access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
Irish police force has its Twitter hacked in cryptocurrency scam
There must have been red faces in the social media department of Ireland’s police headquarters after two of its accounts were hijacked this week. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/irish-police-twitter-hacked-crypto-scam also interesting: AI gives superpowers to BEC attackers Europol dismantles Euro460M crypto scam targeting 5,000 victims worldwide North Korean hackers targeted crypto exec…
-
Irish police force has its Twitter hacked in cryptocurrency scam
There must have been red faces in the social media department of Ireland’s police headquarters after two of its accounts were hijacked this week. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/irish-police-twitter-hacked-crypto-scam also interesting: Biggest Crypto Scam Tactics in 2024 and How to Avoid Them Scam Abuses Gemini Chatbots to Convince People to Buy Fake…
-
Hackers exploit SiteGuard WAF flaw to run commands as admins
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-siteguard-waf-flaw-to-run-commands-as-system-root/ also interesting: Gen AI is transforming the cyber threat landscape by democratizing vulnerability hunting Hackers exploit SiteGuard WAF flaw to run commands as…
-
Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-siteguard-waf-flaw-to-run-commands-as-system-root/ also interesting: Gen AI is transforming the cyber threat landscape by democratizing vulnerability hunting PAN-OS Command Injection Flaw Lets Hackers Execute Arbitrary Code…
-
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 4
Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can automate tasks, analyze large amounts of data, discover vulnerabilities and accelerate offensive operations. At…
-
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 4
Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can automate tasks, analyze large amounts of data, discover vulnerabilities and accelerate offensive operations. At…
-
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 4
Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can automate tasks, analyze large amounts of data, discover vulnerabilities and accelerate offensive operations. At…
-
What are self-replicating ‘AI worms’, and why is Anthropic worried about them?
The tech company says successful AI worms need more capability on less powerful devices, but current trends make that feasible by the end of the yearWarnings about what artificial intelligence might do in the future together with alarming reports of what it has gotten up to already are being issued so quickly that even security…
-
Rust-Based CikaBika Bot Turns Discord into a Command Center
CikaBika Bot uses fake documents to infect Windows systems, then abuses Discord and Ngrok to execute commands, spy on victims, and steal files. Darktrace researchers have documented a new campaign distributing a remote access trojan called CikaBika Bot, written in Rust and controlled entirely through Discord. The infection chain starts with a disk image that…
-
World leaders must wise up to threat of cyber-attacks or rogue fridges will be least of their worries | Heather Stewart
Global cooperation seems unlikely despite AI increasing the risk of digital fraud and the need to protect the financial systemRogue French fridges were an unlikely talking point for the world’s leading economists, central bankers and finance chiefs meeting in a sultry Bangkok last week helping to underline the spiralling cost of cyber-attacks.Kristalina Georgieva, the managing…
-
Krybit ransomware: what you need to know
Tags: ransomwareKrybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted, and what organisations can do to protect themselves. First seen on fortra.com Jump to article: www.fortra.com/blog/krybit-ransomware-what-you-need-know also interesting: Norton Healthcare to Pay $11M to Settle BlackCat Lawsuit…
-
Security Affairs newsletter Round 600 by Pierluigi Paganini INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. North Korean IT Workers Used Stolen US Identities to Earn $3 Million U.S. CISA adds Fortinet Multiple…
-
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 119
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter IronChain Ransomware Threatens Businesses with Permanent Data Loss and Costly Downtime AI models may be capable of self-replicating without access to a datacenter XWorm Reborn: From infostealer to surveillance platform Hirudo: From Fake Updates…
-
Check Point warnt vor groß angelegten Phishing-Angriffen über Kalendereinladungen
Check Point warnt vor Phishing über gefälschte Kalendereinladungen. Mehr als 40.000 Organisationen im Visier von Angriffen auf Microsoft-Konten. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-warnt-vor-gross-angelegten-phishing-angriffen-ueber-kalendereinladungen/a46800/ also interesting: Black Basta operators phish employees via Microsoft Teams Strela Stealer Malware Targets Microsoft Outlook Users for Credential Theft Microsoft sets all new accounts passwordless by default Microsoft…
