Attack &amp; News

Cybercriminal VPN Dismantled in Europol Crackdown

First VPN, a service used by ransomware actors and fraudsters, was dismantled by Europol

Security Leaders Should Prepare for World Cup Scams

It’s likely that cybercriminals will increase scam activity leading up to and during this event.

GitHub Breach Traced to Malicious 'Nx Console' VS Code Extension

A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual Studio…

Strategies, Expert Insights from the 2026 Verizon DBIR

The overarching theme of this year’s report is “keeping a strong foundation in the face of change.”

Three-Quarters of Firms Knowingly Ship Vulnerable Code

AI risks threaten to permeate supply chains through unvetted code and unaudited suppliers

NEWShighWired Security3 months ago

Nine-Year-Old Linux Kernel Flaw Leaks SSH Keys and Password Hashes

Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally

A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacte…

Grafana Labs Says Code Breach Stemmed from TanStack Attack

Grafana Labs has confirmed a recent data breach was caused by the TanStack supply chain attack

Android Malware Campaign Used Hundreds of Fake Apps to Silently Charge Users

Premium Deception campaign uses 250 Android apps to silently sign victims up to paid services

Mini Shai-Hulud Hits Hundreds of npm Packages in AntV Ecosystem

Mini Shai-Hulud worm hits Alibaba AntV ecosystem in largest npm supply chain wave to date

GitHub Breached, Internal Repositories Exposed

GitHub experienced a cyber incident.

China-Linked Webworm APT Evolves Tactics, Expands to European Targets

China-linked Webworm APT expands beyond Asia, targeting European government organizations and refining its cyber espionage tactics…

GitHub Confirms Breach of Internal Repositories Via Malicious VS Code Extension

The prolific threat group TeamPCP has claimed a hack into GitHub’s internal repositories

Researchers Warn CypherLoc Scareware Has Targeted Millions of Users

Barracuda reveals new CypherLoc scareware has featured in nearly three million attacks

NEWScriticalSecurity Magazine3 months ago

Verizon DBIR: Vulnerability Exploits Overtake Credentials as Top Access Vector

Verizon DBIR finds 31% of data breaches began with software flaws last year

Should Customers Worry About the 7-Eleven Data Breach?

Is the average 7-Eleven customer at risk from the recent data breach?

Microsoft Takes Down Fox Tempest for Providing Ransomware-Enabling Signing Tool

Microsoft’s Digital Crimes Unit has taken down the infrastructure of Fox Tempest, a prolific cybercrime-enabling threat group

AI Raises the Bar on Vulnerability Awareness and Secure-by-Design Software

AI-powered vulnerability scanning leaves no excuse for unpatched bugs as the EU Cyber Resilience Act pushes firms toward secure-by…

Agentic AI Accelerates Software Builds and Mobile App Attacks

Digital.ai data reveals 87% of apps were attacked over the past year

Grafana Labs Confirms Hackers Stole Source Code

Open source tool maker Grafana says hackers stole codebase via GitHub breach

NEWSKrebs on Security3 months ago

Hackers Bypass Security Tools to Target Users Directly

Bridewell report calls out emergence of “fix-style” attacks

CISA Admin Leaked AWS GovCloud Keys on Github

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub rep…

123,000 Impacted by American Lending Center’s Year-Old Breach

The American Lending Center notified consumers of a data breach nearly a year after it occured.

Interpol Launches Sweeping Cybercrime Crackdown in MENA Region

Over 200 people were arrested in an anti-cybercrime operation that spanned 13 countries across the Middle East and North Africa

The Infosecurity Europe Cyber Startup Competition: Meet the Finalists

New for 2026, the Infosecurity Europe Startup competition will see five finalists pitch their ideas in front of a live audience, i…

NEWScriticalInfosecurity Magazine3 months ago

NCSC Publishes Guidance on Securing Agentic AI Use

The UK’s National Cyber Security Centre is helping organizations to understand agentic AI security risks

Security Researchers Find 47 Zero-Days at Pwn2Own Berlin

The research community was awarded $1.3m as it found dozens of novel vulnerabilities at Pwn2Own Berlin

Bank of England, FCA and Treasury Raise Alarm Over Frontier AI

The UK’s financial authorities have set expectations for the sector on cybersecurity and operational resilience