

News

International cyber wires, Nepal tech reporting, AlienVault OTX pulses, OpenPhish hits and recent urlscan.io malicious verdicts all in one feed.

International cyber wires30
Nepal · tech & cyber20
Threat-intel pulses12
Live phishing URLs15

International cyber wires

The Hacker News · BleepingComputer · Krebs · Dark Reading

30 items

BleepingComputer8 hours ago
Hackers pull off $133 million French bank heist via service provider
French cooperative bank Crédit Mutuel Arkéa was targeted in a cyberattack that enabled fraudulent transactions of up to $133 million, forcing it to respond by suspending certain systems.v [...]
read
BleepingComputer9 hours ago
CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands
Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger unwanted subscriptions. CTM360 reveals how these campaigns use deceptive verification steps and affiliate networks to generate rev
read
The Hacker News16 hours ago
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. When a user selects "Yes, and don't ask again," Anthropic's AI coding assistant can save the command, word-for-word, incl
read
BleepingComputer23 hours ago
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. [...]
read
BleepingComputer1 day ago
Runaway AI hacking agent behind WorkOS breach after escaping sandbox
WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing environment and unintentionally attacked the company. [...]
read
Dark Reading1 day ago
UK Wades Into Tech Sovereignty Amid AI Policy Changes
The UK is betting on domestic AI and cyber investment to reduce reliance on US tech — but security leaders question whether the funding is too fragmented and too late.
read
BleepingComputer1 day ago
OpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugs
OpenAI has revealed GPT-6 Cyber, a new artificial intelligence model that has discovered 81 previously unknown high-severity Firefox vulnerabilities and developed working exploits for 948 distinct Linux kernel flaws. [...]
read
BleepingComputer1 day ago
Fake security tools on GitHub push backdoors and infostealers
Cybersecurity professionals are being targeted with infected security projects on GitHub that deploy a backdoor and information stealer malware. [...]
read
Dark Reading1 day ago
AI Gave Your Incident Archive a Second Job
Security records are increasingly being used by vendors to train their models, creating new risks for enterprises.
read
BleepingComputer1 day ago
QNAP says hackers breaching NAS devices in Plex2Shell attacks
QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center, as hackers are exploiting the Plex2Shell vulnerability chain. [...]
read
The Hacker News1 day ago
Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time
Some WordPress sites can still be attacked while they install the fix for an actively exploited flaw, according to Umut Bayram, the Picus Security researcher who found it. The update that installs the fix still unpacks its files using the site's old, unpatched code, so an attacke
read
BleepingComputer1 day ago
Veeam warns of Software Appliance boot failures on AMD EPYC hosts
Veeam warned customers about boot failures affecting Software Appliance virtual machines (VMs) on hosts with AMD EPYC processors. [...]
read
The Hacker News1 day ago
Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot
Threat actors are attempting to exploit a recently disclosed security flaw impacting OpenSSH that can enable sign-ins to accounts that have no password set, according to Previdian. The vulnerability, tracked as CVE-2026-123158 (CVSS score: 8.1) and codenamed SSHole (or *sshole),
read
BleepingComputer1 day ago
IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It
IMSI and IMEI are IDs your phone shares with networks. Learn how they differ, how attackers get them, and why rotating your IMSI blunts tracking. [...]
read
The Hacker News1 day ago
OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits
OpenAI on Thursday unveiled GPT‑6 Cyber, which it described as a major step forward in security research that brings together stronger cybersecurity capabilities with a step-change improvement in model alignment. The new model is "more capable at finding and fixing vulnerabilitie
read
BleepingComputer1 day ago
Chainalysis says breach exposed credentials for all customers
Blockchain intelligence firm Chainalysis says a recent attack on its systems and internal tools has exposed credentials and live tokens for all customers. [...]
read
Dark Reading1 day ago
Why Europe's Freezer Hacks Spread So Far, So Fast
Europe's supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale.
read
BleepingComputer1 day ago
D-Link warns of multiple zero-days in DGS-3130 Series switches
D-Link shared mitigation measures for multiple unpatched security flaws affecting DGS-3130 series managed Gigabit stackable switches. [...]
read
The Hacker News1 day ago
Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It
A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates. The fixed build, 11.2609.401.0, was the newest Paint build in all ten countries The Hacker News ch
read
The Hacker News1 day ago
Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers
A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person's computer, researchers at Forever Security, an endpoint security company, showed in a test. The attack needs Dispatch, a Claude feature that lets people send tasks from their pho
read
The Hacker News1 day ago
The Flood is Coming And The Pipes Were Already Full
An update on Athena, and some unsolicited predictions on what's coming next On Saturday, Dario Amodei published We Must Pace the Frontier. I agree with him. Go read it if you haven't. I've spent the summer looking at what these models find, and the gap he describes between what t
read
BleepingComputer2 days ago
MetaMask says recent attack didn't affect wallet infrastructure
Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure. [...]
read
Dark Reading2 days ago
UK Warns Its Critical Infrastructure Faces Grave Risk
Britain's new Labour-led government is making a concerted push to get ahead of the AI risks to its national networks and the industrial complex.
read
The Hacker News2 days ago
Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services
Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for all users. "While we investigated, we removed access to Reactor and Data Solutio
read
The Hacker News2 days ago
Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs
A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at QiAnXin's XLab said this week. The backdoored web server executes commands that attackers send via web requests, and those request
read
The Hacker News2 days ago
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
Two flaws in Barracuda's Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with no login required. The company released patches on Monday, and the security firm watchTowr detailed the attack chain on T
read
BleepingComputer2 days ago
FBI, CISA warn of cyberattacks targeting refrigeration systems
The FBI and CISA warn that hackers are actively targeting industrial refrigeration and cold-chain monitoring systems worldwide, potentially causing food spoilage, equipment damage, and fire hazards. [...]
read
Dark Reading2 days ago
Operação de influência russa tem como alvo generalizado a América Latina
A operação, que contou com o uso de inteligência artificial, utilizou e-mails falsos, documentos governamentais falsificados e a criação de uma organização local para atacar escolas no Peru e no Equador, entre outras ações.
read
Dark Reading2 days ago
US Government Email Systems Open to Abuse Thanks to Typos
Erroneous or outdated DNS records can give attackers surprising powers over organizations' email systems.
read
BleepingComputer2 days ago
Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to steal Microsoft and Google account credentials and authentication sessions. [...]
read

