Security
Breaches, exploits, ransomware and the people who clean up after them.
SecurityFake VPN download site steals administrator credentials to give attackers direct access to corporate networks — but delivers official signed software so victims never suspect a thing
A fake WatchGuard VPN download website stole administrator credentials before delivering the genuine signed installer, potentially exposing corporate…
Massive data leak from AI development company exposes almost 14 million records — Vibetech collected data from different breaches and accidentally made them accessible online
The company has been harvesting data from different leaks, likely for research purposes.
AI Is Getting Really Good at Messing With Cybercriminals
Anti-cybercrime initiatives are increasingly using AI to scam the scammers by tricking them into talking to lifelike bots that…
Anthropic now offers a free vulnerability-finding service for open-source software
Anthropic is offering open-source projects a new way to check for vulnerabilities with its OSS Scanner.
Asos hit by extortion hack that may have compromised some customer data
The attackers sent a push notification to Asos shoppers announcing their activity.
SecurityThese social media posts promise big online discounts on Lego, Calvin Klein and more — but really they're just phishing scams
There's an elaborate scheme making rounds on Facebook and TikTok to get people to websites laden with infostealers.
AI self-policing proven failure: Former FTC chair
Digital Desk | Washington, Oct 5 (IANS) Former Federal Trade Commission Chair Lina Khan has warned against allowing artificial…
Lee calls for thorough probe into personal data leaks at financial institutions
Digital Desk | Seoul, Oct 4 (IANS) President Lee Jae Myung on Sunday called for a thorough investigation into a series of hacking…
‘Incompetence’: Massive FBI hack hit most employees and extends to local officials
The hack of FBI computer systems exposed sensitive personal information about nearly every FBI employee, as well as thousands of…
Cyber Fraud Costs American Small Businesses More Than $1 Billion Annually
There are multiple ways AI-enhanced cyber attacks are costing business owners money.
SecurityFacata teen jailed 12 years
With October recognised as Cybersecurity Awareness Month, the Manzini Magistrate’s Court has handed a deterrent sentence to a teenager convicted of…
Fake job adverts for Disney, Coca-Cola, Nike 'steal your digital life
Fake Disney and Coca-Cola job interview invitations are being used to steal passwords and workplace logins in a phishing campaign…
SecurityCops have breached one of iOS’s most secure features, report claims
Police agencies have a new tool to get around a vital iOS security feature, a new report claims.
This new ChatGPT scam tricks you into installing malware – how to spot the trap
This authentic-looking scam starts with a sponsored Google link – and it’s catching people off-guard.
SecurityThis popular AI agent could be hacked by a single email — with potentially disastrous consequences
Researchers found a way around Manus' guardrails and got it to execute a simple email prompt injection attack.
AI agents aggressively tried to hack US and Canadian government websites
AI agents repeatedly hit government sites, escalating to SQL injection after access failuresUS and Canadian authorities confirmed…
SecurityPolice take down dangerous KillSec ransomware gang — and find out it's being run by a teenager
Some people have been arrested, with servers, domains, and proceeds, confiscated, too.
AI agent attempted to hack Library and Archives Canada, says U.S. research group
The website for Library and Archives Canada was one of the targets of a failed hacking attempt by an artificial intelligence…
SecurityHackers stole millions of US military personnel records during months-long data breach
The Department of Defense notified millions of current and former U.S. military personnel that their personal information had been stolen in a…
Hackers build fake desktop apps to trick victims into handing over access
Finance and HR departments are being offered tools that don't exist, tricking them into handing over valuable access.
SecurityI Think I Found an AI Agent Worth the Risk
Instinct saved me $550, booked my restaurant reservations, and warned me about a phishing scam. It also wasted $64 and might be a security nightmare.
How AI could make it harder for governments to use hacking tools
AI is proving effective at finding and exploiting vulnerabilities. Some say this will make it harder for governments to use…
SecurityUS government alcohol and firearms agency ATF declares ‘major incident’ after ransomware gang claims cyberattack
Hackers break into a standalone system with information on targets of ATF investigations.
AI Agents Are Hacking Systems. Could That Push the US and China to Cooperate?
