access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
North Korean IT Workers Used Stolen US Identities to Earn $3 Million
The FBI raided 40 Texas homes over a North Korean scheme that used fake IT workers to target 70 US companies and generate $3 million. The Justice Department (DoJ) announced coordinated enforcement actions this week targeting North Korea’s long-running scheme to place fake IT workers inside American companies. Two US nationals were arrested, 14 people…
-
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/ also interesting: Cybersecurity Snapshot: CISA Analyzes Malware Used in SharePoint Attacks, as U.K. Boosts Cyber Assessment Framework Cybersecurity Snapshot: CISA Analyzes Malware…
-
Drupal patches critical RCE flaws, warns exploits may emerge soon
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon/ also interesting: Critical Zimbra RCE flaw actively exploited to take over servers Critical Jenkins Vulnerabilities Expose Servers To RCE Attack PoC exploit…
-
Encryption Is Getting Squeezed From All Sides
Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the world. First seen on wired.com Jump to article: www.wired.com/story/kernel-panic-encryption-is-getting-squeezed-from-all-sides/ also interesting: The Quiet Rise of the ‘API Tsunami’ Ransomware attacks: The evolving extortion threat to US financial institutions What to look for in a…
-
The power of AI is worrying senior Labour figures as is the fear of ‘falling behind the public’
Westminster appears to be waking up to warnings over AI safety, with concerns over its use by extremist groups and bad actors”I have this sense that, within a few months, AI is going to be all anyone is talking about,” said one cabinet minister, with an ominous stare.It was Labour conference, with everyone from ministers…
-
Fake Linda and me: the Agatha Christie-worthy mystery of the fraudster who stole my byline
Tags: unclassifiedHow a string of bizarre events led writer Linda Geddes to don her sleuthing cap and dig into a world of shadowy impersonatorsIt started with an entirely ordinary interaction on LinkedIn. Someone had tagged me in a post, saying how much they’d enjoyed contributing to a New York Post article I’d written about “chronoworking”. As…
-
MALFEX npm Package ‘imgdecode’ Hides Shellcode Loader in Windows Native Addon
Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX.The package, named “imgdecode,” was uploaded to the package registry on September 30, 2026, by a user named “malfexteste8.” It has been downloaded 979 times as of writing and is still available on npm as…
-
Ist diese ‘Vibe Coded”-App sicher? 5 Punkte, die Sie vor dem Download prüfen sollten
KI ermöglicht es jedem, Software zu entwickeln. Wir zeigen Ihnen, wie sie die sicheren von den unsicheren Apps unterscheiden können. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/de/mobile-sicherheit/ist-diese-vibe-coded-app-sicher-5-punkte-die-sie-vor-dem-download-prufen-sollten/ also interesting: 17 hottest IT security certs for higher pay today DARPA Announces AI Cyber Challenge Finalists 1-Click RCE Attack In Kerio Control UTM Allow Attackers Gain…
-
U.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog
Tags: cisa, cybersecurity, exploit, firewall, flaw, fortinet, infrastructure, kev, malware, vulnerabilityU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: This week, Palo Alto Netwoks researchers reported that PEERSTITCH malware exploited FortiManager to expose 500+ firewalls,…
-
KI-Risiken im Griff: Warum Governance über Haftung und Versicherbarkeit entscheidet
Wer haftet, wenn KI einen Fehler macht? Bitkom-Leitfaden zeigt, wie Unternehmen KI-Risiken erkennen, steuern und absichern können [1]. Mit der wachsenden Autonomie künstlicher Intelligenz steigen nicht nur Effizienzpotenziale, sondern auch Haftungs-, Sicherheits- und Reputationsrisiken. Ein aktueller Bitkom-Leitfaden zeigt, wie Unternehmen KI-Schäden systematisch bewerten, Kontrollmechanismen etablieren und Versicherungslücken erkennen können. Für Entscheider wird damit klar:… First…
-
KI-Risiken im Griff: Warum Governance über Haftung und Versicherbarkeit entscheidet
