Apple iCloud Mail vulnerabilities allowed spoofed sender addresses
Two vulnerabilities discovered in Apple’s iCloud Mail infrastructure allowed authenticated users to send emails that appeared to originate from any @icloud.c...
general
20 articles
Iranian hacker Amir Barati faces extradition to the US over alleged data theft campaign
Iranian hacker Amir Barati, a dual Turkish and Iranian citizen, has been arrested in Montenegro and a court has approved his extradition to the United States.
University of Illinois Chicago College of Medicine systems impacted by ransomware attack
The University of Illinois Chicago (UIC) recently experienced a ransomware attack that disrupted access to certain systems within its College of Medicine, le...
AI platforms like ChatGPT are now targets for web scraping
AI platforms are increasingly becoming targets for web scraping, a significant shift from their traditional role of gathering information.
South Korean financial institutions face cyberattacks, AI suspected
South Korea's Financial Services Commission (FSC) convened an emergency meeting following a series of cyberattacks that have impacted several financial insti...
Microsoft's X account briefly hijacked for cryptocurrency scam
Microsoft's official X account was briefly compromised and used to promote a cryptocurrency scam involving a token named $CLIPPY.
Hackers accessed names, addresses, and CPR numbers of 8.8 million people in Denmark
Hackers gained access to the names, addresses, and CPR numbers of 8.8 million people in Denmark through a third-party company with legal registry access.
Italy fines IQVIA $7.8 million for patient data privacy violations
Italy's Data Protection Authority (GPDP) has fined IQVIA €7 million (approximately $7.8 million) for inadequate data-processing practices that potentially ex...
Bromcom notifies customers of personal data breach affecting SSO technology
According to The Register, UK education software provider Bromcom has alerted its customers to a personal data breach impacting its single sign-on (SSO) tech...
Wikimedia Foundation: OpenAI agents tried to edit pages and compromise notes tool
Beyond the potential misuses of its services, Wikimedia said activity by AI agents can be a drain on web platforms that are already operating with limited re...
Rejetto HFS servers now actively scanned for critical RCE flaw
Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and...
Alleged ShinyHunters member reportedly detained in Jordan, assisting law enforcement
Saif al-Din Khader is cooperating with the FBI, reports said, as the bureau responds to a massive breach that exposed employee data.
New Citrix Netscaler zero-day exploited just days after recent attacks
Third exploited NetScaler flaw in a week signals attackers are moving faster than patch cycles.
Authenticated Doesn’t Mean Safe: Why AI Agents Need Action-Level Security
AI agents can misuse legitimate access.
Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It.
AI-assisted research uncovered a critical Rejetto HFS flaw that enables authentication bypass and remote code execution, now exploited in the wild. A Rejetto...
US, Australia warn of latest Citrix vulnerability after NetScaler advisory
Citrix confirmed late on Friday that it was “tracking a newly observed issue” related to some customer-managed NetScaler deployments but claimed the problem ...
IQVIA fined $7.8 million for failing to properly anonymize health data
Italy's Data Protection Authority (GPDP) has fined IQVIA €7 million ($7.8M) over poor data-processing practices that the agency says could have put roughly o...
Ukraine grocery chain ATB confirms cyberattack as hackers threaten to leak data
Ukraine’s largest grocery store chain, ATB, confirmed that it was hit by a cyberattack after hackers posted an extortion demand on its website.
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate pri...
NVIDIA can stop a rogue agent. Can it revoke its access?
Quarantining rogue AI agents isn't enough if their credentials and access remain active.