Tag: attack
-
Hackers Exploit WordPress Core RCE Vulnerability in Over 240,000 Attack Attempts
Attackers have launched more than 240,000 exploit attempts against a WordPress Core upgrade-process flaw that can enable unauthenticated remote code execution. Wordfence researcher István Márton reported that targeting began on October 28, 2026. Tracked as CVE-2026-119977, the high-severity issue carries a CVSS score of 8.1 and affects unpatched branches spanning WordPress 4.7 through 7.1.3. The…
-
Hackers Exploit SonicWall SSL-VPN Vulnerability to Bypass Multi-Factor Authentication in Active Attacks
SonicWall has disclosed an SSL-VPN authentication enforcement flaw that could let attackers bypass SAML authentication and associated multi-factor authentication controls. Tracked as CVE-2026-19868, the issue carries a CVSS score of 7.1. Advisory SNWLID-2026-0014, published November 6, 2026, states that SonicWall PSIRT investigated a report indicating potential exploitation. That wording signals suspected malicious activity, rather than…
-
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-ssl-vpn-mfa-bypass-flaw-exploited-in-attacks/
-
US Warns Hospitals of Attacks on Refrigeration Systems
Agencies and AHA Warn of Risks to Blood Supplies, Critical OT Systems. U.S. officials are urging healthcare organizations and other critical infrastructure operators to strengthen cyber protections for internet-connected refrigeration systems amid a wave of attacks in Europe that have disrupted cold storage equipment, including systems used to preserve blood supplies. First seen on govinfosecurity.com…
-
When Trust Becomes The Attack Vector
Rethinking modern insider risk and telling malice from mistakes First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/blogs/when-trust-becomes-attack-vector-p-4239
-
QNAP says hackers breaching NAS devices in Plex2Shell attacks
QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center, as hackers are exploiting the Plex2Shell vulnerability chain. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/qnap-says-hackers-breaching-nas-devices-in-plex2shell-attacks/
-
Chainalysis says breach exposed credentials for all customers
Blockchain intelligence firm Chainalysis says a recent attack on its systems and internal tools has exposed credentials and live tokens for all customers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/chainalysis-says-breach-exposed-credentials-for-all-customers/
-
Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users’ Computers
A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person’s computer, researchers at Forever Security, an endpoint security company, showed in a test.The attack needs Dispatch, a Claude feature that lets people send tasks from their phone to Claude Desktop. The flaw that makes this possible can…
-
CISA, FBI Urge Action to Protect Industrial Refrigeration Networks
The CISA advisory follows a swathe of attacks in which hackers have tampered with the temperatures of internet-exposed supermarket refrigeration systems First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisa-protect-refrigeration-networks/
-
ENISA Warns of Cyberattacks Targeting Refrigeration Systems Across Europe
ENISA warns of cyberattacks on European refrigeration systems, exposing risks to supermarkets, food supplies and industrial controls. The European Union has issued a coordinated cybersecurity warning after a series of attacks hit commercial refrigeration systems in several Member States. The incidents, which began in October and continued with a new wave on November 1 and…
-
Huntress turns real-world attack intelligence into fleet-wide ‘herd immunity’ with new platform capabilities
Huntress has announced a wave of new capabilities across its Agentic Security Platform, designed to turn intelligence gathered from live attacks into proactive defences for every customer, rather than leaving each incident as one organisation’s problem. The updates span Managed ITDR, Managed EDR, Managed SIEM, Managed SAT and Managed ISPM. They draw on the company’s…
-
MetaMask says recent attack didn’t affect wallet infrastructure
Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/metamask-says-recent-attack-didnt-affect-wallet-infrastructure/
-
MetaMask says recent attack didn’t affect wallet infrastructure
Cryptocurrency wallet provider MetaMask said a recent security incident has not affected MetaMask wallets or its wallet infrastructure. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/metamask-says-recent-attack-didnt-affect-wallet-infrastructure/
-
Claude AI Flaw Lets Malicious Browser Extensions Execute Commands on Remote Computers
A design flaw in Anthropic’s Claude Dispatch feature let a malicious browser extension run commands on the operating system, even on a different computer. Researchers at Forever Security named the attack ThisBash. They found that Claude Dispatch accepted instructions from an ordinary logged-in claude.ai session. An extension that could control that site could therefore send…
-
Chainalysis Breach Exposes All Users’ Credentials, Forces Shutdown of Key Services
Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for all users.”While we investigated, we removed access to Reactor and Data Solutions,” the company said. “At this time we continue to have no evidence that any investigations…
-
Hackers Use ARTEX AI to Steal Azure Key Vault Secrets Just 5 Minutes After Finding Exposed GitHub Credentials