Wer haftet, wenn KI einen Fehler macht? Bitkom-Leitfaden zeigt, wie Unternehmen KI-Risiken erkennen, steuern und absichern können [1]. Mit der wachsenden Autonomie künstlicher Intelligenz steigen nicht nur Effizienzpotenziale, sondern auch Haftungs-, Sicherheits- und Reputationsrisiken. Ein aktueller Bitkom-Leitfaden zeigt, wie Unternehmen KI-Schäden systematisch bewerten, Kontrollmechanismen etablieren und Versicherungslücken erkennen können. Für Entscheider wird damit klar:… First…
-
Ministers must be honest about Russian threat to UK, says former Foreign Office head
Peter Ricketts calls for more resilience in protecting banking, energy and water systems from cyber-assaultsMinisters need to be honest with the British public about the immediate threat posed by Russia, which could soon lead to lives being lost, a former national security adviser has said.Peter Ricketts, who advised David Cameron when he was prime minister,…
-
BAE Systems Cyber Incident Takes US Bankruptcy Noticing Center Offline for a Week
A cyber incident at a BAE Systems subsidiary just stopped every bankruptcy court in the US from sending notices, and the problem started a week ago. A security incident at BAE Systems Inc., the US subsidiary of British defense contractor BAE Systems, has taken the Bankruptcy Noticing Center offline since October 9. The Bankruptcy Noticing…
-
Smart Glasses: Ray-Ban Meta zeichnet Gespräche ungefragt auf
Tags: unclassifiedNutzer melden Aufnahmen ohne das Aktivierungswort Hey Meta bei Ray-Ban-Meta-Brillen. Meta bezeichnet den Fehler als behoben, nennt aber keine Ursache. First seen on golem.de Jump to article: www.golem.de/news/smart-glasses-ray-ban-meta-zeichnet-gespraeche-ungefragt-auf-2610-214210.html also interesting: Behörden-PDFs: Vertrauliche Daten trotz Schwärzung rekonstruierbar Boomi als Leader bei adaptiver Prozessorchestrierung ausgezeichnet Nach erster Verhaftung: FBI droht der Hackergruppe Shinyhunters Give yourself room to…
-
Smart Glasses: Ray-Ban Meta zeichnet Gespräche ungefragt auf
Tags: unclassifiedNutzer melden Aufnahmen ohne das Aktivierungswort Hey Meta bei Ray-Ban-Meta-Brillen. Meta bezeichnet den Fehler als behoben, nennt aber keine Ursache. First seen on golem.de Jump to article: www.golem.de/news/smart-glasses-ray-ban-meta-zeichnet-gespraeche-ungefragt-auf-2610-214210.html also interesting: S.P.O.N. – Die Mensch-Maschine: Schneller als die Fakten erlauben… Weltweite Polizeiaktion legt Ransomwarebande Dispossessor das Handwerk Experts Debate Real ID Security Ahead of May 7…
-
Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds for five NIST elliptic curves in under 30 minutes, addressing a cryptographic mystery spanning roughly 25 years. Its October 16 report attributes the seeds to a standard C pseudorandom number generator initialized with Unix timestamps, rather than secret passphrases. Despite…
-
AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns
India’s CERT-In warns AI agents accessed confidential data undetected, while attackers used offensive AI frameworks to accelerate cyberattacks. CERT-In, India’s national cyber response team, published a critical-severity advisory 15 documenting two distinct categories of AI-related incidents. In one, AI models under research and evaluation exceeded their assigned tasks and accessed live Indian systems without authorization.…
-
GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises malicious JavaScript as a font file and targets developer workstations through Visual Studio Code tasks. Jenn Gile identified 94 compromised repositories belonging to 66 owners, confirming the payload in all 79 repositories available for analysis. The remaining 15 were inaccessible.…
-
(g+) Android-Sicherheit: Diese Tools schützen das Smartphone vor Malware
Malware kann auf Android großen Schaden anrichten. Wir zeigen, welche Tools Schadsoftware erkennen und wie man das eigene Smartphone schützt. First seen on golem.de Jump to article: www.golem.de/news/android-sicherheit-diese-tools-schuetzen-das-smartphone-vor-malware-2610-214198.html also interesting: GuardZoo Malware Targets Over 450 Middle Eastern Military Personnel From Espionage to Ransomware: Rafel RAT’s Impact on Android Security Top 16 OffSec, pen-testing, and ethical…
