Attack &amp; News

GitHub Confirms Breach of Internal Repositories Via Malicious VS Code Extension

The prolific threat group TeamPCP has claimed a hack into GitHub’s internal repositories

Researchers Warn CypherLoc Scareware Has Targeted Millions of Users

Barracuda reveals new CypherLoc scareware has featured in nearly three million attacks

NEWScriticalSecurity Magazine2 months ago

Verizon DBIR: Vulnerability Exploits Overtake Credentials as Top Access Vector

Verizon DBIR finds 31% of data breaches began with software flaws last year

Should Customers Worry About the 7-Eleven Data Breach?

Is the average 7-Eleven customer at risk from the recent data breach?

Microsoft Takes Down Fox Tempest for Providing Ransomware-Enabling Signing Tool

Microsoft’s Digital Crimes Unit has taken down the infrastructure of Fox Tempest, a prolific cybercrime-enabling threat group

AI Raises the Bar on Vulnerability Awareness and Secure-by-Design Software

AI-powered vulnerability scanning leaves no excuse for unpatched bugs as the EU Cyber Resilience Act pushes firms toward secure-by…

Agentic AI Accelerates Software Builds and Mobile App Attacks

Digital.ai data reveals 87% of apps were attacked over the past year

Grafana Labs Confirms Hackers Stole Source Code

Open source tool maker Grafana says hackers stole codebase via GitHub breach

NEWSKrebs on Security2 months ago

Hackers Bypass Security Tools to Target Users Directly

Bridewell report calls out emergence of “fix-style” attacks

CISA Admin Leaked AWS GovCloud Keys on Github

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub rep…

NEWSSecurity Magazine2 months ago

123,000 Impacted by American Lending Center’s Year-Old Breach

The American Lending Center notified consumers of a data breach nearly a year after it occured.

Interpol Launches Sweeping Cybercrime Crackdown in MENA Region

Over 200 people were arrested in an anti-cybercrime operation that spanned 13 countries across the Middle East and North Africa

The Infosecurity Europe Cyber Startup Competition: Meet the Finalists

New for 2026, the Infosecurity Europe Startup competition will see five finalists pitch their ideas in front of a live audience, i…

NCSC Publishes Guidance on Securing Agentic AI Use

The UK’s National Cyber Security Centre is helping organizations to understand agentic AI security risks

Security Researchers Find 47 Zero-Days at Pwn2Own Berlin

The research community was awarded $1.3m as it found dozens of novel vulnerabilities at Pwn2Own Berlin

Bank of England, FCA and Treasury Raise Alarm Over Frontier AI

The UK’s financial authorities have set expectations for the sector on cybersecurity and operational resilience

Gremlin Stealer Evolves into Modular Threat with Advanced Evasion Capabilities

A new Gremlin stealer variant has evolved into a modular toolkit with advanced evasion and data theft capabilities, according to n…

Microsoft Reports Severe Zero-Day Flaw in On-Prem Exchange Servers

The zero-day vulnerability affects on-premises installations for all versions of Exchange Server 2016, 2019 and Subscription Editi…

China-Linked Hackers Deploy New TencShell Malware Against Global Manufacturer

A suspected China-linked threat actor targeted the Indian branch of a global manufacturer leveraging an open source offensive tool…

Mustang Panda Linked to Updated FDMTP Backdoor in Asia-Pacific Espionage Campaign

Mustang Panda campaign deploys updated FDMTP backdoor against Asia-Pacific and Japan networks

Google Launches Android Spyware Forensics Tool for High-Risk Users

Google’s Android Advanced Protection Mode is getting a new feature allowing trusted security experts to investigate potential spyw…

New Fragnesia Flaw Hands Linux Local Users Root Access

New Fragnesia kernel flaw lets unprivileged local users escalate to root on Linux systems

Most Organizations Now Use AI Agents for Sensitive Security Tasks

Semperis study finds 74% of organizations believe AI will increase attacks on identity infrastructure

ICO Publishes Five-Step Plan to Counter Emerging AI-Powered Attacks

The Information Commissioner’s Office has released new guidance on how to mitigate the risk of AI-powered attacks

Canvas Owner Reaches Agreement With Cybercriminals After Ransomware Attack

Instructure says it reached an agreement with ShinyHunters over the Canvas breach data

Avada Builder Flaws Expose One Million WordPress Sites

Avada Builder flaws allowed file read and SQL injection on one million WordPress sites

Ransomware: Over Half of CISOs Would Consider Paying Ransom to Hackers

Survey of cybersecurity leaders suggests that majority would strongly consider paying cybercriminals, if that’s what it took to he…

Global Cyber Agencies Issue New SBOMs for AI Guidance to Tackle AI Supply Chain Risks

The G7 Cybersecurity Working Group releases new SBOM for AI guidance, outlining seven key data clusters to boost transparency and…

UK Cybersecurity Market Expands to £14.7bn with Strong Growth in AI Security Firms

UK cybersecurity sector reaches £14.7bn in revenue, driven by rapid growth in AI security firms, increased investment and rising e…