This week on “Uncanny Valley,” senior writer Will Knight talks his recent visit to China and the future of AI collaboration.
SecurityOpenAI’s rogue AI model incident was worse than we thought
In July, an unreleased OpenAI model broke out of a restricted environment, figured out how to get access to the internet, allowed AI agents to talk…
Canadian SickKids hospital hit again by cyberattacks, more data stolen
Patient care has continued as usual following cyberattack.
SecurityTrump Claims Minnesota Is Behind Cyberattack on Its Own Water Systems, Not Iran
"Iran's got bigger problems than worrying about Minnesota," said Trump.
Banning Open-Source AI Models to Protect Our Cybersecurity May Do the Opposite
A ban on open Chinese AI models under the guise of security might actually put our cybersecurity more at risk.
SecurityOpenAI’s Rogue AI Agent Hacked More Than Just Hugging Face
In a new disclosure, OpenAI says its agent used exposed logins to gain access to at least four “publicly available services” in its unhinged quest to…
This Russian cybercrime campaign can infect a user just by viewing an email
A high-severity flaw in Zimbra allowed Russian criminals easy access, where they stole important secrets.
SecurityAI arms race in line for a reckoning after OpenAI hacking incident
Aggressive training techniques sharpens threat of bad behavior by leading models.
Anthropic Wants You to Know Its New AI Model Is Definitely Not Too Dangerous to Release
Claude Sonnet 5 delivers impressive agentic capabilities at a relatively low cost. It’s also really bad at cybersecurity—probably…
SecurityNAIC confirms data breach with ShinyHunters claiming 3.1TB of data stolen in Oracle zero-day attack
Insurer regulatory filing documents, customer bulk orders, and more, stolen in a major zero-day supply chain attack
This macOS malware can avoid AI analysis with gaslighting prompts hidden inside its architecture
A new piece of malware tries to trick AI-assisted analysis into showing errors.
SecurityMultiple malicious OpenClaw skills found online - including two macOS infostealers
Criminals found yet another marketplace to infect and use as a launchpad for malware delivery.
LastPass hit by new data breach - 4 steps you should take now
A third-party supplier breach has exposed LastPass customer names, phone numbers, and other data. Here's how to protect yourself.
SecurityUS healthcare AI platform Xsolis confirms data breach that affects 1.4 million individuals
Social Security numbers and health insurance information nabbed as Xsolis tells its customers to be careful.
'You can no longer do things at human scale': Cisco releases AI agent botnet that works on behalf of your business
Cyberspace has become an AI battlefield, and Cisco wants in on the action.
SecurityTrump signs scaled-back AI cybersecurity order
AI models can voluntarily submitted to the government for review 30 days before release under Trump's new executive order.
Why I built my own DIY cyberdeck straight out of 80s sci-fi - and how you can too
The latest DIY craze is a portable computer inspired by a 1984 sci-fi novel. I built one with a Raspberry Pi. Here's why and how.
SecurityGCHQ debuts world-first AI cyber defense system to detect threats across critical national infrastructure, airlines, telecoms, and major companies
The UK wants to use AI to defend against Russia and China's "relentless attacks" on critical infrastructure.
After dissing Anthropic for limiting Mythos, OpenAI restricts access to Cyber, too
OpenAI will begin rolling out it cybersecurity testing tool, GPT-5.5 Cyber only "to critical cyber defenders" at first.
Security'VECT is being marketed as ransomware...but it functions as a data destruction tool': Experts warn this "broken" ransomware is now acting as a data wiper, so protect your files now
New ransomware variant destroys everything bigger than 128kb, making retrieval without a backup impossible.
Utility giant Itron confirms cyberattack, says internal systems were accessed
Data was most likely not tampered with, although Itron's investigation is still ongoing.
SecurityChina-nexus cyber actors' are turning routers and IoT infrastructure into covert botnets 'at scale' – NCSC, Five Eyes, and others warn of campaign involving Typhoon-designated groups
The botnets are used to hide locations and launch Distributed Denial of Service attacks.