-
SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with spear-phishing attacks that deploy ReverseRAT on Windows systems. The October 15, 2026, advisory classifies the threat as medium severity and highlights malware that can steal passwords, capture screenshots, and collect sensitive information. The campaign combines deceptive attachments, malicious Windows shortcuts,…
-
OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a separate out-of-bounds write to obtain root privileges. Calif researcher Andrew Griffiths published the “Big Fish” research on October 16, 2026, alongside public proof-of-concept code demonstrating exploitation with multiple kernel security protections enabled. The oldest vulnerability traces to a shared memory…
-
Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh. Dubbed WP2Shell, the exploit chain reportedly emerged in July 2026 and combines REST API route confusion with SQL injection, allowing attackers to progress from public endpoints to server compromise without possessing valid WordPress credentials.…
-
New ROMULUS Malware Platform Uses Six Servers to Deliver Multiple Malicious Payloads
ROMULUS, a shared ClickFix delivery platform operating across six identified servers, with confirmed routes distributing a trojanized Stardock package and LegionLoader. The discovery connects infrastructure from a recently documented ChatGPT Custom GPT abuse campaign to an independently investigated incident, exposing a reusable backend capable of delivering different malicious payloads. The investigation began after researchers found…
-
New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs
A new GhostBat RAT variant targets 60 Android financial application packages used in India, combining accessibility-based PIN capture with a transparent overlay that intercepts interactions inside legitimate Google Pay and MobiKwik interfaces. The findings extend Cyble’s October 2025 investigation, which documented GhostBat spreading through fraudulent mParivahan applications, harvesting banking messages, and stealing UPI PINs through…
-
Android Malware Exposes Its Own Operators While Hijacking Phones and Stealing Sensitive Data
An Android remote-access Trojan, YuanKong, whose weakly protected dropper reveals more than its hidden payload: it exposes the operator account identifiers embedded in each build. Analysis of 110 droppers uncovered 57 distinct child payloads, 42 operator accounts and 44 rotating build brands, all tied together by a shared signing certificate and command-and-control (C2) infrastructure. Its…
-
Midnight Blizzard-Linked Malware Server Still Delivering Payloads 8 Weeks After Disclosure
A server linked to a malware campaign attributed to a Midnight Blizzard-associated cluster was still delivering malicious files on October 5, 2026. The server returned HTTP 200 responses for multiple payload paths, including one used by simple Windows Internet Shortcut files to launch a PowerShell stager. The finding shows that public disclosure and low reputation…
-
AI-Assisted Hackers Compromise Government Linux Servers to Deploy Backdoors and Steal Credentials
Hackers used AI-assisted scripts to compromise government Linux servers, harvest administrator credentials, and establish persistent backdoors during a campaign observed between October 2025 and April 2026. The cluster remains unattributed. Under Unit 42’s attribution framework, “UNK” indicates that researchers have not determined whether the activity is state-sponsored or financially motivated. Its intelligence-gathering behavior does not…
-
AI-Assisted Hackers Compromise Government Linux Servers to Deploy Backdoors and Steal Credentials
Hackers used AI-assisted scripts to compromise government Linux servers, harvest administrator credentials, and establish persistent backdoors during a campaign observed between October 2025 and April 2026. The cluster remains unattributed. Under Unit 42’s attribution framework, “UNK” indicates that researchers have not determined whether the activity is state-sponsored or financially motivated. Its intelligence-gathering behavior does not…
-
Not cool: who hacked France’s supermarket fridges?
