WAY 401 Hida House - Al Khuwair South - Muscat -Oman
info@tscogroup.com

CoinDesk Research

Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption

Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption

Varonis Threat Labs recently discovered AvisLoader, a new Windows loader named after the Latin word for bird. We found it on an exposed staging server alongside a ClickFix lure, supporting tools, and its Command Center. The attack starts with a familiar ClickFix lure. A page posing as a document-signing request asks visitors to copy and run an attacker-supplied command on their machine. The more interesting part is how AvisLoader stays connected. It communicates via Tox, an encrypted peer-to-peer (P2P) messaging
Read More

GitLab warns of critical RCE vulnerability in AI Gateway service

GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances. AI Gateway is a service that gives access to AI-native GitLab Duo features. While GitLab operates its own cloud-based AI Gateway instance used by GitLab.com, GitLab Self-Managed, and GitLab Dedicated, users can also deploy their own self-hosted instances on GitLab Self-Managed through GitLab Duo Self-Hosted. Tracked as CVE-2026-90970, this security flaw stems from an improper neutralization weakness and
Read More

Google pulls back the curtain to tease Gemini 4 Argon

Joe Maring / Android Authority Add Android Authority on Google: TL;DR Gemini 4 Argon is coming soon as Google’s most capable AI model to date. Benchmarks show highly competitive scores across a wide range of agentic tasks. Google is still testing Argon with limited groups, but access will eventually expand to AI Ultra subscribers. New AI models drop so frequently, it’s difficult to even think of a week that’s not particularly packed with them, but these last few days have
Read More

Faster, safer, smarter, cheaper: Anthropic makes the case for Claude Sonnet 5.5

Akshay Gangwar / Android Authority Add Android Authority on Google: TL;DR Anthropic is introducing Claude Sonnet 5.5 as an optimized alternative to Opus 5.5. While Opus 5.5 edges still edges out Sonnet in many tasks, Sonnet’s speed and low cost of operation make it still worth considering. Sonnet 5.5 represents an even more significant improvement over Sonnet 5, while retaining the same low cost. With as fast as things move in AI, you can’t just innovate along one narrow axis
Read More

CISA orders feds to patch Zyxel flaw exploited for data theft

​Attackers are now actively exploiting a high-severity vulnerability in Zyxel GS1900 series switches, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The flaw (tracked as CVE-2026-7273) stems from a stack-based buffer overflow in the CGI program that lets threat actors without privileges on the local area network (LAN) execute OS commands via maliciously crafted HTTP requests. Zyxel released security updates to address this issue on June 16 and advised customers to upgrade their firmware "for optimal protection." While
Read More
US says Chinese firms extracted billions of tokens from frontier AI models

US says Chinese firms extracted billions of tokens from frontier AI models

U.S. cybersecurity and intelligence agencies say that six Chinese AI companies conducted industrial-scale distillation attacks on American frontier AI models since at least late 2024. A joint advisory from CISA, NSA, and the FBI  states that DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI extracted billions of tokens through millions of requests from frontier AI models from Anthropic, OpenAI, Google, and xAI. The agencies assess that the scale and sophistication of the operations indicate Chinese government awareness, mentioning that this approach is
Read More
Sality botnet infrastructure dismantled in joint global takedown

Sality botnet infrastructure dismantled in joint global takedown

International law enforcement agencies and private partners have seized Sality malware infrastructure in a joint action aiming to disrupt and take down the peer-to-peer (P2P) botnet. As part of this operation, the U.S. Department of Justice (DOJ), FBI, and DCIS seized Sality-linked domains in the United States, while law enforcement partners in Bulgaria, Hungary, and Romania seized additional Sality-linked domains hosted in Europe. CrowdStrike's Counter Adversary Operations team, in collaboration with international law enforcement and private industry partners, also dismantled
Read More
CISA urges immediate action on actively exploited Fortinet flaws

CISA urges immediate action on actively exploited Fortinet flaws

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday ordered government agencies to prioritize patching two actively exploited vulnerabilities in the Fortinet FortiSandbox threat detection platform. These two critical-severity security flaws (tracked as CVE-2026-39808 and CVE-2026-25089) were addressed by Fortinet on April 14 and June 9, respectively. As the company detailed in security advisories issued
Read More

Archives

Categories