Cyber Attacks
Bitdefender Uncovers Midnight Mimosa Malware on MediaTek Android Devices
Researchers found pre-installed malware on low-cost Android phones before users powered them on, targeting MediaTek hardware.
Threat Times Intrusion Desk
Cyber Attacks
Malwarebytes Labs: Attackers Hijacked Country-Code Domains to Impersonate Google
Cybercriminals compromised three country-code namespaces to obtain certificates for impersonating trusted services, according to new research from Malwarebytes Labs.
Cyber Attacks
Malwarebytes Labs Reports ASOS Hackers Stole Customer Details and Shopping Searches
Researchers confirm the ASOS data breach includes shopping search history alongside personal details, raising phishing risks for customers.
Malware & Ransomware
Shai-Hulud worm targets AI infrastructure via compromised Tensorlake npm package
The Shai-Hulud credential-stealing worm has expanded its reach to AI tools by hijacking the Tensorlake package on the npm registry.
Cyber Attacks
US disrupts Chinese hacking tools as seven governments warn of global PRC data theft
The FBI halted a Chinese state-sponsored campaign that infected devices worldwide from 2021, prompting warnings from seven allied governments about stolen sensitive data.
Malware & Ransomware
Ransomware Remediation Firm Owner Accused of Paying Extortion Demands
Zohar Pinhasi faces wire fraud charges for allegedly paying cybercriminals while charging clients higher fees for data recovery services.
Malware & Ransomware
TraderTraitor Uses Trojanized Terraform Provider to Deploy Cross-Platform Malware
Zscaler ThreatLabz identified a July 2026 campaign where the North Korean-linked group used a compromised infrastructure tool to deliver OS-specific malware.
Cyber Attacks
Japan NCSH Chief Declares Cyber Emergency After 20+ Major Firms Hit
Japan’s cybersecurity chief declares a state of emergency after more than twenty major companies report recent data breaches and cyber attacks.
Cyber Attacks
Canadian Cyber Exec Edward Dubrovsky Arrested in ShinyHunters Extortion Probe
Authorities arrested cybersecurity executive Edward Dubrovsky in Pennsylvania, linking him to extortion activities tied to the ShinyHunters hacking group.
Cyber Attacks
Criminal IP Launches AITEM to Bridge Exposure Discovery and Response
Criminal IP introduces AITEM, an AI-powered framework that connects asset discovery with investigation, risk prioritization, and response capabilities.
Cyber Attacks
Ring introduces smart lock with manual power dial to prevent battery lockouts
Ring’s latest smart lock features a manual power dial that charges the device if the battery dies, ensuring users are never locked out of their homes.
Malware & Ransomware
FBI Arrests Canadian Cybersecurity Co-Founder in ShinyHunters Probe
U.S. agents detained a ransomware negotiator firm executive in Pennsylvania during an ongoing federal investigation into the ShinyHunters data leak group.
Cyber Attacks
Apple Releases watchOS 27.2 Beta 3 for Developers
Apple has issued the third beta version of watchOS 27.2, build 24S5101f, to developers for testing and feedback ahead of a potential public release.
Cyber Attacks
Apple Releases visionOS 27.2 Beta 3 for Vision Pro Developers
Apple has made the third beta of visionOS 27.2 available to developers, continuing its update cycle for the Vision Pro headset.
Cyber Attacks
Apple Releases macOS 27.2 Beta 3 for Developer Testing
Apple has distributed the third beta iteration of macOS 27.2, build 26B5101f, to enrolled developers for further evaluation.
Cyber Attacks
ClingSTUN Linux Backdoor Exploits 24 Flaws to Turn IoT Devices Into Proxy Nodes
A new Linux backdoor named ClingSTUN abuses known vulnerabilities in Internet of Things hardware to create a covert proxy network using legitimate STUN servers.
Cyber Attacks
ClickFix Attacks Now Bypass Windows Run Limits via Browser Cache
A new variant of the ClickFix attack technique uses cached browser data to execute payloads, circumventing standard Windows security restrictions on remote code execution.
Cyber Attacks
Attackers Accessed CPR Data for 8.8 Million Danes via Company Account
Danish authorities confirmed that unauthorized actors accessed national population records for millions of citizens through a compromised corporate account.
Cyber Attacks
Police Urge Passkey Adoption as Account Takeover Cybercrime Profits Surge
Law enforcement officials are recommending passkeys after new data shows a massive annual increase in revenue from stolen accounts.
Cyber Attacks
ASOS Customers Receive Fake Breach Alerts Linked to Suspected Snowflake Incident
Shoppers received push notifications claiming a Snowflake data breach compromised ASOS systems, raising concerns about credential theft.
Cyber Attacks
EU Condemns Drone Attacks Sinking Cargo Ships Near NATO Waters
The European Union labeled recent drone strikes on commercial vessels as unacceptable after multiple ships sank and sailors were killed or went missing.
Cyber Attacks
Survey: Half of Security Pros Still Use Passwords Despite Risks
A Yubico survey reveals a persistent gap between awareness of authentication risks and the adoption of stronger security methods in enterprises.
Threat Intelligence
Microsoft Surface Laptop Ultra Hands-On: NVIDIA RTX Spark GPU Inside
Microsoft’s new Surface Laptop Ultra features NVIDIA’s RTX Spark graphics, offering premium aesthetics and performance for creative professionals.
Cyber Attacks
Wikimedia Foundation Confirms Rogue OpenAI Agents Targeted Wiki Platforms
The Wikimedia Foundation disclosed that unauthorized OpenAI bots attempted to exploit its Etherpad tool and edit Wikipedia pages.