Attack & News

ChatGPT blindly trusts browser content, turning the page into a payload

You and me go ChatGPhish-ing in the dark

Russia-linked threat group put ChatGPT to work from lure to payload

Researchers say 'GREYVIBE' crew used AI tools throughout a campaign targeting Ukrainian military and government

ShinyHunters adds Charter to trophy shelf after 4.9M customer records leak

Telco giant says no sensitive data was taken, though names, addresses, phones, and emails are now out there

Infosecurity Europe: CyCOS Project Expands to Support UK SMEs as CIISec Takes Over

From a research-driven pilot, the Cybersecurity Communities of Support (CyCOS) is about to be handed over to CIISec

Chinese Hackers Exploit Iran War to Target Maritime and Energy Companies

ESET’s 2026 APT Activity Report suggests China-backed APTs are using instability in the region to target victims, as well as conti…

AI-Generated npm Malware Leaks Its Own GitHub Token

Sloppy AI-generated npm infostealer leaked its own GitHub token, exposing the operator

Troops’ phones gave away location data to foreign adversaries

Lawmakers push DoD to tighten smartphone controls after adversaries exploited commercial tracking data

Disgruntled 0-day hunter 'humiliated' by Microsoft pledges 'bone shattering drop' as Redmond calls cops

Six 0-days, three under active exploitation, more to come on July 14?

Snowflake buys Natoma to help freeze out rogue agents

It is the database titan’s sixth acquisition announcement since June 2025

As Summer Closes In, the Travel Sector Is Unprepared

In the last 12 months, 92% of agencies experienced some form of cyber threat. Yet, only 20% plan to establish an incident response…

The Pentagon Knew Enemies Could Track Troops’ Phones for Years. Now They Are

The US military has long known that cheap fixes could stop location data from exposing its troops. It adopted almost none—and now…

Microsoft tests the 15-character limit of Windows Server admins' patience

May security update trips over hostnames of a very specific length

Attackers Move Past Typosquatting to Realistic Package Impersonation

Most malicious open source packages now mimic real code rather than rely on typosquatting

AI Agent Conducted a Cyberattack on Its Own — It Took Less Than One Hour

Security magazine speaks to a researcher about an observed cyberattack driven entirely by AI.

6M Impacted by Carnival Cruise Data Breach

The incident was caused by a social engineering attack targeting an employee device.

Microsoft Condemns "Uncoordinated" Zero Day Disclosures

Microsoft warned the disclosure of several unpatched vulnerabilities without notice has put “customers at unnecessary risk”

New Threat Actor Jinx-0164 Targets Crypto Developers on macOS

New actor Jinx-0164 hit crypto developers with fake recruiter lures and macOS malware

Infosecurity Europe: Cybersecurity Staff Prefer CISOs With Real Attack Response Experience, Study Reveals

ISC2 survey of cybersecurity professionals suggests that staff want their information security leaders to have experienced reactin…

Scammers Are Using Your Real Hotel Reservations to Trick You With Spear-Phishing Attacks

Customer data from more than 350 hotels around the world may have been accessed as part of realistic reservation-hijacking scams.

GCHQ Chief Urges Action as AI Reshapes Cyber Threats

GCHQ director urges urgent business cyber action as AI and quantum reshape the threat

FBI Warning: IT Personnel Impersonated by Cybercriminals

Cybercriminals are targeting law firms with social engineering tactics.

Windows Users Targeted in New Phishing Campaign

Windows users are the primary target of a new phishing threat.

CrowdStrike, Google Take Down Glassworm Botnet

Operators of the malicious Glassworm botnet have been targeting software developers since at least early 2025

Infosecurity Europe: Why Burnout in Cybersecurity Demands Risk-Based Response

Cybermindz warns that cybersecurity burnout is a growing risk, urging organizations to move beyond wellness initiatives and adopt…

All Major LLMs Exposed to Multi-Turn Manipulation, Warn Researchers

Thousands of Fake FIFA Domains Target World Cup Fans

Group-IB uncovered Ghost Stadium phishing and 4300 fake FIFA World Cup domains targeting fans

68% of UK Firms Plan to Increase Cyber Spending as AI Risks Rise

UK firms plan higher cyber spending as AI adoption raises security concerns

PureLogs Variant Steals Data via Purchase Order Lures

FortiGuard Labs detailed a PureLogs campaign using JavaScript, PowerShell and process hollowing

Internet Starts to Return in Iran After 3-Month Blackout

Some internet connectivity is returning in Iran after nearly 90 days offline, web monitoring groups say. But it isn’t clear if the…

Breaking Down Trump’s $2B Quantum Investment: Expert Insights

An expert breaks down the Trump Administration’s plan to invest $2 billion into quantum computing innovation and leadership.