Attack &amp; News

US: FCC Relaxes Foreign-Made Router Ban to Allow for Security Updates

The same extension applies to security updates shipped to US-based users of foreign-made drones

ShinyHunters Escalates Canvas Extortion with School by School Ransom Campaign

ShinyHunters has escalated its Canvas extortion campaign, defacing hundreds of school login pages and threatening to leak stolen d…

Zara Data Breach Impacts Nearly 200,000 Customers

ShinyHunters gets away with emails and other data on 200,000 Zara customers

Police Shut Relaunched Crimenetwork Dark Web Marketplace

Spanish police have arrested the suspected administrator of German dark web marketplace Crimenetwork

Australian Cyber Security Centre Issues Alert Over ClickFix Attacks

ACSC warns over a campaign targeting organizations which uses ClickFix to deliver Vidar infostealer malware

NEWSKrebs on Security2 months ago

PCPJack Campaign Boots TeamPCP Off Compromised Machines

SentinelOne believes the PCPJack campaign may be the brainchild of a former TeamPCP member

Canvas Breach Disrupts Schools & Colleges Nationwide

An ongoing data extortion attack targeting the widely-used education technology platform Canvas disrupted classes and coursework a…

Legacy Security Tools Failing Data Protection, Capital One Software Report Finds

Traditional network security tools are undermining data protection, with Forrester and Capital One Software research warning AI ad…

Cline Kanban Flaw Lets Websites Hijack AI Coding Agents

Oasis Security finds critical Cline kanban WebSocket flaw exposing AI coding agents to hijack

OpenAI and Anthropic LLMs Used in Critical Infrastructure Cyber-Attack, Warns Dragos

Commercial AI models were used to help plan and conduct cyber-attack against operational technology of a water and drainage facili…

Fake Claude AI Site Drops Beagle Backdoor on Windows Users

Sophos finds fake Claude site spreading DonutLoader and a new Beagle backdoor via DLL sideloading

Daemon Tools Developer Confirms Software Was Trojanized

A China-linked threat actor backdoored a version of Daemon Tools to infect thousands

Researchers Spot Uptick in Use of Vercel for Phishing Campaigns

Cofense has warned of a “significant” increase in phishing campaigns abusing Vercel platform

CloudZ Malware Abuses Phone Link to Steal SMS OTPs

Cisco Talos uncovers CloudZ RAT and Pheno plugin abusing Microsoft Phone Link to intercept SMS OTPs

CISA Urges Critical Infrastructure Providers to Make Plans to Remain Operational if hit by Cyber-Attack

CISA’s CI Fortify initiative aim for critical infrastructure operators to build isolation & recovery

Iran-Linked APT Posed as Chaos Ransomware Member in Espionage Campaign

Rapid7 reveals an Iranian false flag operation masquerading as a Chaos ransomware attack

One in Eight Workers Has Sold Their Corporate Logins

Cifas says that 13% of employees admit selling company credentials to a former colleague

Microsoft Flags Mass Phishing Campaign Using Fake Compliance Emails

Microsoft researchers warn of a large-scale phishing campaign using fake compliance emails to steal credentials, targeting 35,000…

North Korean APT Targets Yanbian Gamers via Trojanized Platform

ESET warns that North Korean hackers compromised a Yanbian gaming site in a supply‑chain attack, trojanizing Windows and Android s…

Fake SSA Emails Drive Venomous#Helper Phishing Campaign

Venomous#Helper attackers impersonate the US Social Security Administration to deploy signed RMM software and maintain persistent…

AI Adoption Outpaces Safety Policies, Leaving Organizations Exposed to Cyber Risk

ISACA report warns that while AI has become the norm, many organizations are yet to formally apply safety or security policies aro…

NCSC Warns of an AI-Fuelled “Vulnerability Patch Wave”

The UK's National Cyber Security Centre is urging organizations to prepare for glut of new software updates

Trellix Reveals Unauthorized Access to Source Code

Security vendor Trellix has suffered a breach involving unauthorized access

Small Defense Firms Lack Network Data to Stop Nation-State Hackers, Analyst Says

Team Cymru’s Stephen Campbell warned that small US defense contractors are not well prepared to face cyber intrusions through edge…

OpenAI To Extend Cyber Program to Government Agencies

OpenAI announced its intention to expand the Trusted Access for Cyber program for cyber defenders at the federal, state and local…

Anthropic Rolls Out Claude Security for AI Vulnerability Scanning

Claude Security enters public beta, giving enterprises AI driven code scanning with no API integration or custom agents required

Two American Cybersecurity Workers Jailed for BlackCat Ransomware Attacks

The cybersecurity workers used their knowledge and skills to conduct ransomware attacks for notorious gang, rather than protect vi…

Nine-Year-Old Zero-Day Flaw in Linux Kernel Discovered by AI-Equipped Security Researcher

A researcher from offensive security firm Theori has found a nine-year-old flaw in the Linux kernel with the help of AI

Three Arrested for Hacking Over 610,000 Roblox Accounts

Suspects accused of distributing malware and selling access to stolen Roblox accounts on Russian marketplaces