Attack &amp; News

Fake SSA Emails Drive Venomous#Helper Phishing Campaign

Venomous#Helper attackers impersonate the US Social Security Administration to deploy signed RMM software and maintain persistent…

AI Adoption Outpaces Safety Policies, Leaving Organizations Exposed to Cyber Risk

ISACA report warns that while AI has become the norm, many organizations are yet to formally apply safety or security policies aro…

NCSC Warns of an AI-Fuelled “Vulnerability Patch Wave”

The UK's National Cyber Security Centre is urging organizations to prepare for glut of new software updates

Trellix Reveals Unauthorized Access to Source Code

Security vendor Trellix has suffered a breach involving unauthorized access

Small Defense Firms Lack Network Data to Stop Nation-State Hackers, Analyst Says

Team Cymru’s Stephen Campbell warned that small US defense contractors are not well prepared to face cyber intrusions through edge…

OpenAI To Extend Cyber Program to Government Agencies

OpenAI announced its intention to expand the Trusted Access for Cyber program for cyber defenders at the federal, state and local…

Anthropic Rolls Out Claude Security for AI Vulnerability Scanning

Claude Security enters public beta, giving enterprises AI driven code scanning with no API integration or custom agents required

Two American Cybersecurity Workers Jailed for BlackCat Ransomware Attacks

The cybersecurity workers used their knowledge and skills to conduct ransomware attacks for notorious gang, rather than protect vi…

Nine-Year-Old Zero-Day Flaw in Linux Kernel Discovered by AI-Equipped Security Researcher

A researcher from offensive security firm Theori has found a nine-year-old flaw in the Linux kernel with the help of AI

Three Arrested for Hacking Over 610,000 Roblox Accounts

Suspects accused of distributing malware and selling access to stolen Roblox accounts on Russian marketplaces

NEWSKrebs on Security3 months ago

Deep#Door Python Backdoor Evades Detection On Windows

Deep#Door Python RAT uses tunneling and obfuscation to evade detection and steal credentials

Anti-DDoS Firm Heaped Attacks on Brazilian ISPs

A Brazilian tech firm that specializes in protecting networks from distributed denial-of-service (DDoS) attacks has been enabling…

CISA and Partners Publish Zero Trust Guidance For OT Security

A new CISA‑led guide explains how zero‑trust security can be applied to operational technology, balancing cyber defence with safet…

UK: Education Sector Faces Surge in Cyber Breaches Despite Stable National Threat Levels

The British public education sector has faced the nation’s most dramatic increase in cyber breach prevalence over the past year

Europol Busts Albanian Scam Call Centers in Major Online Fraud Case

European police arrested 10 suspects after dismantling Albanian scam call centers linked to a €50m ($58m) online investment fraud…

Cyber is the Number One Global “People Risk,” Says Marsh

Marsh’s 2026 People Risks survey finds cyber‑related challenges dominate, as cyber‑threat literacy tops risks and cyber and AI ski…

Cursor Extension Flaw Exposes Developer API Keys

Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX

Malicious npm Dependency Linked to AI Assisted Commit Targets Crypto Wallets

Researchers uncover a malicious npm dependency linked to an AI‑assisted code commit that steals sensitive data and exposes crypto…

Researchers Track 2.9 Billion Compromised Credentials

KELA claims infostealers remained the primary access vector for attacks in 2025

Critical Flaw Turns Vect Ransomware into Data Destroying Wiper

The Vect 2.0 ransomware wipes large files instead of merely encrypting them, making recovery impossible – even for the attackers

A Quarter of Healthcare Organizations Report Medical Device Cyber-Attacks

RunSafe report reveals most attacks on medical devices disrupt patient care

Medtronic Confirms Data Breach After ShinyHunters Claims

Medtronic confirms IT breach as ShinyHunters claims millions of records accesseda

Ransomware Turf War as 0APT and KryBit Groups Trade Blows

Ransomware groups 0APT and KryBit have doxxed each other online

Chinese National Extradited Over Silk Typhoon Cyber Campaign

Extradition links alleged MSS-directed hacker to Silk Typhoon and COVID-19 espionage

No Metrics Are Better Than Bad Metrics in the SOC, Says NCSC

The National Cyber Security Centre has warned against measuring SOCs with ticket-based metrics

North Korean Hackers Target Crypto Firms with ClickFix and AI-Made Zoom Lures

Arctic Wolf attributed this large-scale spear-phishing campaign to BlueNoroff, a financially motivated subgroup of the Lazarus Gro…

US Sanctions Target Cambodian Scam Network Leaders

US sanctions target Cambodian scam networks tied to crypto fraud and trafficking

Utilities Tech Supplier Itron Discloses Cyber-Attack, Operations Unaffected

Itron confirmed a cyber incident but does not believe it is likely to have a material impact on the company

Widely Used Browser Extensions Selling User Data

Dozens of browser extensions openly sell user data via privacy policy disclosures