Nepal · tech & cyber

TechLekh · OnlineKhabar · TechSathi

20 items

OnlineKhabar13 hours ago
Burning Paris and the warning for Singha Durbar
An imperial power that once shaped global diplomacy is now struggling to contain an uprising led by its own children. On Monday, October 19, French Prime Minister Sébastien Lecornu convened an emergency crisis cabinet following a weekend of destructive urban unrest. More than 550
read
OnlineKhabar15 hours ago
Catch-22 and the contradictions of Nepal’s democracy
For many Nepalis, the choice is deceptively simple. They can stay in a country where opportunities to build a decent life remain scarce, or leave in search of work abroad and send money back to support those who remain. This is hardly a choice at all. It reflects a fundamental co
read
OnlineKhabar17 hours ago
Nepal’s mad honey needs a safety standard before it needs new markets
On October 5, food inspectors in the Czech Republic posted an alert on the European Union’s food-safety network about a 50-gram tub of honey from Nepal. It had reached Czech shops through the Netherlands. Tested in the lab, it held 64 milligrams of grayanotoxin per kilogram
read
OnlineKhabar19 hours ago
Biratnagar land scandal leaves ordinary buyers facing an uncertain future
Kathmandu, November 7 The road through an old mango and litchi orchard in Biratnagar Metropolitan City-2, Somabare Haat, was once considered unsafe to walk along after dusk. Located in Biratnagar’s main market area, the four-bigha-and-five-kattha orchard had long attracted attent
read
OnlineKhabar21 hours ago
How families become part of the violence against women
How many of us have watched our mothers suffer in silence? We know the sounds. The joke at the dinner table that lands at her expense. The way she goes quiet at a party when he talks over her. The gathering where the men fill the room and the women serve them, and nobody notices
read
OnlineKhabar23 hours ago
‘We do not need sympathy; climate finance is our right’
The 31st United Nations Climate Change Conference (COP31) is scheduled to take place in Türkiye from November 9 to 20, bringing renewed attention to the growing climate crisis and its disproportionate impact on vulnerable countries such as Nepal. Coming just two and a half months
read
OnlineKhabar1 day ago
Chitwan Rhinos hand Pokhara Avengers fourth straight defeat
Kathmandu, November 6 Chitwan Rhinos handed Pokhara Avengers their fourth consecutive defeat in the Nepal Premier League (NPL), securing a 30-run victory after bowling them out for 121 while defending a target of 152. Batting first, Chitwan posted 151/6 in their allotted 20 overs
read
OnlineKhabar1 day ago
Nepal launches Visit Nepal campaign in partnership with TikTok
Kathmandu, November 6 Nepal has formally launched the Visit Nepal campaign in collaboration with the Nepal Tourism Board and social media platform TikTok, aiming to promote the country to the global tourism market through digital content and storytelling. The campaign, which bega
read
OnlineKhabar1 day ago
RSP issues seven-point directive to regulate internal elections and candidate selection
Kathmandu, November 6 The Rastriya Swatantra Party (RSP) has issued a set of directives for members involved in its internal elections, conventions and candidate selection processes. Bhuwan KC, chair of the party’s Central Election Committee, issued the seven-point directive thro
read
OnlineKhabar1 day ago
Pradip Paudel dismisses claims that Nepali Congress paid to secure legal recognition
Kathmandu, November Nepali Congress General Secretary Pradip Paudel has dismissed claims that the party paid money to secure its legal recognition, describing the allegations as fabricated and politically motivated. Speaking at a programme organised by the Nepali Congress Regiona
read
OnlineKhabar1 day ago
