Tag: hacker
-
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-now-exploiting-critical-node2shell-flaw/
-
Three Japan-Focused Cyberattacks Show How Hackers Use AI
Three Japan-focused cyberattacks show how AI helps hackers scale operations, while exploiting old systems and weak security remains key. In autumn 2026, Japanese companies and other organizations reported a series of data leaks involving their web systems. On October 9, Japan’s National Cybersecurity Office issued a warning to businesses, while the head of the ruling…
-
Hackers Hijack Camera Management Software to Deploy Reverse Shells and Hidden Windows Malware
Attackers are compromising camera management software to gain remote access, run malicious DLLs through a legitimate Windows component, and maintain persistent footholds in enterprise environments. The incidents show how overlooked surveillance applications can become entry points into broader corporate networks. Huntress observed several intrusions during September and October involving CMS.exe, a camera management application installed…
-
AI-Powered Hackers Target Japanese Companies With Automated Attacks and Credential Theft
Tags: ai, attack, credentials, cyber, cybersecurity, data-breach, hacker, intelligence, theft, threat, toolThreat actors targeting Japanese organizations are using artificial intelligence to automate intrusion workflows, speed up attack planning, and develop credential-theft tools, according to an investigation of three exposed attack infrastructures. The findings show distinct levels of AI involvement, from autonomous agents conducting attacks to experienced operators using generated scripts. The research follows Japan’s National Cybersecurity…
-
AI-Powered Hackers Target Japanese Companies With Automated Attacks and Credential Theft
Tags: ai, attack, credentials, cyber, cybersecurity, data-breach, hacker, intelligence, theft, threat, toolThreat actors targeting Japanese organizations are using artificial intelligence to automate intrusion workflows, speed up attack planning, and develop credential-theft tools, according to an investigation of three exposed attack infrastructures. The findings show distinct levels of AI involvement, from autonomous agents conducting attacks to experienced operators using generated scripts. The research follows Japan’s National Cybersecurity…
-
Firewalls unter Beschuss: Server der US-Regierung mittels PHP2Shell infiltriert
Chinesische Hacker sollen das Internet nach anfälligen Firewalls abgesucht und einige davon infiltriert haben – darunter solche der US-Regierung. First seen on golem.de Jump to article: www.golem.de/news/firewalls-unter-beschuss-server-der-us-regierung-mittels-php2shell-infiltriert-2610-214578.html
-
Hackers Attempt to Breach U.S. Election Commission Systems, Triggering Major Service Outage
Hackers targeted the U.S. Federal Election Commission’s systems, forcing the agency to shut down online services and disrupting campaign finance filings just days before the November 3 midterm elections. The outage delayed fresh spending disclosures, but officials have not confirmed a successful breach or data theft. According to Reuters, an FEC electronic filings officer warned…
-
Japan’s GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach
Japan’s GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay an extortion demand.The reward program opened on October 28 and pays only if a tip helps lead to an arrest or an international wanted notice.…
-
Hackers Abuse Online Ads to Track Starlink Users and Spy on Individuals Across 49 Countries
Advertising infrastructure is increasingly being repurposed as a surveillance channel that can profile internet users and track their movements across sensitive locations, according to research from TrendAI. Investigators identified an operation, referred to as SHADOW-EARTH-79, that made unusual ad purchases and used a reconstructed software interface, suggesting its primary purpose is intelligence gathering rather than…
-
Hackers Use Signed ChatGPT and Claude Binaries to Deploy Yoba Malware
Hackers are exploiting growing interest in AI tools to spread Yoba malware through fraudulent GitHub projects that claim to offer non-existent desktop applications named GPT-5.6 Sol, GPT-6 Astra, and Claude Opus. According to Check Point Research, these repositories and GitHub Pages attracted users through apparent SEO poisoning, with download buttons that delivered malicious ZIP files.…
-
Hackers hijack Convertr analytics script to steal payment card data
A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers’ payment data during checkout. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-hijack-convertr-analytics-script-to-steal-payment-card-data/
-
PHP2Shell Actively Exploited, US Cybersecurity Agency Warns
North Koreans Tied to Active Scanning for Critical Vulnerabilities in PHP. The U.S. Cybersecurity and Infrastructure Security Agency sees critical PHP2Shell vulnerabilities being exploited in the wild, and is requiring federal civilian agencies to rapidly mitigate them. Researchers said North Korean hackers are among the many threat actors showing an interest in the flaws. First…
-
Australia’s Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking
