Cyber Attacks
Attackers Use Comp GitHub Maintainer Accounts to Seed Credential Theft Workflows
Researchers reveal a campaign using stolen maintainer credentials to inject malicious GitHub Actions into hundreds of open-source repositories.
Cyber Attacks
Cyber Attacks
Hackers Abuse Bing Redirects and Google Ads to Distribute ClickFix Malware
Attackers are leveraging legitimate Bing search redirects within Google Ads to trick users into downloading fake Claude installers that deploy the ClickFix malware.
Cyber Attacks
Palestinian driver creates Telegram network for safe West Bank navigation
Anas Hattab launched a Telegram group to help drivers avoid checkpoints and dangers in the occupied West Bank.
Cyber Attacks
CyberScoop warns quantum advances threaten current encryption standards
Rapid progress in quantum computing necessitates immediate federal preparation for post-quantum cryptographic defenses.
Cyber Attacks
PoeLLM Botnet Hides C2 in GitHub Poem, Infects 3,400 Servers
Black Lotus Labs reports a cryptomining botnet using a GitHub poem to hide command-and-control addresses, compromising over 3,400 servers.
Cyber Attacks
Empire Market Co-Creator Sentenced to 40 Years for Facilitating $430 Million in Crimes
A co-founder of the dark web marketplace Empire Market has been sentenced to 40 years in prison for enabling hundreds of millions in illegal transactions.
Cyber Attacks
ANY.RUN Identifies Wazza Phishkit Targeting US, EU, and Australian Sectors
Analysis reveals Wazza phishkit employs advanced session management to target banking, government, and manufacturing entities across three continents.
Cyber Attacks
ASOS attributes recent data breach to social engineering and credential theft
Online retailer ASOS confirms attackers used social engineering to steal credentials and access customer personal data in a recent incident.
Cyber Attacks
Linus Torvalds defends AI coding for debugging, rejects it for Linux kernel development
Linux creator Linus Torvalds says AI aids his workflow for specific tasks like finding bugs, but insists it is unsuitable for core kernel development.
Cyber Attacks
Cloudflare Launches Clef-omni Multimodal AI Model with Speed and Price Cuts
Cloudflare expands its AI lineup with a new multimodal model, faster inference speeds, and reduced pricing for existing tools.
Cyber Attacks
SIM Swapping Myths Debunked: Why Standard Security Fails
SIM swapping bypasses traditional network defenses by exploiting human trust at the carrier level, rendering technical perimeters ineffective against social manipulation.
Cyber Attacks
Vendor Email Compromise: How Impersonation Bypasses Trust
Attackers exploit your inherent trust in known business partners to bypass standard security filters and extract sensitive data.
Cyber Attacks
How DNS Amplification Attacks Work: A Step-by-Step Breakdown
Attackers exploit public resolvers to turn tiny queries into massive floods, amplifying traffic by orders of magnitude through protocol quirks.
Cyber Attacks
Security Culture Definition: Why Policies Fail Without Shared Behavior
Security culture is the invisible layer of shared assumptions that determines whether technical controls succeed or fail during an incident response.
Cyber Attacks
Social Engineering Warning Signs and How to Respond
Attackers exploit human psychology faster than technical controls can intercept, making behavioral anomalies the primary detection vector for compromise attempts.
Cyber Attacks
Google Maps Expands Dining Features With Integrated Food Ordering Capabilities
Google Maps now allows users to order meals directly within the app, integrating restaurant discovery with transactional tools.
Cyber Attacks
ESET Reveals Phishing Campaign Targeting YouTubers with Fake Sponsorship Offers
Scammers impersonate brands to trick creators into handing over Google account credentials via fake verification platforms.
Cyber Attacks
US Offers $10 Million Reward for Arrest of Alleged Hafnium Hacker Zhang Yu
Federal authorities have charged Zhang Yu with cyberespionage activities tied to the Hafnium group, offering a substantial bounty for information leading to his arrest.
Cyber Attacks
FBI and French Authorities Arrest Suspect in NudeLeaksTeens Operation
Law enforcement seized domains selling stolen intimate images of thousands of women and arrested the suspected administrator in France.
Cyber Attacks
Asos Admits Cloud Data Breach After Hackers Alert Users via Push Notification
The online retailer confirmed customer data was exposed after attackers sent a notification claiming full access to its cloud infrastructure.
Cyber Attacks
FBI Arrests Suspected ShinyHunters Operative in Major Cybercrime Takedown
Federal agents have detained a key member of the ShinyHunters group, marking a significant enforcement action against the notorious cybercrime syndicate.
Cyber Attacks
Midnight Mimosa malware found embedded in firmware of low-cost Android phones
Researchers report that budget Android devices are shipping with pre-installed malware that turns phones into residential proxies and performs ad fraud.
Cyber Attacks
DOJ and FBI Seize Flax Typhoon-Linked Hacking Tools Microscan and FishHub
U.S. authorities seized two command-and-control tools linked to the Chinese state-sponsored group Flax Typhoon, accompanied by a joint warning from federal agencies.
Cyber Attacks
Lawmakers warn Google Spirit Airlines AI deal exposes sensitive employee data
US lawmakers raise alarms over a proposed $10 million agreement that would provide Google with vast amounts of private Spirit Airlines employee records for AI training.