Revolut scam wave steals £180,000 from Jersey residents in just four weeks
If you live in Jersey and bank with Revolut, you should be on your guard against scam phone calls. Because local police on the largest of the Channel Islands...
general
20 articles
BGP hijacking incident diverts traffic, targeting Softaculous and Virtualizor users
The incident began around 20:57 UTC on August 28, when an unknown network began announcing a block of IP addresses belonging to Hetzner, a Softaculous upstre...
SonicWall Patches Two New Actively Exploited Zero-Days in SMA 1000 VPNs
SonicWall patched two zero-days in SMA 1000 VPNs, including a CVSS 10 pre-auth SSRF flaw, after confirming active exploitation. SonicWall has released securi...
Malicious Composer themes deliver spyware to unpatched iOS devices
The malicious code performs two main functions: a mobile ad-fraud and gambling-redirect chain, and a WebKit-to-kernel exploit chain on iPhones that installs ...
Breeze Comet threat actor targets Brazilian financial sector with sophisticated attacks
Breeze Comet gains initial access through password spraying and social engineering tactics, impersonating IT support to trick victims into installing Remote ...
Leaked documents reveal Russian military cyber recruitment pipeline
Originally reported on by DomainTools and GBHackers, the documents detail a force-generation mechanism for General Staff components, including the GRU and th...
Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository's own Git configuration names a command...
Ransomware protection for MSPs: A 6-point checklist for faster recovery
Ransomware resilience requires more than backups or endpoint detection alone. Acronis outlines six capabilities MSPs should test across client environments, ...
Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons
Gambling Goblin compromised Brazilian government sites to drive gambling traffic through SEO fraud
NASCIO urges Congress to reauthorize grant program and address AI governance
NASCIO's executive director, Doug Robinson, outlined three federal priorities in a letter to congressional leaders: reauthorizing the SLCGP, reauthorizing Fi...
Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on compromised web servers run by Brazil...
65% of enterprises see AI agents acting outside of scope
A report by Enterprise Management Associates (EMA) for Cequence Security found that 65% of surveyed enterprises have seen AI agents act outside their scope, ...
New PackClient RAT sold on Telegram
The PackClient RAT, observed by Proofpoint, offers a wide range of capabilities including file theft, remote shell execution, screen capture, and keylogging.
Firefox for iPhone Adds Built-In Ad Blocker to Block Third-Party Ads and Trackers
Mozilla has introduced a built-in ad blocker for Firefox on iOS, providing iPhone users with a native option to block many third-party advertisements and adv...
Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911)
Nearly 22,000 Microsoft Exchange servers remain unpatched against CVE-2026-62911, a critical authentication bypass vulnerability, according to daily scans fr...
255 Fake Accounts Used to Send Malicious Excel Files to 80,000 Freelancers
A Russian national has been extradited to the United States to face charges over an alleged phishing operation that used 255 fake accounts on a freelance emp...
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to divert Softaculous traffic. The hackers then used the diverted update traffic to deli...
Singularity Rootkit Bypasses Elastic Defend eBPF Module Load Detection
Security researcher has disclosed a technique used by the Singularity Linux rootkit to evade Elastic Defend by suppressing module-load telemetry to avoid det...
Download: The Agentic Software Development Guide
AI makes it easy to ship more code. It does not make that code easier to trust.
Hackers expose donor data from Russian fundraisers for Ukrainians, political prisoners
Hackers reportedly gained access to payment accounts used by two Russian fundraising projects supporting Ukrainians and political prisoners, exposing donor e...