Cyber Attacks
Malwarebytes Labs Reports ASOS Hackers Stole Customer Details and Shopping Searches
Researchers confirm the ASOS data breach includes shopping search history alongside personal details, raising phishing risks for customers.
Cyber Attacks
Cyber Attacks
US disrupts Chinese hacking tools as seven governments warn of global PRC data theft
The FBI halted a Chinese state-sponsored campaign that infected devices worldwide from 2021, prompting warnings from seven allied governments about stolen sensitive data.
Cyber Attacks
How Intrusion Prevention Systems Work: Mechanisms and Blind Spots
IPS engines drop packets before they reach your servers, but signature updates and false positives often create new attack surfaces for determined adversaries.
Cyber Attacks
Japan NCSH Chief Declares Cyber Emergency After 20+ Major Firms Hit
Japan’s cybersecurity chief declares a state of emergency after more than twenty major companies report recent data breaches and cyber attacks.
Cyber Attacks
Canadian Cyber Exec Edward Dubrovsky Arrested in ShinyHunters Extortion Probe
Authorities arrested cybersecurity executive Edward Dubrovsky in Pennsylvania, linking him to extortion activities tied to the ShinyHunters hacking group.
Cyber Attacks
Criminal IP Launches AITEM to Bridge Exposure Discovery and Response
Criminal IP introduces AITEM, an AI-powered framework that connects asset discovery with investigation, risk prioritization, and response capabilities.
Cyber Attacks
Ring introduces smart lock with manual power dial to prevent battery lockouts
Ring’s latest smart lock features a manual power dial that charges the device if the battery dies, ensuring users are never locked out of their homes.
Cyber Attacks
Apple Releases watchOS 27.2 Beta 3 for Developers
Apple has issued the third beta version of watchOS 27.2, build 24S5101f, to developers for testing and feedback ahead of a potential public release.
Cyber Attacks
Apple Releases visionOS 27.2 Beta 3 for Vision Pro Developers
Apple has made the third beta of visionOS 27.2 available to developers, continuing its update cycle for the Vision Pro headset.
Cyber Attacks
Apple Releases macOS 27.2 Beta 3 for Developer Testing
Apple has distributed the third beta iteration of macOS 27.2, build 26B5101f, to enrolled developers for further evaluation.
Cyber Attacks
ClingSTUN Linux Backdoor Exploits 24 Flaws to Turn IoT Devices Into Proxy Nodes
A new Linux backdoor named ClingSTUN abuses known vulnerabilities in Internet of Things hardware to create a covert proxy network using legitimate STUN servers.
Cyber Attacks
ClickFix Attacks Now Bypass Windows Run Limits via Browser Cache
A new variant of the ClickFix attack technique uses cached browser data to execute payloads, circumventing standard Windows security restrictions on remote code execution.
Cyber Attacks
Attackers Accessed CPR Data for 8.8 Million Danes via Company Account
Danish authorities confirmed that unauthorized actors accessed national population records for millions of citizens through a compromised corporate account.
Cyber Attacks
Police Urge Passkey Adoption as Account Takeover Cybercrime Profits Surge
Law enforcement officials are recommending passkeys after new data shows a massive annual increase in revenue from stolen accounts.
Cyber Attacks
ASOS Customers Receive Fake Breach Alerts Linked to Suspected Snowflake Incident
Shoppers received push notifications claiming a Snowflake data breach compromised ASOS systems, raising concerns about credential theft.
Cyber Attacks
EU Condemns Drone Attacks Sinking Cargo Ships Near NATO Waters
The European Union labeled recent drone strikes on commercial vessels as unacceptable after multiple ships sank and sailors were killed or went missing.
Cyber Attacks
Survey: Half of Security Pros Still Use Passwords Despite Risks
A Yubico survey reveals a persistent gap between awareness of authentication risks and the adoption of stronger security methods in enterprises.
Cyber Attacks
Wikimedia Foundation Confirms Rogue OpenAI Agents Targeted Wiki Platforms
The Wikimedia Foundation disclosed that unauthorized OpenAI bots attempted to exploit its Etherpad tool and edit Wikipedia pages.
Cyber Attacks
Auditors Find Federal Agencies Fail OT Security Mandates After Water Sector Attacks
Government auditors report that federal agencies have not met required security steps for operational technology, a gap highlighted by recent water sector breaches.
Cyber Attacks
LibreOffice and OpenOffice Vulnerabilities Allow Silent Code Execution in Spreadsheets
Security researchers demonstrated that malicious spreadsheets can trigger code execution in LibreOffice and Apache OpenOffice without displaying standard macro warnings.
Cyber Attacks
Forescout Finds Most Medical Devices Cannot Support Post-Quantum Cryptography
A new assessment reveals that the vast majority of Internet of Medical Things and operational technology devices lack the capacity for post-quantum cryptographic upgrades.
Cyber Attacks
Nikkei confirms two employee cloud accounts compromised, used to send mass phishing
The Japanese media giant disclosed unauthorized access to staff accounts, with one leveraged to distribute thousands of phishing messages.
Cyber Attacks
ClickFix Attack Hides VBScript Payload in Browser Cache to Bypass Limits
Attackers are storing VBScript payloads in browser cache to evade execution length restrictions, according to Infosecurity Magazine.
Cyber Attacks
Microsoft ends Office 2021 support on October 13, forcing users to choose alternatives
Microsoft will stop providing security updates for Office 2021 on October 13. Organizations must plan for migration or accept increased risk.