-
Week in review: Hidden implant in Ledger wallets linked to $93M theft, 1,500+ npm packages exposed
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Strands Box: Open-source sandbox for AI agents AWS released Strands Box, an … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/18/week-in-review-hidden-implant-in-ledger-wallets-linked-to-93m-theft-1500-npm-packages-exposed/ also interesting: 6 hot cybersecurity trends Top 5 real-world AI security threats revealed in 2025 Software developers: Prime cyber…
-
Countdown zur PQC-Migration: Was Unternehmen bis 2030 umstellen müssen
Deutschland gibt der Migration auf Post-Quanten-Kryptografie einen verbindlichen Takt: Hochriskante Anwendungen sollen bis Ende 2030 umgestellt sein, bis 2035 soll der Übergang weitgehend abgeschlossen sein. Für CIOs und CISOs beginnt die entscheidende Phase jedoch schon jetzt mit Krypto-Inventarisierung, Risikobewertung, klaren Verantwortlichkeiten und einer Beschaffungsstrategie, die Kryptoagilität zum Standard macht. Management Summary Fristen stehen: Hochriskante… First…
-
Post-Quanten-Kryptografie: Der Wettlauf um sichere Unternehmensdaten hat begonnen
Quantencomputing: Deutsche Unternehmen erkennen das Potenzial, zögern aber bei der Umsetzung Quantencomputing verspricht neue Rechenleistung und stellt zugleich etablierte Sicherheitsverfahren infrage. Die Bitkom-Studie zeigt: Deutsche Unternehmen erkennen das strategische Potenzial, doch bei Kompetenzen, Pilotprojekten und quantensicherer Kryptografie besteht erheblicher Nachholbedarf. Für CIOs und CISOs beginnt die entscheidende Arbeit deshalb nicht mit dem Kauf eines… First…
-
North Korean IT Workers Used Stolen US Identities to Earn $3 Million
The FBI raided 40 Texas homes over a North Korean scheme that used fake IT workers to target 70 US companies and generate $3 million. The Justice Department (DoJ) announced coordinated enforcement actions this week targeting North Korea’s long-running scheme to place fake IT workers inside American companies. Two US nationals were arrested, 14 people…
-
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/ also interesting: Cybersecurity Snapshot: CISA Analyzes Malware Used in SharePoint Attacks, as U.K. Boosts Cyber Assessment Framework Cybersecurity Snapshot: CISA Analyzes Malware…
-
Drupal patches critical RCE flaws, warns exploits may emerge soon
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon/ also interesting: Critical Zimbra RCE flaw actively exploited to take over servers Critical Jenkins Vulnerabilities Expose Servers To RCE Attack PoC exploit…
-
Encryption Is Getting Squeezed From All Sides
Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the world. First seen on wired.com Jump to article: www.wired.com/story/kernel-panic-encryption-is-getting-squeezed-from-all-sides/ also interesting: The Quiet Rise of the ‘API Tsunami’ Ransomware attacks: The evolving extortion threat to US financial institutions What to look for in a…
-
The power of AI is worrying senior Labour figures as is the fear of ‘falling behind the public’
Westminster appears to be waking up to warnings over AI safety, with concerns over its use by extremist groups and bad actors”I have this sense that, within a few months, AI is going to be all anyone is talking about,” said one cabinet minister, with an ominous stare.It was Labour conference, with everyone from ministers…
-
Fake Linda and me: the Agatha Christie-worthy mystery of the fraudster who stole my byline
Tags: unclassifiedHow a string of bizarre events led writer Linda Geddes to don her sleuthing cap and dig into a world of shadowy impersonatorsIt started with an entirely ordinary interaction on LinkedIn. Someone had tagged me in a post, saying how much they’d enjoyed contributing to a New York Post article I’d written about “chronoworking”. As…
-
MALFEX npm Package ‘imgdecode’ Hides Shellcode Loader in Windows Native Addon
Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX.The package, named “imgdecode,” was uploaded to the package registry on September 30, 2026, by a user named “malfexteste8.” It has been downloaded 979 times as of writing and is still available on npm as…
-
Ist diese ‘Vibe Coded”-App sicher? 5 Punkte, die Sie vor dem Download prüfen sollten
KI ermöglicht es jedem, Software zu entwickeln. Wir zeigen Ihnen, wie sie die sicheren von den unsicheren Apps unterscheiden können. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/de/mobile-sicherheit/ist-diese-vibe-coded-app-sicher-5-punkte-die-sie-vor-dem-download-prufen-sollten/ also interesting: 17 hottest IT security certs for higher pay today DARPA Announces AI Cyber Challenge Finalists 1-Click RCE Attack In Kerio Control UTM Allow Attackers Gain…
-
U.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog
