Cyber Attacks
ASOS attributes recent data breach to social engineering and credential theft
Online retailer ASOS confirms attackers used social engineering to steal credentials and access customer personal data in a recent incident.
Threat Times Intrusion Desk
Malware & Ransomware
Rapid7 VP Explains BPFDoor Backdoor Targets Network Edge Devices
Christiaan Beek of Rapid7 Intelligence discusses how the BPFDoor malware uses magic packets to evade detection on mail gateways and telecom infrastructure.
Cyber Attacks
Linus Torvalds defends AI coding for debugging, rejects it for Linux kernel development
Linux creator Linus Torvalds says AI aids his workflow for specific tasks like finding bugs, but insists it is unsuitable for core kernel development.
Malware & Ransomware
Nikon Small World in Motion video disqualified for AI use; new winner named
A winning video entry was disqualified after organizers determined it used artificial intelligence, prompting a reassignment of the top prize to a Vietnamese researcher.
Malware & Ransomware
Japan Extradites Russian National to Germany Over Qilin Ransomware Allegations
Japanese authorities confirmed the arrest and transfer of a suspect linked to the Qilin ransomware group, marking a significant international law enforcement action.
Cyber Attacks
Cloudflare Launches Clef-omni Multimodal AI Model with Speed and Price Cuts
Cloudflare expands its AI lineup with a new multimodal model, faster inference speeds, and reduced pricing for existing tools.
Threat Intelligence
Dark Reading Announces New Decade and Breaking News for Readers
The cybersecurity publication marks ten years of coverage while sharing significant internal updates for its professional audience.
Cyber Attacks
Google Maps Expands Dining Features With Integrated Food Ordering Capabilities
Google Maps now allows users to order meals directly within the app, integrating restaurant discovery with transactional tools.
Cyber Attacks
ESET Reveals Phishing Campaign Targeting YouTubers with Fake Sponsorship Offers
Scammers impersonate brands to trick creators into handing over Google account credentials via fake verification platforms.
Cyber Attacks
US Offers $10 Million Reward for Arrest of Alleged Hafnium Hacker Zhang Yu
Federal authorities have charged Zhang Yu with cyberespionage activities tied to the Hafnium group, offering a substantial bounty for information leading to his arrest.
Cyber Attacks
FBI and French Authorities Arrest Suspect in NudeLeaksTeens Operation
Law enforcement seized domains selling stolen intimate images of thousands of women and arrested the suspected administrator in France.
Cyber Attacks
Asos Admits Cloud Data Breach After Hackers Alert Users via Push Notification
The online retailer confirmed customer data was exposed after attackers sent a notification claiming full access to its cloud infrastructure.
Threat Intelligence
UAC-0099 Refines MatchBoil Malware for Stealthier Espionage Campaigns
Russian-linked spy group UAC-0099 is upgrading its MatchBoil dropper to evade detection while targeting Ukrainian organizations with cyber-espionage operations.
Malware & Ransomware
FBI adds Venezuelan cartel malware leader to 10 Most Wanted Fugitives list
The FBI has designated the alleged head of a cybercriminal unit within the Tren de Aragua cartel as one of its top ten most wanted fugitives for ATM jackpotting.
Cyber Attacks
FBI Arrests Suspected ShinyHunters Operative in Major Cybercrime Takedown
Federal agents have detained a key member of the ShinyHunters group, marking a significant enforcement action against the notorious cybercrime syndicate.
Cyber Attacks
Midnight Mimosa malware found embedded in firmware of low-cost Android phones
Researchers report that budget Android devices are shipping with pre-installed malware that turns phones into residential proxies and performs ad fraud.
Cyber Attacks
DOJ and FBI Seize Flax Typhoon-Linked Hacking Tools Microscan and FishHub
U.S. authorities seized two command-and-control tools linked to the Chinese state-sponsored group Flax Typhoon, accompanied by a joint warning from federal agencies.
Cyber Attacks
Lawmakers warn Google Spirit Airlines AI deal exposes sensitive employee data
US lawmakers raise alarms over a proposed $10 million agreement that would provide Google with vast amounts of private Spirit Airlines employee records for AI training.
Threat Intelligence
Loupe Vulnerability Exposes Android Console Interface in Web Browser
A security researcher has identified a flaw in the Loupe application that allows unauthorized access to an Android console via a standard web browser.
Cyber Attacks
Discourse Image Pipeline Vulnerability Exposed via Race Condition and JPEG Injection
Security researchers have detailed how a race condition in the Discourse forum software allowed attackers to inject malicious code through image uploads.
Cyber Attacks
Midnight Mimosa Malware Found Preinstalled on Budget Android Devices
A malware campaign named Midnight Mimosa is pre-baked into the firmware of low-cost Android devices sold in more than 150 countries, according to SecurityWeek.
Cyber Attacks
Meta Bans ByteDance Ads and TikTok Campaigns in Seven Countries
Meta Platforms restricts advertising from ByteDance and third-party campaigns linking to TikTok across multiple regions, intensifying social media competition.
Cyber Attacks
Dark Reading: Executives' Families Must Match Security Postures to Prevent Breaches
Dark Reading reports that the security weaknesses of an executive’s family members can serve as the primary entry point for cyberattacks.
Cyber Attacks
Searchlight Cyber Discloses GoBalance Flaw Allowing .onion Address Hijacking
A vulnerability in the GoBalance tool enables attackers to recover secret keys from public data and hijack dark-web site addresses.