Tag: attack
-
Synology warns of C3RB3R ransomware attacks targeting NAS devices
Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/synology-warns-customers-of-ongoing-c3rb3r-ransomware-attacks/
-
Hackers Target Emergency Alert Apps in Ukraine and Russia, Sending Fake Nuclear Attack Warnings
Hackers compromised emergency alert applications in Ukraine and Russia, distributing fabricated nuclear and radiation warnings as officials sought to reassure residents that no corresponding emergency existed. Ukraine reported interference late on November 1, followed hours later by Russia’s announcement of a “massive cyberattack” against its emergency ministry’s mobile application. The incidents targeted trusted civilian warning…
-
Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens
Hackers reportedly hit Ukraine ‘s and Russia ‘s emergency alert apps, sending fake nuclear and attack warnings and raising concerns over public safety. Ukraine and Russia both said on Sunday night that hackers had compromised their emergency alert apps and used them to send fake warnings about air raids and other attacks, including nuclear threats.…
-
Hackers Target Supermarket Refrigeration Systems Across Sweden, Raising Freezer Temperatures to 55°C
Hackers have disrupted refrigeration systems at several ICA and Coop supermarkets across Sweden, destroying food and prompting temporary closures. One store manager reported finding a freezer at 55°C, which highlights the physical consequences of attacks on connected retail equipment. The disruption follows attacks against French supermarket refrigeration systems, which similarly damaged chilled and frozen stock.…
-
Hackers Weaponize Open-Source CyberStrikeAI Framework to Launch AI-Powered Network Intrusions
Hackers are abusing CyberStrikeAI, an open-source penetration-testing framework, to orchestrate network intrusions against educational organizations across Africa and Latin America. The findings illustrate AI moving beyond attack preparation into operational decision-making. Published November 2, Kaspersky’s investigation describes a human-directed operation in which an LLM selects tools, generates commands, interprets results, and determines subsequent actions. The…
-
Apple Issues Urgent Security Alerts Over Mercenary Spyware Attacks in 99 Countries
Apple has started sending a new round of threat notifications to users across 99 countries, warning them about targeted mercenary spyware attacks, according to cybersecurity researcher Costin Raiu. In his post, Raiu noted that these notifications are related to new attacks and are separate from the wave of alerts sent out in August. The notification…
-
Supermarket freezers across Europe hit by second suspected cyber-attack
Chains in Sweden, Belgium and Luxembourg said fridge temperatures rose overnight, similar to hack that hit French stores in OctoberSupermarket chains in Sweden, Belgium and Luxembourg have said the temperatures of their refrigerators and freezers in dozens of stores rose overnight, prompting fears of a cyber-attack similar to one that caused millions of euros of…
-
Ivanti patches two more Connect Secure zero-days chained in attacks
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least October 1. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ivanti-patches-two-more-connect-secure-zero-days-chained-in-attacks/
-
11 Breach Attack Simulation Tools: The 2026 Buyer’s Verdict Guide
Breach and attack simulation tools answer the question audits can’t: would the controls you pay for actually stop the techniques attackers use this quarter? The buying mistake is treating the category as uniform it spans safe simulators, real-exploitation engines, and emulation frameworks for red teams, each with different governance and staffing implications. This verdict guide…
-
Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques
Tags: ai, attack, blockchain, cyberattack, cybersecurity, data, email, password, security-incident, threat, toolChainalysis suffered a cyberattack exposing customer names, emails and user IDs, while investigation data and passwords remain safe. Blockchain analytics firm Chainalysis says it was the target of a cybersecurity incident. A threat actor accessed its systems and internal tools and stole some non-sensitive customer data. >>This month, Chainalysis detected an external actor using offensive…
-
FBI Confirms North Korean Hackers Stole Over $6 Billion From Binance in Massive Crypto Attack
The Federal Bureau of Investigation (FBI) has linked the theft of over $6 billion in virtual assets from Binance to North Korean hackers, labeling the operation as >>TraderTraitor.<< In an advisory released on October 31, the FBI reported that the cryptocurrency exchange was targeted around October 29, 2026. This announcement marks an official attribution but…
-
FBI links $6.3 billion Binance crypto heist to North Korean hackers
The FBI has confirmed that North Korean state-sponsored hackers known as TraderTraitor were behind the $6.3 billion crypto-theft attack on Binance, making it the largest cryptocurrency heist on record. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fbi-links-63-billion-binance-crypto-heist-to-north-korean-hackers/
-
Alpine Linux rebuilds GitLab after attempted RCE attack
Tags: attack, exploit, gitlab, hacker, infrastructure, linux, open-source, password, rce, remote-code-execution, vulnerabilityHackers attempted to exploit a critical GitLab vulnerability in Alpine Linux’s development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/alpine-linux-rebuilds-gitlab-after-attempted-rce-attack/
-
The 5 Best Cyber Range Tools for Security Teams in 2026