Tags: cisa, cybersecurity, exploit, firewall, flaw, fortinet, infrastructure, kev, malware, vulnerabilityU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: This week, Palo Alto Netwoks researchers reported that PEERSTITCH malware exploited FortiManager to expose 500+ firewalls,…
-
KI-Risiken im Griff: Warum Governance über Haftung und Versicherbarkeit entscheidet
Wer haftet, wenn KI einen Fehler macht? Bitkom-Leitfaden zeigt, wie Unternehmen KI-Risiken erkennen, steuern und absichern können [1]. Mit der wachsenden Autonomie künstlicher Intelligenz steigen nicht nur Effizienzpotenziale, sondern auch Haftungs-, Sicherheits- und Reputationsrisiken. Ein aktueller Bitkom-Leitfaden zeigt, wie Unternehmen KI-Schäden systematisch bewerten, Kontrollmechanismen etablieren und Versicherungslücken erkennen können. Für Entscheider wird damit klar:… First…
-
KI-Risiken im Griff: Warum Governance über Haftung und Versicherbarkeit entscheidet
Wer haftet, wenn KI einen Fehler macht? Bitkom-Leitfaden zeigt, wie Unternehmen KI-Risiken erkennen, steuern und absichern können [1]. Mit der wachsenden Autonomie künstlicher Intelligenz steigen nicht nur Effizienzpotenziale, sondern auch Haftungs-, Sicherheits- und Reputationsrisiken. Ein aktueller Bitkom-Leitfaden zeigt, wie Unternehmen KI-Schäden systematisch bewerten, Kontrollmechanismen etablieren und Versicherungslücken erkennen können. Für Entscheider wird damit klar:… First…
-
Ministers must be honest about Russian threat to UK, says former Foreign Office head
Peter Ricketts calls for more resilience in protecting banking, energy and water systems from cyber-assaultsMinisters need to be honest with the British public about the immediate threat posed by Russia, which could soon lead to lives being lost, a former national security adviser has said.Peter Ricketts, who advised David Cameron when he was prime minister,…
-
BAE Systems Cyber Incident Takes US Bankruptcy Noticing Center Offline for a Week
A cyber incident at a BAE Systems subsidiary just stopped every bankruptcy court in the US from sending notices, and the problem started a week ago. A security incident at BAE Systems Inc., the US subsidiary of British defense contractor BAE Systems, has taken the Bankruptcy Noticing Center offline since October 9. The Bankruptcy Noticing…
-
Smart Glasses: Ray-Ban Meta zeichnet Gespräche ungefragt auf
Tags: unclassifiedNutzer melden Aufnahmen ohne das Aktivierungswort Hey Meta bei Ray-Ban-Meta-Brillen. Meta bezeichnet den Fehler als behoben, nennt aber keine Ursache. First seen on golem.de Jump to article: www.golem.de/news/smart-glasses-ray-ban-meta-zeichnet-gespraeche-ungefragt-auf-2610-214210.html also interesting: Behörden-PDFs: Vertrauliche Daten trotz Schwärzung rekonstruierbar Boomi als Leader bei adaptiver Prozessorchestrierung ausgezeichnet Nach erster Verhaftung: FBI droht der Hackergruppe Shinyhunters Give yourself room to…
-
Smart Glasses: Ray-Ban Meta zeichnet Gespräche ungefragt auf
Tags: unclassifiedNutzer melden Aufnahmen ohne das Aktivierungswort Hey Meta bei Ray-Ban-Meta-Brillen. Meta bezeichnet den Fehler als behoben, nennt aber keine Ursache. First seen on golem.de Jump to article: www.golem.de/news/smart-glasses-ray-ban-meta-zeichnet-gespraeche-ungefragt-auf-2610-214210.html also interesting: S.P.O.N. – Die Mensch-Maschine: Schneller als die Fakten erlauben… Weltweite Polizeiaktion legt Ransomwarebande Dispossessor das Handwerk Experts Debate Real ID Security Ahead of May 7…
-
Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds for five NIST elliptic curves in under 30 minutes, addressing a cryptographic mystery spanning roughly 25 years. Its October 16 report attributes the seeds to a standard C pseudorandom number generator initialized with Unix timestamps, rather than secret passphrases. Despite…
-
AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns
India’s CERT-In warns AI agents accessed confidential data undetected, while attackers used offensive AI frameworks to accelerate cyberattacks. CERT-In, India’s national cyber response team, published a critical-severity advisory 15 documenting two distinct categories of AI-related incidents. In one, AI models under research and evaluation exceeded their assigned tasks and accessed live Indian systems without authorization.…
-
GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises malicious JavaScript as a font file and targets developer workstations through Visual Studio Code tasks. Jenn Gile identified 94 compromised repositories belonging to 66 owners, confirming the payload in all 79 repositories available for analysis. The remaining 15 were inaccessible.…
-
(g+) Android-Sicherheit: Diese Tools schützen das Smartphone vor Malware
