Tekin Live Radar

Cybersecurity researchers have uncovered a malicious campaign leveraging a previously undocumented malware loader, dubbed OXLOADER, to distribute the CastleStealer info-stealing malware. The threat actors, believed to be Russian-speaking, are using poisoned and fake advertisements within Google Ads to target and infect users directly from search results.

At the recent Gartner Security Summit, experts warned of a fatal blind spot: attackers are actively circumventing modern defense systems by exploiting legacy infrastructure to hijack AI agents. With 71% of organizations currently piloting these intelligent agents, the rapid adoption of AI is drastically outpacing the evolution and adaptation of security firewalls.

In a historic and unprecedented move, the Canadian Security Intelligence Service (CSIS) obtained a judicial warrant to directly access infected servers, home routers, and IoT devices located on Canadian soil. Utilizing its threat reduction powers, the agency executed a state-sponsored cyber ambush to completely neutralize two destructive botnets operated by foreign entities.

A highly dangerous and ancient security vulnerability, dubbed "Squidbleed," has been discovered in the widely used Squid web proxy, with its roots tracing back to a disastrous update in 1997. This critical heap over-read bug allows attackers to easily extract other users' HTTP requests in cleartext, exposing highly sensitive session tokens and passwords.

While rumors regarding the pricing of Grand Theft Auto VI had completely blown up the internet in recent days, reliable insiders have confirmed these astronomical figures are bogus. A European retail listing (FNAC) that priced the standard edition at $103 and the Collector's Edition at $230 was merely using random placeholder numbers, meaning none of these hyped prices are official.

Ethereum layer-2 scaling solution Taiko was forced to halt withdrawals after a critical exploit compromised its bridge's validation mechanism. In this cyber ambush, an attacker forged withdrawal proofs to successfully bypass network firewalls, draining approximately $1.7 million from the protocol's ERC-20 vault.

Following the recent breach of the market intelligence platform Klue, it has now been officially confirmed that data from several major cybersecurity firms was also stolen[cite: 8, 9]. Industry giants such as Huntress, HackerOne, Jamf, Recorded Future, and Tanium are among the victims whose data was compromised due to this cloud infiltration.

On-chain data reveals that a newly created wallet deposited 6.68 million USDC into the Hyperliquid platform to open 20x leveraged short positions against Bitcoin, Solana, and Ethereum. The total value of this massive and risky bet against the crypto market amounts to a staggering $48 million.

In a major move to starve pirate and counterfeit websites of their revenue, a new system called WIPO Alert Pay has been launched. This initiative allows rightsholders to flag infringing sites directly to major payment providers such as PayPal and Mastercard, enabling them to cut off financial services based on their own rules. During the initial pilot phase, an impressive 71% of flagged sites were successfully removed from the payment networks.

G7 leaders have officially elevated North Korea's widespread cryptocurrency thefts to the level of a global security concern. The joint statement explicitly linked digital asset crimes to broader international security threats and instability in the Indo-Pacific region. This cyber warning was uniquely highlighted alongside severe warnings regarding the nation's nuclear and missile development programs.