Security
Breaches, exploits, ransomware and the people who clean up after them.
SecurityHundreds of copies of Chinese-made ARTEX hacking tools leaked online for anyone to use in further attacks
Likely not all instances are malicious, but at least a tenth were used alongside other known hacking tools.
Chainalysis admits all users affected in major data breach — names, usernames, password hashes, and live tokens all exposed
Chainalysis shut down multiple services to contain the attack and forced all users to change their passwords.
Businesses are putting themselves at risk of cyberattacks — by recovering too fast
UK businesses are prioritizing post-attack recovery speed, and that's great, but they're missing out on some fundamental checks.
"Trust us when we say it was 'spoiled'": Pentagon probing military freezers full of spoiled food as potential cyberattack
Multiple commissaries reported freezers full of wilted and spoiled food following malfunctions thought to be part of a…
Major US Homeland Security breach exposes details on 41,000 employees — undercover ICE agents and contractors unmasked in ‘Icepick’ data dump
Numerous employees and contractors have had personal details exposed
SecurityFBI leads action to shut down Virtualine bulletproof service linked to major cybercrime activity
Virtualine was hosting illegal forums and helping launder stolen cryptocurrency.
Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
OpenCode is an open-source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into…
Fake VPN download site steals administrator credentials to give attackers direct access to corporate networks — but delivers official signed software so victims never suspect a thing
A fake WatchGuard VPN download website stole administrator credentials before delivering the genuine signed installer,…
Massive data leak from AI development company exposes almost 14 million records — Vibetech collected data from different breaches and accidentally made them accessible online
The company has been harvesting data from different leaks, likely for research purposes.
AI Is Getting Really Good at Messing With Cybercriminals
Anti-cybercrime initiatives are increasingly using AI to scam the scammers by tricking them into talking to lifelike bots that…
SecurityAnthropic now offers a free vulnerability-finding service for open-source software
Anthropic is offering open-source projects a new way to check for vulnerabilities with its OSS Scanner.
Asos hit by extortion hack that may have compromised some customer data
The attackers sent a push notification to Asos shoppers announcing their activity.
SecurityThese social media posts promise big online discounts on Lego, Calvin Klein and more — but really they're just phishing scams
There's an elaborate scheme making rounds on Facebook and TikTok to get people to websites laden with infostealers.
AI self-policing proven failure: Former FTC chair
Digital Desk | Washington, Oct 5 (IANS) Former Federal Trade Commission Chair Lina Khan has warned against allowing artificial…
SecurityLee calls for thorough probe into personal data leaks at financial institutions
Digital Desk | Seoul, Oct 4 (IANS) President Lee Jae Myung on Sunday called for a thorough investigation into a series of hacking attacks that caused…
‘Incompetence’: Massive FBI hack hit most employees and extends to local officials
The hack of FBI computer systems exposed sensitive personal information about nearly every FBI employee, as well as thousands of…
SecurityCyber Fraud Costs American Small Businesses More Than $1 Billion Annually
There are multiple ways AI-enhanced cyber attacks are costing business owners money.
Facata teen jailed 12 years
With October recognised as Cybersecurity Awareness Month, the Manzini Magistrate’s Court has handed a deterrent sentence to a…
SecurityFake job adverts for Disney, Coca-Cola, Nike 'steal your digital life
Fake Disney and Coca-Cola job interview invitations are being used to steal passwords and workplace logins in a phishing campaign spanning more than…
Cops have breached one of iOS’s most secure features, report claims
Police agencies have a new tool to get around a vital iOS security feature, a new report claims.
SecurityThis new ChatGPT scam tricks you into installing malware – how to spot the trap
This authentic-looking scam starts with a sponsored Google link – and it’s catching people off-guard.
This popular AI agent could be hacked by a single email — with potentially disastrous consequences
Researchers found a way around Manus' guardrails and got it to execute a simple email prompt injection attack.
SecurityAI agents aggressively tried to hack US and Canadian government websites
AI agents repeatedly hit government sites, escalating to SQL injection after access failuresUS and Canadian authorities confirmed no compromise…
Police take down dangerous KillSec ransomware gang — and find out it's being run by a teenager
Some people have been arrested, with servers, domains, and proceeds, confiscated, too.
SecurityAI agent attempted to hack Library and Archives Canada, says U.S. research group
The website for Library and Archives Canada was one of the targets of a failed hacking attempt by an artificial intelligence agent, a San…
Hackers stole millions of US military personnel records during months-long data breach
The Department of Defense notified millions of current and former U.S. military personnel that their personal information had…
SecurityHackers build fake desktop apps to trick victims into handing over access
Finance and HR departments are being offered tools that don't exist, tricking them into handing over valuable access.