Whether it was youngsters proving their skills or state sabotage, Europe’s most hacked country was left with a mountain of waste after food began cooking in freezersShortly before midnight last Sunday, the digital thermostats controlling hundreds of supermarket cold aisles across France began to flicker and rise.In a <a href=”https://www.theguardian.com/world/2026/oct/12/cyber-attack-defrosts-refrigerators-france-supermarket-chains-intermarche-cooperative-u”>”bizarre and unprecedented” cyber-attack, hackers had…
-
Federal agencies recommend cyber controls, independent testing for frontier AI systems
While voluntary, the document marks the federal government’s most detailed cybersecurity guidance for securing sandbox environments during AI model tests. First seen on cyberscoop.com Jump to article: cyberscoop.com/federal-ai-agent-sandbox-security-guidance/ also interesting: Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and for Securing AI Systems Cybersecurity leaders’ top seven takeaways from 2025 Salt Typhoon Is…
-
Federal agencies recommend cyber controls, independent testing for frontier AI systems
While voluntary, the document marks the federal government’s most detailed cybersecurity guidance for securing sandbox environments during AI model tests. First seen on cyberscoop.com Jump to article: cyberscoop.com/federal-ai-agent-sandbox-security-guidance/ also interesting: Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and for Securing AI Systems Cybersecurity leaders’ top seven takeaways from 2025 Salt Typhoon Is…
-
Federal agencies recommend cyber controls, independent testing for frontier AI systems
While voluntary, the document marks the federal government’s most detailed cybersecurity guidance for securing sandbox environments during AI model tests. First seen on cyberscoop.com Jump to article: cyberscoop.com/federal-ai-agent-sandbox-security-guidance/ also interesting: Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and for Securing AI Systems Cybersecurity leaders’ top seven takeaways from 2025 Salt Typhoon Is…
-
Federal agencies recommend cyber controls, independent testing for frontier AI systems
While voluntary, the document marks the federal government’s most detailed cybersecurity guidance for securing sandbox environments during AI model tests. First seen on cyberscoop.com Jump to article: cyberscoop.com/federal-ai-agent-sandbox-security-guidance/ also interesting: Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and for Securing AI Systems Cybersecurity leaders’ top seven takeaways from 2025 Salt Typhoon Is…
-
Federal agencies recommend cyber controls, independent testing for frontier AI systems
While voluntary, the document marks the federal government’s most detailed cybersecurity guidance for securing sandbox environments during AI model tests. First seen on cyberscoop.com Jump to article: cyberscoop.com/federal-ai-agent-sandbox-security-guidance/ also interesting: Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and for Securing AI Systems Cybersecurity leaders’ top seven takeaways from 2025 Salt Typhoon Is…
-
Federal agencies recommend cyber controls, independent testing for frontier AI systems
While voluntary, the document marks the federal government’s most detailed cybersecurity guidance for securing sandbox environments during AI model tests. First seen on cyberscoop.com Jump to article: cyberscoop.com/federal-ai-agent-sandbox-security-guidance/ also interesting: Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and for Securing AI Systems Cybersecurity leaders’ top seven takeaways from 2025 Salt Typhoon Is…
-
Prove Claims Former Employees Fueled KYXStart Infringement
Delaware Complaint Targets Two Patents Covering Digital Identity Authentication. Prove has sued digital identity rival KYXStart, alleging that former senior employees helped develop competing identity verification, fraud intelligence and authentication products that infringe two Prove patents, while violating contractual restrictions and undermining its competitive position. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/prove-claims-former-employees-fueled-kyxstart-infringement-a-33135 also interesting:…
-