Attackers using the ARTEX agentic AI framework to discover exposed GitHub credentials and rapidly compromise cloud environments. In one intrusion, an AI agent progressed from searching GitHub for application secrets to exfiltrating Azure Key Vault data in just five minutes. The activity compresses a familiar attack chain: finding leaked credentials, validating access, mapping resources, and…
-
Hackers Use ARTEX AI to Steal Azure Key Vault Secrets Just 5 Minutes After Finding Exposed GitHub Credentials
Attackers using the ARTEX agentic AI framework to discover exposed GitHub credentials and rapidly compromise cloud environments. In one intrusion, an AI agent progressed from searching GitHub for application secrets to exfiltrating Azure Key Vault data in just five minutes. The activity compresses a familiar attack chain: finding leaked credentials, validating access, mapping resources, and…
-
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
Two flaws in Barracuda’s Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with no login required.The company released patches on Monday, and the security firm watchTowr detailed the attack chain on Thursday.One flaw, CVE-2026-116606, is an authorization bypass. An unauthenticated attacker can…
-
ARTEX AI Framework Linked to Bank Breaches and Cloud Attacks Found Exposed Across Hundreds of Servers
Tags: ai, attack, banking, breach, cloud, cyber, data-breach, finance, framework, infrastructure, LLM, penetration-testing, supply-chainAn autonomous penetration-testing framework linked to South Korean banking breaches and cloud supply-chain attacks is publicly exposed across 1,465 hosts. The findings show that ARTEX, an LLM-driven offensive security platform released in July 2026, appears alongside conventional attack infrastructure while leaking sensitive operational files. Censys observed the exposed consoles as of November 4, but the…
-
Queens Public Library says ransomware attack disrupted Wi-Fi, on-site computers
The library system, which has 66 branches serving the borough’s 2.3 million residents, published multiple alerts on Wednesday confirming that the disruption was caused by a ransomware attack. First seen on therecord.media Jump to article: therecord.media/queens-library-ransomware-causes-disruptions
-
Breach Roundup: Hybrid Warfare in Europe Heats Up
Also: Norway Aid Agency Breach, Europe and Germany Target Online Scams. This week: Ukraine hacked back, Norway aid agency cyberattack, Harvard breach, 3AM used hybrid AI tactics. Sageworks went offline. European cops seized scam servers, cPGuard updates hijacked, ‘hello’ chats hid Flowise attacks, a Red Hat flaw, Synology NAS ransomware and Canonical fixed a flaw.…
-
Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to steal Microsoft and Google account credentials and authentication sessions. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fake-openai-spacex-events-used-to-steal-microsoft-google-accounts/
-
What We Missed: Knicks Phishing Test Goes Out of Bounds
In this video conversation, Dark Reading editors discuss some of the news they didn’t get a chance to cover, from an ill-conceived phishing simulation to a hacktivist attack on a US government agency. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/what-we-missed-knicks-phishing-test-out-of-bounds
-
Harden cooling systems now, feds warn critical infrastructure operators amid attacks
The U.S. government on Thursday called on critical infrastructure operators to safeguard their cooling systems following hacks that have caused chaos in European supermarkets in recent weeks. First seen on therecord.media Jump to article: therecord.media/cyberattacks-refrigeration-cisa-fbi
-
French Bank Loses 100 Million Euros in Cyberattack
Crédit Mutuel Arkéa Blames Third-Party Breach. French financial institution Crédit Mutuel Arkéa says a cyberattack led to the theft of 100 million euros – $112 million – which it is now trying to recover. Crédit Mutuel Arkéa says it fell victim to a supply chain attack that did not involve human error. First seen on…
-
French authorities probe cyberattack targeting nation’s blood supply
The attack follows a wave of hacks against refrigeration systems at supermarkets across Europe. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/french-probe-cyberattack-blood-supply/873871/
-
Zyxel Switch Patch Missed Flaw Behind Wave of Attacks
Zyxel’s June GS1900 patch did not block the exploit used against 996 switches, Binarly found First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/zyxel-gs1900-patch-missed-flaw/
-
India Warns of New AI-Driven Cyber-Attacks Targeting Financial and Crypto Businesses
The Indian CERT said a new cyber malicious group tracked as ‘Crafty Flacon’ is using Chinese-made AI tools to attack fintech and crypto organizations First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/india-warns-ai-cyberattacks/
-
ARTEX Hackers Used Claude Code, DeepSeek, and Grok in Attacks Targeting South Korean Banks
A financially motivated threat actor used ARTEX, Claude Code, and multiple large language models in a campaign targeting South Korean financial organizations. Exposed attacker directories revealed session histories, configurations, and operational scripts, showing how AI tooling supported intrusions that resulted in data theft between late September and early October 2026. CrowdStrike’s October 7 investigation assessed…