I Think I Found an AI Agent Worth the Risk
Instinct saved me $550, booked my restaurant reservations, and warned me about a phishing scam. It also wasted $64 and might be a…
SecurityHow AI could make it harder for governments to use hacking tools
AI is proving effective at finding and exploiting vulnerabilities. Some say this will make it harder for governments to use hacking tools and spyware…
US government alcohol and firearms agency ATF declares ‘major incident’ after ransomware gang claims cyberattack
Hackers break into a standalone system with information on targets of ATF investigations.
SecurityAI Agents Are Hacking Systems. Could That Push the US and China to Cooperate?
This week on “Uncanny Valley,” senior writer Will Knight talks his recent visit to China and the future of AI collaboration.
OpenAI’s rogue AI model incident was worse than we thought
In July, an unreleased OpenAI model broke out of a restricted environment, figured out how to get access to the internet, allowed…
SecurityCanadian SickKids hospital hit again by cyberattacks, more data stolen
Patient care has continued as usual following cyberattack.
Trump Claims Minnesota Is Behind Cyberattack on Its Own Water Systems, Not Iran
"Iran's got bigger problems than worrying about Minnesota," said Trump.
SecurityBanning Open-Source AI Models to Protect Our Cybersecurity May Do the Opposite
A ban on open Chinese AI models under the guise of security might actually put our cybersecurity more at risk.
OpenAI’s Rogue AI Agent Hacked More Than Just Hugging Face
In a new disclosure, OpenAI says its agent used exposed logins to gain access to at least four “publicly available services” in…
SecurityThis Russian cybercrime campaign can infect a user just by viewing an email
A high-severity flaw in Zimbra allowed Russian criminals easy access, where they stole important secrets.
AI arms race in line for a reckoning after OpenAI hacking incident
Aggressive training techniques sharpens threat of bad behavior by leading models.
SecurityAnthropic Wants You to Know Its New AI Model Is Definitely Not Too Dangerous to Release
Claude Sonnet 5 delivers impressive agentic capabilities at a relatively low cost. It’s also really bad at cybersecurity—probably for the reason…
NAIC confirms data breach with ShinyHunters claiming 3.1TB of data stolen in Oracle zero-day attack
Insurer regulatory filing documents, customer bulk orders, and more, stolen in a major zero-day supply chain attack
SecurityThis macOS malware can avoid AI analysis with gaslighting prompts hidden inside its architecture
A new piece of malware tries to trick AI-assisted analysis into showing errors.
Multiple malicious OpenClaw skills found online - including two macOS infostealers
Criminals found yet another marketplace to infect and use as a launchpad for malware delivery.
SecurityLastPass hit by new data breach - 4 steps you should take now
A third-party supplier breach has exposed LastPass customer names, phone numbers, and other data. Here's how to protect yourself.
US healthcare AI platform Xsolis confirms data breach that affects 1.4 million individuals
Social Security numbers and health insurance information nabbed as Xsolis tells its customers to be careful.
Security'You can no longer do things at human scale': Cisco releases AI agent botnet that works on behalf of your business
Cyberspace has become an AI battlefield, and Cisco wants in on the action.
Trump signs scaled-back AI cybersecurity order
AI models can voluntarily submitted to the government for review 30 days before release under Trump's new executive order.
SecurityWhy I built my own DIY cyberdeck straight out of 80s sci-fi - and how you can too
The latest DIY craze is a portable computer inspired by a 1984 sci-fi novel. I built one with a Raspberry Pi. Here's why and how.
GCHQ debuts world-first AI cyber defense system to detect threats across critical national infrastructure, airlines, telecoms, and major companies
The UK wants to use AI to defend against Russia and China's "relentless attacks" on critical infrastructure.
SecurityAfter dissing Anthropic for limiting Mythos, OpenAI restricts access to Cyber, too
OpenAI will begin rolling out it cybersecurity testing tool, GPT-5.5 Cyber only "to critical cyber defenders" at first.
'VECT is being marketed as ransomware...but it functions as a data destruction tool': Experts warn this "broken" ransomware is now acting as a data wiper, so protect your files now
New ransomware variant destroys everything bigger than 128kb, making retrieval without a backup impossible.
SecurityUtility giant Itron confirms cyberattack, says internal systems were accessed
Data was most likely not tampered with, although Itron's investigation is still ongoing.
