Attack & News

All Major LLMs Exposed to Multi-Turn Manipulation, Warn Researchers

Thousands of Fake FIFA Domains Target World Cup Fans

Group-IB uncovered Ghost Stadium phishing and 4300 fake FIFA World Cup domains targeting fans

68% of UK Firms Plan to Increase Cyber Spending as AI Risks Rise

UK firms plan higher cyber spending as AI adoption raises security concerns

PureLogs Variant Steals Data via Purchase Order Lures

FortiGuard Labs detailed a PureLogs campaign using JavaScript, PowerShell and process hollowing

Internet Starts to Return in Iran After 3-Month Blackout

Some internet connectivity is returning in Iran after nearly 90 days offline, web monitoring groups say. But it isn’t clear if the…

Breaking Down Trump’s $2B Quantum Investment: Expert Insights

An expert breaks down the Trump Administration’s plan to invest $2 billion into quantum computing innovation and leadership.

Texas Tech University Constructing Critical Infrastructure Security Site

The university has started construction to expand its institute devoted to examining U.S. critical infrastructure vulnerabilities.

Chinese Threat Actors Ditch Static Phishing Pages for Live Credential Interception

Almost all organizations impersonated by Chinese phishing platforms are non-Chinese entities, suggesting operators deliberately av…

600,000 Lithuanian National Register Entries Leaked

Lithuanian officials believe this was the result of foreign activity.

BTMOB Android RAT Spreads Through No-Code Builder Tooling

BTMOB Android RAT sold as a service with a no-code builder for fast, regional phishing lures

India's CERT-In Sets 12-Hour Patch Deadline for Exposed Flaws

CERT-In urges 12-hour patching of exposed flaws as AI compresses exploitation timelines

US Law Enforcement Warns of ‘Anti-Tech Extremism’ as AI Hatred Grows

As Americans stew over the looming risk of job-stealing AI and data centers in their back yards, the feds are raising the alarm ab…

Iran-Linked Hackers Target US Aviation with Phishing and SEO Poisoning Campaign

Iran's Nimbus Manticore pushes AI-built MiniFast backdoor via phishing and SEO poisoning

Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructu…

The AI Era Is Creating a Bug-Hunting Arms Race

As attackers ramp up their AI exploit development, the search for software vulnerabilities is changing rapidly.

FBI Warns 'Kali365' Phishing Kit Hijacks Microsoft 365 OAuth Tokens

The Kali365 phishing-as-a-service platform lowers the barrier of entry for cybercriminals, said the FBI

Fake Streams, Counterfeit Merch and Other Scams: How Fraudsters Target F1 Fans

From fake F1 streams to counterfeit merch, fraudsters are exploiting fans online and the Bitdefender Cybersecurity Grand Prix Fan…

The FBI Wants ‘Near Real-Time’ Access to US License Plate Readers

Plus: Google publishes a live exploit for an unpatched flaw, the feds arrest two men accused of creating thousands of nonconsensua…

Lawmakers Demand Answers as CISA Tries to Contain Data Leak

Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) aft…

Why CISA Accepting KEV Nominations Is So Important

CISA announced that it will be accepting nominations to its Known Exploited Vulnerabilities (KEV) catalog.

Fake Gemini and Claude Code Sites Spread Infostealers Through SEO Poisoning

The infostealer payload in this campaign collect a vast amount of data, from collaboration authentication keys to cryptocurrency w…

Apple Blocked $2.2bn in App Store Fraud in the Last Year

Total figure for fraudulent transactions Apple has blocked since 2020 now stands at over $11bn

Alleged Kimwolf Botmaster ‘Dort’ Arrested, Charged in U.S. and Canada

Canadian authorities on Wednesday arrested a 23-year-old Ottawa man on suspicion of building and operating Kimwolf, a fast spreadi…

‘Creepy’ Listening Tool for Targeted Ads Didn’t Actually Work, FTC Says

Three firms will pay nearly $1 million for selling “Active Listening” technology that they claimed tapped people’s phones for adve…

Cybercriminal VPN Dismantled in Europol Crackdown

First VPN, a service used by ransomware actors and fraudsters, was dismantled by Europol

Security Leaders Should Prepare for World Cup Scams

It’s likely that cybercriminals will increase scam activity leading up to and during this event.

GitHub Breach Traced to Malicious 'Nx Console' VS Code Extension

A threat actor compromised an Nx developer and posed as a legitimate maintainer to publish a malicious extension on Visual Studio…

Three-Quarters of Firms Knowingly Ship Vulnerable Code

AI risks threaten to permeate supply chains through unvetted code and unaudited suppliers

Strategies, Expert Insights from the 2026 Verizon DBIR

The overarching theme of this year’s report is “keeping a strong foundation in the face of change.”

Nine-Year-Old Linux Kernel Flaw Leaks SSH Keys and Password Hashes

Qualys finds nine-year-old Linux ptrace flaw exposing SSH keys and password hashes locally