A data breach now costs $4.99 million on average, according to IBM’s 2026 report. Slow responses cost more. Cyber range platforms let your security operations center (SOC) rehearse real attacks before they hit production. This guide covers: Read on to find the right fit for your team. Which cyber range tools are worth shortlisting in…
-
SMS of Death: Android under attack, an invisible SMS can block calls and emergency services
SMS of Death lets attackers crash Android call services with a hidden, zero-click message, blocking phone calls, even emergency calls too. A specially manipulated SMS message is enough to crash Android’s phone service, interrupt ongoing calls, and temporarily render the smartphone unusable. The attack requires no interaction from the victim and can even compromise the…
-
Hackers Impersonate IT Help Desk on Microsoft Teams to Gain Domain Admin Access via AD CS Attacks
Hackers impersonated IT help desk personnel on Microsoft Teams to gain remote access and abuse Active Directory Certificate Services (AD CS), turning approved support sessions into privileged authentication paths. Microsoft disclosed two intrusions on October 30, 2026, involving certificate template abuse and NTLM relay. The attacks did not exploit a Teams vulnerability. Instead, operators combined…
-
Hackers Impersonate IT Help Desk on Microsoft Teams to Gain Domain Admin Access via AD CS Attacks
Hackers impersonated IT help desk personnel on Microsoft Teams to gain remote access and abuse Active Directory Certificate Services (AD CS), turning approved support sessions into privileged authentication paths. Microsoft disclosed two intrusions on October 30, 2026, involving certificate template abuse and NTLM relay. The attacks did not exploit a Teams vulnerability. Instead, operators combined…
-
WordPress RCE Vulnerability Under Active Attack With Over 58,000 Exploit Attempts Blocked
Tags: attack, cyber, exploit, hacker, rce, remote-code-execution, software, vulnerability, wordpressHackers are attempting to exploit an unauthenticated remote code execution vulnerability in WordPress Core, targeting a brief exposure window during software updates. The supplied Wordfence record reports 58,693 blocked attacks within 24 hours, representing nearly 60,000 attempts rather than confirmed successful compromises. WordPress released version 7.1.4 on October 28, 2026, addressing 22 security vulnerabilities. The…
-
Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday.The web infrastructure and security company said it autonomously mitigated 18.2 million network-layer (L3) DDoS attacks and 14.4 trillion HTTP DDoS requests in the third quarter of 2026. That amounts to 197,400 attacks per day, or one attack every 0.44…
-
Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%
Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday.The web infrastructure and security company said it autonomously mitigated 18.2 million network-layer (L3) DDoS attacks and 14.4 trillion HTTP DDoS requests in the third quarter of 2026. That amounts to 197,400 attacks per day, or one attack every 0.44…
-
Critical Linux kernel flaw allows remote root attacks on MPTCP servers
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-linux-kernel-flaw-allows-remote-root-attacks-on-mptcp-servers/
-
ISMG Editors: PHP2Shell Fuels Cybersecurity’s Black October
Also: US Healthcare Faces New Risks, Anthropic’s Cloud Dependence Raises AI Risks. In this week’s panel, four ISMG editors discussed the PHP2Shell threat and the Black October attacks, U.S. healthcare cybersecurity and deregulation, and what Anthropic’s newly disclosed financials reveal about its business model and dependence on major cloud providers. First seen on govinfosecurity.com Jump…
-
A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices
Thanks to a lucky break, flawed code in a tainted Claude extension prevented the attacker from fully worming their way into some 5,000 developer machines. First seen on wired.com Jump to article: www.wired.com/story/trojan-malware-targets-thousands-of-anthropic-claude-developer-systems/
-
Hospital Cyberattacks Bring Disruptions, Legal Fallout
New Mexico, Ohio Ransomware Attacks Raise Concerns as Feds Settle Pennsylvania Case. Cyber incidents at university health systems in New Mexico and Ohio disrupted patient care and sparked data theft concerns and litigation. Meanwhile, a Pennsylvania health system faces an $800,000 HIPAA settlement over a 2023 ransomware attack that exposed sensitive cancer patient photos. First…
-
$6.3 Billion Stolen from Binance in Attack Attributed to North Korea
Binance links a $6.3 billion crypto theft to a compromised DevOps laptop, with North Korean hackers blamed by blockchain analysts. Binance was investigating suspicious transfers that early estimates put at up to $5.8 billion. A day later, multiple media outlets reported that the largest cryptocurrency exchange had linked the theft of about $6.3 billion to…
-
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously.The activity has been attributed by CrowdStrike to a China-based “targeted intrusion adversary” it tracks under the moniker Vapor Panda (previously VexatiousTemper). First identified in First seen on thehackernews.com Jump to…
-
TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the viewer, and the machine it controls is the host.A malicious or compromised host can exploit the flaw to crash…
-
TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the viewer, and the machine it controls is the host.A malicious or compromised host can exploit the flaw to crash…
-
TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control Them
TeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the viewer, and the machine it controls is the host.A malicious or compromised host can exploit the flaw to crash…