Badal claims Western powers could bring down Balen govt if it fails to serve their interests
Kathmandu, November 6 CPN-UML Vice-Chair Ram Bahadur Thapa, popularly known as Badal, has claimed that Western powers would bring down the current government if it failed to act in line with their interests. Thapa made the remarks while speaking at a programme organised by the CP
read
OnlineKhabar1 day ago
Travel agency and four Mexican nationals fined for trekking in Dolpo restricted area without permits
Kathmandu, November 6 The Department of Immigration has taken action against a travel agency and four foreign nationals for organising and undertaking a trek in a restricted area without obtaining the required permits. According to the department, the four Mexican nationals were
read
OnlineKhabar1 day ago
Preparations for Janakpurdham–Ayodhyadham railway service gather pace
Dhanusha, November 6 Preparations to connect Janakpurdham in Nepal with Ayodhyadham in India by rail have gathered pace, with Indian Railway officials arriving at Kurtha railway station in Dhanusha on Thursday with a 17-coach train to inspect security and technical arrangements a
read
OnlineKhabar1 day ago
Three newly appointed ambassadors present credentials to President Paudel
Kathmandu, November 6 Three newly appointed ambassadors to Nepal presented their credentials to President Ram Chandra Paudel at a special ceremony held at the President’s Office in Sheetal Niwas on Thursday. According to the President’s Office, the ambassadors were Sudhakar Dalel
read
OnlineKhabar1 day ago
10 foreign nationals deported for violating visa conditions in Nepal
Kathmandu, November 6 The Department of Immigration has decided to deport 10 foreign nationals after finding that they had engaged in activities contrary to the purpose of their visas. According to the department, the 10 foreigners, including a minor, had come to attend a program
read
OnlineKhabar1 day ago
Nepali Congress to provide warm clothes and mental health counselling to flood-hit communities
Kathmandu, November 6 The Nepali Congress has decided to launch a campaign to distribute warm clothes and provide mental health counselling to people affected by the Bhotekoshi–Trishuli floods and landslides in Rasuwa, Dhading and Nuwakot districts. A meeting held at the party&#8
read
OnlineKhabar1 day ago
Police warn against exploding firecrackers during Tihar
Kathmandu, November 6 The Nepal Police have requested the general public not to explode firecrackers or carry out fireworks during Tihar, as doing so can cause serious accidents. The police have urged this because the use of explosives can cause fires, injuries to people leading
read
OnlineKhabar1 day ago
NCP ministers prepare to resign from Madhesh government amid new political alliance talks
Janakpurdham, November 6 Ministers from the Nepali Communist Party (NCP) are preparing to resign from the Madhesh provincial government as a new political alliance takes shape in the province. According to a provincial assembly member, the NCP parliamentary party held a virtual m
read
OnlineKhabar1 day ago
Police shoot and arrest suspect linked to eight fraud cases in Kathmandu
Kathmandu, November 6 Police have shot and arrested Sujan Tamang, who is accused of running a series of fraud schemes by offering to exchange US dollars at below-market rates. The arrest followed an attack on police officers who had gone to detain him, said SSP Dilip Ghimire, chi
read
OnlineKhabar1 day ago
Proposed Supreme Court justice Saru aims to clear backlog of old cases within three years
Kathmandu, November 6 Chandrabahadur Saru, nominated for the post of Supreme Court justice, has proposed a plan to reduce the number of cases pending for more than five years by 70 per cent within three years. In a work plan presented to the Parliamentary Hearing Committee, he ha
read

