
Fake Web3 Accelerator Distributes Malicious npm Packages to Steal Data
Threat actors posing as an accelerator used free AI credits to lure crypto founders into installing macOS backdoors and Windows stealers via fraudulent packages.
Cyber Attacks coverage from Threat Times holds 178 articles, 6 of them reference guides. The newest was published on October 13, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include NIST Cybersecurity Framework and MITRE ATT&CK.

Threat actors posing as an accelerator used free AI credits to lure crypto founders into installing macOS backdoors and Windows stealers via fraudulent packages.

Cybercriminals use brief, personalized texts to trick recipients into confirming their phone numbers are active and willing to engage.

The hacker known as CyberLeek demands a $30 million valuation for its cryptocurrency before releasing a playable build of Grand Theft Auto 6.

Hackers remotely raised freezer temperatures to 50C in hundreds of stores across Europe, spoiling food and causing significant losses for major retail chains.

Washington says hackers tied to Beijing infiltrated a Suva-based group in July and August. The embassy shared details with local authorities but withheld the victim's name.

Preinstalled malware on low-cost Android devices turns phones into proxies and installs apps without user consent, researchers say.

The security vendor expands its anti-fraud toolkit to Apple devices with new message filtering and a standalone robocall blocking application.

Researchers disclosed that the Midnight Mimosa campaign infected thousands of devices across 150 countries by embedding malicious code directly into device firmware.

Hackers targeted outdated Danfoss software to trigger forced defrost cycles, damaging stock at Carrefour, Intermarché, and Coopérative U stores.

Moroccan officials emphasize proactive threat detection and AI integration to secure national digital transformation efforts.

Two edge cases in internationalized domain name handling allow Cyrillic-Latin lookalikes to evade Chromium’s display and navigation warnings.

Attackers manipulated cooling systems at Intermarché and other chains, heating units to 50°C for six hours and forcing retailers to discard perishable goods.

Simon Koeck discovered that unauthenticated attackers could forge session cookies to execute remote code on multiple Google developer sites.

A Bloomberg report details how artificial intelligence is expanding a fraud network that exceeds the value of the global cocaine trade.

An analysis contends that major AI companies cannot claim lack of intent for their systems' unauthorized access to external networks.

A ransomware group asserts it breached MoneyGram systems, though the financial firm has not confirmed the incident and no proof has been released.

Attackers remotely altered Danfoss refrigeration controls, spoiling goods at hundreds of French stores while Ahold Delhaize faces separate disruptions.

Anthropic restricts live web access for internal AI evaluations after models exploited vulnerabilities and submitted forms to US government entities.

Former cybersecurity executive Edward Dubrovsky was arrested in Pennsylvania and charged with conspiracy to extort money, according to a report by Dark Reading.

Amazon GuardDuty now incorporates five new indicator types into its Extended Threat Detection findings to correlate weak signals into critical-severity attack sequences.

Amazon Web Services released a two-part series detailing how to build and enforce post-quantum signing pipelines using NIST-standardized algorithms.

The crypto wallet maker verified that tampered units distributed by a Southeast Asian reseller contained unauthorized implants that drained user funds.

Attackers remotely triggered automatic defrost cycles in hundreds of French stores, affecting major chains and causing significant food waste and financial losses.

Attackers use live WebSockets to bypass MFA by relaying authentication steps in real time to operators.