Security

Pay to live: scammers spamming fake death threats in Switzerland

Spammers are actively disseminating fake emails with faux death threats. The Swiss National Cyber Security Center (NCSC) urges you to ignore them.
Read more about Pay to live: scammers spamming fake death threats in Switzerland

SonicWall under attack: CISA issues warning after cloud backup breach

SonicWall, a major provider of VPNs, firewalls, and other network security solutions, has alerted users about a data compromise affecting cloud backups for “fewer than 5%” of its firewall install base. Security researchers from Arctic Wolf are warning of a targeted ransomware campaign targeting SonicWall devices.
Read more about SonicWall under attack: CISA issues warning after cloud backup breach

DARPA, NASA software partner claimed by ransomware gang

The company, allegedly under attack, frequently works with US government bodies such as DARPA, the Department of War (DoW), and other key institutions.
Read more about DARPA, NASA software partner claimed by ransomware gang

Mac users targeted by large-scale attacks delivering infostealer malware

Mac users are being targeted by unknown threat actors offering malicious versions of well-known software, including LastPass, 1Password, and Thunderbird, via the developer platform GitHub.
Read more about Mac users targeted by large-scale attacks delivering infostealer malware

Hackers say they nabbed Brazil’s police medical files in massive breach

Hackers claim to have stolen two terabytes of Brazilian Military Police medical records in a breach that could expose officers and their families.
Read more about Hackers say they nabbed Brazil’s police medical files in massive breach

Attackers claim 150K users via data breach of insurance firm AIL

American Income Life (AIL), a major American supplemental insurance company, has allegedly had hundreds of thousands of customer records stolen, exposing personal details and insurance data.
Read more about Attackers claim 150K users via data breach of insurance firm AIL

Criminals plant fake CAPTCHAs on vibe-coding platforms, luring users to phishing pages

AI-powered development platforms are being used to host fake CAPTCHA pages that evade detection and deceive users, leading them to phishing websites, researchers have found.
Read more about Criminals plant fake CAPTCHAs on vibe-coding platforms, luring users to phishing pages

European airports struggle to fix check-in glitch after cyberattack

Some of Europe's biggest airports battled to restore normal operations on Sunday after hackers disrupted automatic check-in systems, with Brussels asking airlines to cancel half of Monday's flight departures due to persistent problems.
Read more about European airports struggle to fix check-in glitch after cyberattack

“Make it a quadruple no:” Why you might not want to connect your Oakley Meta Vanguard to Strava


New kid on the block Warlock ransomware gang makes moves as attacks surge

The Warlock ransomware group, already linked to an outbreak of Microsoft SharePoint attacks this July, has been stepping up its attacks in recent weeks – and with a twist of ingenuity, Sophos researchers say.
Read more about New kid on the block Warlock ransomware gang makes moves as attacks surge

A lesson from NPM hacks: It’s time to remove the human factor from authentication factors

As the JavaScript ecosystem is still recovering from the massive supply chain attacks targeting NPM software packages, one thing is clear—you need phishing-resistant authentication now, urges Johannes B. Ullrich, Ph.D., dean of research at SANS.edu.
Read more about A lesson from NPM hacks: It’s time to remove the human factor from authentication factors

FBI warns bad actors are spoofing the IC3 cybercrime reporting website

The FBI has warned that cybercriminals are creating fake versions of its Internet Crime Complaint Center (IC3) website, a site used by the public to report online cyber scams.
Read more about FBI warns bad actors are spoofing the IC3 cybercrime reporting website

Amateur porn website users’ data leaked online, hackers claim

Attackers claim they’ve obtained a trove of personal details from MyHomemadePorn, an amateur adult content platform. However, the Cybernews research team believes the data could be fake.
Read more about Amateur porn website users’ data leaked online, hackers claim

Hackers say they’ve jacked SK Telecom’s source code

Hackers claim to have infiltrated SK Telecom’s systems, allegedly stealing source code and exposing sensitive internal projects. It could be the company’s second cyber blow this year.
Read more about Hackers say they’ve jacked SK Telecom’s source code

Hackers claim attack on the US's biggest sushi supplier – again?

A church-run sushi supplier, the biggest in the US, may be facing its second major cyberattack in a year, with new leaked data raising questions about another breach.
Read more about Hackers claim attack on the US's biggest sushi supplier – again?

Hackers claim breach of Italian post, researchers disagree

The Cybernews research team says the supposed leak looks a lot like old data with made-up details.
Read more about Hackers claim breach of Italian post, researchers disagree

iOS malicious deepfakes put Apple users and banks at risk

Security researchers have found a malicious new tool that can inject deepfake videos straight into iOS devices. The tool presents a major risk for identity theft, so Apple users should be wary.
Read more about iOS malicious deepfakes put Apple users and banks at risk

Hackers now going straight to the source – company data backups

A fifth of organizations in the UK report attacks on backups as the main cause of data breaches.
Read more about Hackers now going straight to the source – company data backups

Hackers can flip bits in RAM to escalate privileges and take over systems

Even if hackers don’t have access to the specific DDR5 memory cells that store critical information, they can manipulate electrical charges and reliably cause bit flips, corrupting the data or even elevating their privileges, new Google-backed research has revealed.
Read more about Hackers can flip bits in RAM to escalate privileges and take over systems

Baltimore hospital network victim of major data breach, hackers claim

Baltimore Medical System (BMS), a federally funded US health system, has been claimed by a hacker gang. The attackers claim they’ve stolen several terabytes of data from the healthcare provider, which mostly operates in underserved areas.
Read more about Baltimore hospital network victim of major data breach, hackers claim