Malware kann auf Android großen Schaden anrichten. Wir zeigen, welche Tools Schadsoftware erkennen und wie man das eigene Smartphone schützt. First seen on golem.de Jump to article: www.golem.de/news/android-sicherheit-diese-tools-schuetzen-das-smartphone-vor-malware-2610-214198.html also interesting: GuardZoo Malware Targets Over 450 Middle Eastern Military Personnel From Espionage to Ransomware: Rafel RAT’s Impact on Android Security Top 16 OffSec, pen-testing, and ethical…
-
SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with spear-phishing attacks that deploy ReverseRAT on Windows systems. The October 15, 2026, advisory classifies the threat as medium severity and highlights malware that can steal passwords, capture screenshots, and collect sensitive information. The campaign combines deceptive attachments, malicious Windows shortcuts,…
-
OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a separate out-of-bounds write to obtain root privileges. Calif researcher Andrew Griffiths published the “Big Fish” research on October 16, 2026, alongside public proof-of-concept code demonstrating exploitation with multiple kernel security protections enabled. The oldest vulnerability traces to a shared memory…
-
Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh. Dubbed WP2Shell, the exploit chain reportedly emerged in July 2026 and combines REST API route confusion with SQL injection, allowing attackers to progress from public endpoints to server compromise without possessing valid WordPress credentials.…
-
New ROMULUS Malware Platform Uses Six Servers to Deliver Multiple Malicious Payloads
ROMULUS, a shared ClickFix delivery platform operating across six identified servers, with confirmed routes distributing a trojanized Stardock package and LegionLoader. The discovery connects infrastructure from a recently documented ChatGPT Custom GPT abuse campaign to an independently investigated incident, exposing a reusable backend capable of delivering different malicious payloads. The investigation began after researchers found…
-
New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs
A new GhostBat RAT variant targets 60 Android financial application packages used in India, combining accessibility-based PIN capture with a transparent overlay that intercepts interactions inside legitimate Google Pay and MobiKwik interfaces. The findings extend Cyble’s October 2025 investigation, which documented GhostBat spreading through fraudulent mParivahan applications, harvesting banking messages, and stealing UPI PINs through…
-
Android Malware Exposes Its Own Operators While Hijacking Phones and Stealing Sensitive Data
An Android remote-access Trojan, YuanKong, whose weakly protected dropper reveals more than its hidden payload: it exposes the operator account identifiers embedded in each build. Analysis of 110 droppers uncovered 57 distinct child payloads, 42 operator accounts and 44 rotating build brands, all tied together by a shared signing certificate and command-and-control (C2) infrastructure. Its…
-
Midnight Blizzard-Linked Malware Server Still Delivering Payloads 8 Weeks After Disclosure
A server linked to a malware campaign attributed to a Midnight Blizzard-associated cluster was still delivering malicious files on October 5, 2026. The server returned HTTP 200 responses for multiple payload paths, including one used by simple Windows Internet Shortcut files to launch a PowerShell stager. The finding shows that public disclosure and low reputation…
-
AI-Assisted Hackers Compromise Government Linux Servers to Deploy Backdoors and Steal Credentials
Hackers used AI-assisted scripts to compromise government Linux servers, harvest administrator credentials, and establish persistent backdoors during a campaign observed between October 2025 and April 2026. The cluster remains unattributed. Under Unit 42’s attribution framework, “UNK” indicates that researchers have not determined whether the activity is state-sponsored or financially motivated. Its intelligence-gathering behavior does not…
-
AI-Assisted Hackers Compromise Government Linux Servers to Deploy Backdoors and Steal Credentials
Hackers used AI-assisted scripts to compromise government Linux servers, harvest administrator credentials, and establish persistent backdoors during a campaign observed between October 2025 and April 2026. The cluster remains unattributed. Under Unit 42’s attribution framework, “UNK” indicates that researchers have not determined whether the activity is state-sponsored or financially motivated. Its intelligence-gathering behavior does not…
-
Not cool: who hacked France’s supermarket fridges?
Whether it was youngsters proving their skills or state sabotage, Europe’s most hacked country was left with a mountain of waste after food began cooking in freezersShortly before midnight last Sunday, the digital thermostats controlling hundreds of supermarket cold aisles across France began to flicker and rise.In a <a href=”https://www.theguardian.com/world/2026/oct/12/cyber-attack-defrosts-refrigerators-france-supermarket-chains-intermarche-cooperative-u”>”bizarre and unprecedented” cyber-attack, hackers had…