Threat-intel pulses

AlienVault OTX subscribed feeds

12 items

AlienVault OTX1 day ago
Armorsteal Unpacked: Breaking Down a Python Malware Kit That Steals Data and Mines Crypto
Armorsteal is a sophisticated Python-based malware kit that combines information stealing, cryptocurrency mining, and backdoor capabilities. Distributed through fake download pages for legitimate tools, it installs into C:\Windows\SystemHealth\Update with three scheduled tasks ma
read
AlienVault OTX1 day ago
Lookalike Domains Expose the iPhone Theft Economy
A thriving underground marketplace operating primarily through Telegram has emerged to unlock stolen iPhones, making phone theft profitable despite Apple's security features like Activation Lock. Thieves combine technical tools and social engineering through SMS phishing campaign
read
AlienVault OTX1 day ago
Inside Help TDS: Hotejka, Cloudflare Pages and Predictive Detection
Infoblox attributes the Help Traffic Distribution System (TDS) to Hotejka, a small Russian-language affiliate program believed to be a rebrand of ROI777, which was exposed in 2018. Operating since April 2017, this TDS delivers tech support scams directing users to call centers wh
read
AlienVault OTX1 day ago
Remcos RAT
This intelligence analysis details a malicious campaign involving Remcos RAT, a commercially available remote access trojan. The attack chain begins with a weaponized Excel spreadsheet (Remittance Advice.xlsm) that executes VBA macros. Upon opening, PowerShell retrieves remote sc
read
AlienVault OTX2 days ago
ARTEX: Agentic Asbestos
ARTEX is an open-source, LLM-driven autonomous penetration testing framework released in July 2026 that integrates AI agents with reconnaissance and exploitation capabilities. As of November 2026, 1,465 hosts run exposed ARTEX consoles globally, with approximately 815 distinct de
read
AlienVault OTX2 days ago
A Dish Served Lukewarm: The Refrigerator Botnet
Exposed Dixell/Copeland XWEB PRO refrigeration controllers are being exploited as abuse infrastructure. The STRIKE Team discovered a suspected SMTP botnet comprising nine IP addresses, with three confirmed as refrigeration controllers. These devices, used in supermarkets and cold
read
AlienVault OTX2 days ago
Email threat landscape: Q3 2026 trends and insights
From July through September 2026, approximately 7.3 billion email-based phishing threats were detected, with September reaching nearly 3 billion attacks—a 41% increase from August. The quarter demonstrated significant shifts in attack techniques, including a sharp decline in QR c
read
AlienVault OTX1 month ago
Canto incognito: tracking the PoeLLM malware
Since April 2026, PoeLLM malware has been actively targeting exposed AI/LLM and open-source services including LiteLLM, Ollama, Gotenberg, and Gitea, with possible Ivanti Sentry targeting. The campaign employs an unusual command-and-control mechanism where infected systems derive
read
AlienVault OTX1 month ago
RMM Tools Being Distributed Through Phishing Attacks (ScreenConnect, FleetDeck, Datto, SimpleHelp, JumpCloud, N-able)
Multiple Remote Monitoring and Management (RMM) tools are being distributed through phishing campaigns involving video files and email attachments. Threat actors exploit legitimate RMM solutions like ScreenConnect, FleetDeck, Datto, SimpleHelp, JumpCloud, and N-able to gain remot
read
AlienVault OTX1 month ago
DarkSword/Coruna Open Directory Finding
Five hosts exposed the complete DarkSword/Coruna iOS exploitation platform through open directories, revealing an active commercial exploitation-as-a-service operation. The platform targets cryptocurrency wallets across 18 different applications, extracting BIP39 recovery phrases
read
AlienVault OTX1 month ago
FortiBleed Operations Continue Targeting Exposed Systems Leading to Reports of Lockouts
FortiBleed is an active global credential-compromise campaign targeting internet-facing Fortinet FortiGate firewalls and SSL VPN gateways, with over 86,644 compromised devices verified across 194 countries. The campaign exploits reused or leaked credentials and legacy SHA-256 pas
read
AlienVault OTX1 month ago
Iranian State-Aligned Threat Actor Masquerading as Dubai Airports IT Department Delivering Trojanized Coding Challenges - Blinder Tunnel Campaign Targeting Iraqi Critical Infrastructure
An Iranian state-aligned threat actor designated as CL-STA-1178 has been impersonating the Dubai Airports IT department to deliver trojanized coding challenges to high-value targets. The Blinder Tunnel campaign, active since November 2025 with attacks intensifying in March 2026,
read