'We will reveal their identity photos, names, location, and other': Experts reveal extraordinary battle between rival ransomware gangs — and how victims can get their data back
A ransomware group is threatening to expose a rival’s members while offering victims decryption, creating a risky and unusual…
SecurityCosmetics giant Rituals confirms data breach of customer membership records
The cosmetics retailer, which counts 41 million customers in its membership data, declined to provide an accurate total number of customers affected.
Anthropic is investigating 'unauthorized access' of its Mythos cybersecurity tool
Anthropic is investigating potential "unauthorized access" to its Claude Mythos model that has been touted for its ability to…
Security'We've identified a security incident': Vercel breach confirmed after hackers claim stolen data for sale online
Cloud development platform confirms theft of "non-sensitive data" and says customers were already notified.
Russia hits European thermal power plant in attempted ‘destructive’ cyberattack – Pro-Kremlin hackers are engaging in ‘riskier and more reckless behavior’ in latest attempt to cripple Western critical infrastructure
A thermal power plant in Sweden was hit by an attempted 'destructive' cyber attack, and Russia has been blamed.
Security'This activity appears to be part of a broader issue': education company McGraw Hill becomes latest to see its Salesforce data hacked
ShinyHunters strikes again, claiming to have stolen plenty of personally identifiable information.
OpenAI Has a New GPT-5.4-Cyber Model. Here's Why You Can't Use It
A scaled-up version of OpenAI's Trusted Access for Cyber program appears to be OpenAI's response to Anthropic's Project Glasswing.
SecurityEurope’s cyber agency blames hacking gangs for massive data breach and leak
CERT-EU blamed the cybercrime group TeamPCP for the recent hack on the European Commission, and said the notorious ShinyHunters gang was responsible…
Hasbro hit by major cyberattack — toymaker confirms 'unfortunate incident' takes down some parts of its websites
The business is still running but it could take weeks before the issue is fully resolved.
SecurityPopular AI gateway startup LiteLLM ditches controversial startup Delve
LiteLLM had obtained two security compliance certifications via Delve and fell victim to some horrific credential-stealing malware last week.
Leaked Anthropic Model Presents ‘Unprecedented Cybersecurity Risks,’ Much to Pentagon’s Pleasure
This is all a pretty good ad for Anthropic.
SecurityThis popular app builder has been hijacked to steal Microsoft account details - here's what we know
Bubble.io's good name is being tarnished by advanced and convincing phishing lures.
Ajax suffers major own goal as data breach hits personal info of 300,000 fans
A bug in an app allowed a hacker to view and tamper with the data, but a fix has since been implemented.
SecurityHacked traffic cams and hijacked TVs: How cyber operations supported the war against Iran
After U.S. and Israeli forces started bombing Iran, reports say cyber operations have disrupted communications, supported surveillance activities,…
Hacked Prayer App Sends ‘Surrender’ Messages to Iranians Amid Israeli Strikes
As Israeli airstrikes hit Tehran this morning, Iranians received mysterious push notifications saying that “help is on the way,”…
SecurityHackers are harnessing AI to exploit security flaws faster than ever
As AI gets integrated, attacks speed up and grow in severity, so buisnesses should shape up.
Russian hackers target European firms with new spear-phishing cyberattacks
APT28 resurfaces once again, targeting Western organizations with spear-phishing lures.
SecurityPanera Bread data breach much more serious than we thought - over 5 million customers were hit, new reports claim
Panera Bread customer data leaked on the dark web, allowing researchers to determine how many people were hit.
Russian ransomware hackers allegedly hit Tulsa airport in cyberattack, dump private files online as proof
The infamous Qilin group strikes again, this time targeting a major US airport.
SecurityMarquis confirms data breach, point finger of blame at SonicWall firewall
Marquis wants SonicWall to pay for the damages, but firewall maker asks for proof that two incidents are linked.
Apple’s new iPhone and iPad security feature limits cell networks from collecting precise location data
The new security feature makes it more difficult for police and malicious hackers to obtain a person's precise location data from…
SecurityDeleting Data Just Got Easier for Californians, but It’s Just One Piece of the Larger Cybersecurity Puzzle
The newly launched DROP portal could be a game-changer for Californians’ privacy, even though it’s not a replacement for a holistic cybersecurity…