Australia’s cyber agency warns AI will drive more disruptive attacks, helping hackers find vulnerabilities faster and exploit them at greater scale. Australia’s top cyber spy has a blunt message: expect more disruption to everyday services. Abigail Bradshaw, director-general of the Australian Signals Directorate (ASD), says that with each jump in AI capability, more disruption is…
-
Cyberattack Disrupts New Mexico’s Only Trauma Center
UNM Health Diverts Ambulances, Cancels Surgeries; Hackers Claim Data Theft. A cyberattack on the University of New Mexico Health Sciences Center forced the state’s only Level-1 trauma center to temporarily divert ambulances, cancel surgeries and suspend classes. Hackers reportedly threatened the university and claimed to have stolen sensitive data. First seen on govinfosecurity.com Jump to…
-
Hackers Infect 953 Online Stores With Scanner-Evading Code
Tags: hackerAttackers have infected 953 online stores with a scanner-evading JavaScript loader since July 2025 First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/hackers-infect-953-online-stores/
-
Hackers repeatedly breached suppliers holding UK police data, watchdog finds
His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services says British police data has been breach several times this decade through third-party IT suppliers. First seen on therecord.media Jump to article: therecord.media/uk-police-data-breached-from-suppliers-watchdog-report
-
US government says hackers are now exploiting critical PHP web bugs
The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web’s software. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/27/us-government-says-hackers-are-now-exploiting-critical-php-web-bugs/
-
Hackers Abuse Microsoft Teams External Chats to Access Corporate PCs
Hackers impersonate IT support in Microsoft Teams external chats, tricking employees into granting remote access and installing malware on corporate computers. First seen on hackread.com Jump to article: hackread.com/hackers-abuse-microsoft-teams-external-chats-pc/
-
Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support
Threat actors are flooding employees’ inboxes with spam and then contacting them on Microsoft Teams as IT support, offering to fix the problem they created, Arctic Wolf has … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/27/microsoft-teams-social-engineering-fake-it-help-desk/
-
Japan internet giant GMO says hackers posted stolen customer data
Japan’s GMO Internet is verifying alleged customer data posted by suspected hackers following a cloud service breach. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/27/japan-internet-giant-gmo-says-hackers-posted-stolen-customer-data/
-
Exposure-Management für die proaktive Reduktion kritischer Risiken, bevor Hacker diese ausnutzen
Zum Start der IT-Sicherheitsmesse it-sa in Nürnberg kündigt Bitdefender die neue Lösung <> an. Die Lösung bietet eine umfassende Sicht von Risiken und Bedrohungen über die externe und interne Angriffsoberfläche hinweg an. Sie zeigt die Schwächen mit den größten Auswirkungen und minimiert diese. Sie konsolidiert dabei die angezeigten Ergebnisse für die ganze Umgebung […] First…
-
Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key
An attacker who gained access to Keystone’s website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26.Someone with that key could build counterfeit devices that pass the online check owners use to verify a Keystone. A buyer who trusted a counterfeit could…
-
Hackers Use Google Ads to Push Fake Claude Downloads Hosted on Real Claude.ai Domain
Hackers are buying Google Ads to promote fake Claude download pages hosted on Anthropic’s legitimate claude.ai domain, exploiting content-sharing features to distribute malware. The operation does not require compromising Anthropic’s infrastructure. Attackers publish malicious instructions through Shared Chats and public Artifacts, borrowing the platform’s domain and branding while persuading visitors to execute commands themselves. The…
-
Hackers Abuse Magento CMS Blocks to Infect Online Stores and Evade Malware Detection
Hackers are injecting JavaScript into Magento CMS blocks to maintain access to compromised storefronts while selectively hiding malicious responses from security scanners. Registered on October 6, 2026, the domain appeared on infected stores the following evening. Sixty of the 83 victims previously loaded infrastructure belonging to the same operator, including 34 infected since October 2025.…
-
Copenhagen University Breach Compromises Data on Half a Million People
Hackers have stolen personal information on over 520,000 people from the University of Copenhagen First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/copenhagen-university-data-breach/
-
Japan: Bis zu 26.739 Server eines Cloudanbieters gehackt
Hacker sind in Tausende von Cloud-Desktops der japanischen GMO Internet Group eingedrungen. Die erbeuteten Daten sollen extrem umfangreich sein. First seen on golem.de Jump to article: www.golem.de/news/japan-bis-zu-26-739-server-eines-cloudanbieters-gehackt-2610-214540.html
-
University of Copenhagen Confirms Data Breach Affecting 525,000 People
The University of Copenhagen has confirmed a data breach affecting about 525,000 individuals after hackers accessed a test environment that contained personal information. The intrusion was detected on October 20 and publicly disclosed on October 23. Investigators are working to determine the full extent of the exposure. The compromised database included full names, Danish national…