Live phishing URLs

OpenPhish public feed

15 items

OpenPhish4 seconds ago
www.rbx1000dfthfhhfhu.blogspot.com
Newly observed phishing URL.
read
OpenPhish4 seconds ago
nilsondebona1790684375357.2090313.meusitehostgator.com.br
Newly observed phishing URL.
read
OpenPhish4 seconds ago
www.adobesign-coral.vercel.app
Newly observed phishing URL.
read
OpenPhish4 seconds ago
www.omis-gules.vercel.app
Newly observed phishing URL.
read
OpenPhish4 seconds ago
www.adobesign-review.vercel.app
Newly observed phishing URL.
read
OpenPhish4 seconds ago
vpcs-loltrauxaokhe.netlify.app
Newly observed phishing URL.
read
OpenPhish4 seconds ago
snaply-khadir-salims-projects.vercel.app
Newly observed phishing URL.
read
OpenPhish4 seconds ago
instagram-clone-konstantindev1.vercel.app
Newly observed phishing URL.
read
OpenPhish4 seconds ago
c07m.top
Newly observed phishing URL.
read
OpenPhish4 seconds ago
c07m.top
Newly observed phishing URL.
read
OpenPhish4 seconds ago
c07m.top
Newly observed phishing URL.
read
OpenPhish4 seconds ago
prasadmhetre2005.github.io
Newly observed phishing URL.
read
OpenPhish4 seconds ago
m3tamsklognx.gitbook.io
Newly observed phishing URL.
read
OpenPhish4 seconds ago
ar24-five.vercel.app
Newly observed phishing URL.
read
OpenPhish4 seconds ago
www.f60c.top
Newly observed phishing URL.
read

fetched 0 seconds ago · cache: 5 min server, 10 min stale-while-revalidate