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/beyondtrust-remote-support-exploited-edge-bugs also interesting: Enterprise-specific zero-day exploits on the rise, Google warns Stealth Is the Strategy: Rethinking Infrastructure Defense Chinese hacking group Salt Typhoon expansion prompts multinational…
-
Anthropic Gives AI Safety Evaluators Insider Access
METR Researchers Gain Employee-Level Access to Assess Unreleased Models and Publish Independent Risk Findings. Anthropic, one of the labs that pushed for embedded evaluators, said in a blog post that it is giving the independent evaluator Metr employee-like access to its models before deployment. This level of access is close to what Metr said are…
-
OpenAI models hacked a crypto wallet and breached more websites
The actions could have resulted in criminal charges had humans been behind the keyboard. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/10/openai-models-hacked-a-crypto-wallet-and-breached-more-websites/ also interesting: 6 ways hackers hide their tracks Cybersecurity Snapshot: Cyber Pros Emerge as Bold AI Adopters, While AI Changes Data Security Game, CSA Reports Say OpenAI Launches EVMbench: A New Framework to…
-
Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/fake-claude-chatgpt-attacks-developers-risk also interesting: Is attacker laziness enabled by genAI shortcuts making them easier to catch? Top cyber threats to your AI systems and infrastructure 13 ways attackers…
-
Critical BlockStrap flaw lets hackers run code on Magento servers
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers/ also interesting: Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts Hackers exploiting critical “SessionReaper” flaw in Adobe Magento…
-
ISMG Editors: French Supermarket Hack Weaponized Food
Also: Anthropic Warns That AI Agents Could Spread Across IoT Devices. In this week’s ISMG Editors’ Panel, four editors discussed the weaponization of food in a cyberattack against French supermarkets, the prospect of self-replicating artificial intelligence agents and why crypto agility matters beyond post-quantum cryptography. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ismg-editors-french-supermarket-hack-weaponized-food-a-33133 also interesting:…
-
Enterprise AI Enters Risk Management Phase as Security Concerns Rise
Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/enterprise-ai-risk-management-phase-security-concerns-rise also interesting: #Infosec2024: Go Back to Basics With Risk Management to Tackle AI Risk 12 most innovative launches at RSA 2025 Beyond the checklist: Building adaptive GRC frameworks for agentic AI 12…
-
Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform
Tags: ceoThe launch follows the acquisition of catalog’s assets and the appointment of Laurent Guengant as CEO earlier this year. First seen on darkreading.com Jump to article: www.darkreading.com/data-privacy/biomemory-launches-dna-shield also interesting: ThreatLocker CEO On ‘Accelerating’ Product Moves, IPO Plans Zero Trust and Automation Crucial for Securing IoT Devices How Dropzone AI Is Bringing A ‘Software-Only’ Approach To…
-
Targeted ads installed Candiru spyware in zero-click attacks
Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim’s device. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/zero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware/ also interesting: Privacy Roundup: Week 11 of Year 2025 Privacy Roundup: Week 12 of Year 2025 Key…
-
Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists
Despite Illinois’ sanctuary laws, local police in and around Chicago helped ICE investigative agents track activists engaged in First Amendmentprotected activities. First seen on wired.com Jump to article: www.wired.com/story/chicago-area-cops-helped-hsi-spy-on-minnesota-anti-ice-activists/ also interesting: German Law Could Protect Researchers Reporting Vulns US military allocated about $30 billion to spend on cybersecurity in 2025 US spy law to expire…
-
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
Amid the surging adoption of AI agents, Proofpoint’s “market-changing” deal to acquire Varonis is aimed squarely at helping partners and customers to protect the data those agents can access, Proofpoint CEO Sumit Dhawan tells CRN. First seen on crn.com Jump to article: www.crn.com/news/security/2026/proofpoint-ceo-sumit-dhawan-on-market-changing-6-3b-varonis-deal-ipo-goal also interesting: How AI red teams find hidden flaws before attackers do…