China-nexus cyber actors' are turning routers and IoT infrastructure into covert botnets 'at scale' – NCSC, Five Eyes, and others warn of campaign involving Typhoon-designated groups
The botnets are used to hide locations and launch Distributed Denial of Service attacks.
Security'We will reveal their identity photos, names, location, and other': Experts reveal extraordinary battle between rival ransomware gangs — and how victims can get their data back
A ransomware group is threatening to expose a rival’s members while offering victims decryption, creating a risky and unusual cybercrime conflict.
Cosmetics giant Rituals confirms data breach of customer membership records
The cosmetics retailer, which counts 41 million customers in its membership data, declined to provide an accurate total number of…
Anthropic is investigating 'unauthorized access' of its Mythos cybersecurity tool
Anthropic is investigating potential "unauthorized access" to its Claude Mythos model that has been touted for its ability to find cybersecurity…
'We've identified a security incident': Vercel breach confirmed after hackers claim stolen data for sale online
Cloud development platform confirms theft of "non-sensitive data" and says customers were already notified.
SecurityRussia hits European thermal power plant in attempted ‘destructive’ cyberattack – Pro-Kremlin hackers are engaging in ‘riskier and more reckless behavior’ in latest attempt to cripple Western critical infrastructure
A thermal power plant in Sweden was hit by an attempted 'destructive' cyber attack, and Russia has been blamed.
'This activity appears to be part of a broader issue': education company McGraw Hill becomes latest to see its Salesforce data hacked
ShinyHunters strikes again, claiming to have stolen plenty of personally identifiable information.
SecurityOpenAI Has a New GPT-5.4-Cyber Model. Here's Why You Can't Use It
A scaled-up version of OpenAI's Trusted Access for Cyber program appears to be OpenAI's response to Anthropic's Project Glasswing.
Europe’s cyber agency blames hacking gangs for massive data breach and leak
CERT-EU blamed the cybercrime group TeamPCP for the recent hack on the European Commission, and said the notorious ShinyHunters…
SecurityHasbro hit by major cyberattack — toymaker confirms 'unfortunate incident' takes down some parts of its websites
The business is still running but it could take weeks before the issue is fully resolved.
Popular AI gateway startup LiteLLM ditches controversial startup Delve
LiteLLM had obtained two security compliance certifications via Delve and fell victim to some horrific credential-stealing…
SecurityLeaked Anthropic Model Presents ‘Unprecedented Cybersecurity Risks,’ Much to Pentagon’s Pleasure
This is all a pretty good ad for Anthropic.
This popular app builder has been hijacked to steal Microsoft account details - here's what we know
Bubble.io's good name is being tarnished by advanced and convincing phishing lures.
SecurityAjax suffers major own goal as data breach hits personal info of 300,000 fans
A bug in an app allowed a hacker to view and tamper with the data, but a fix has since been implemented.
Hacked traffic cams and hijacked TVs: How cyber operations supported the war against Iran
After U.S. and Israeli forces started bombing Iran, reports say cyber operations have disrupted communications, supported…
SecurityHacked Prayer App Sends ‘Surrender’ Messages to Iranians Amid Israeli Strikes
As Israeli airstrikes hit Tehran this morning, Iranians received mysterious push notifications saying that “help is on the way,” promising amnesty if…
Hackers are harnessing AI to exploit security flaws faster than ever
As AI gets integrated, attacks speed up and grow in severity, so buisnesses should shape up.
SecurityRussian hackers target European firms with new spear-phishing cyberattacks
APT28 resurfaces once again, targeting Western organizations with spear-phishing lures.
Panera Bread data breach much more serious than we thought - over 5 million customers were hit, new reports claim
Panera Bread customer data leaked on the dark web, allowing researchers to determine how many people were hit.
SecurityRussian ransomware hackers allegedly hit Tulsa airport in cyberattack, dump private files online as proof
The infamous Qilin group strikes again, this time targeting a major US airport.
Marquis confirms data breach, point finger of blame at SonicWall firewall
Marquis wants SonicWall to pay for the damages, but firewall maker asks for proof that two incidents are linked.
SecurityApple’s new iPhone and iPad security feature limits cell networks from collecting precise location data
The new security feature makes it more difficult for police and malicious hackers to obtain a person's precise location data from a cell phone…
Deleting Data Just Got Easier for Californians, but It’s Just One Piece of the Larger Cybersecurity Puzzle
The newly launched DROP portal could be a game-changer for Californians’ privacy, even though it’s not a replacement for a…