ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants
The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S.
general
20 articles
Hackers Exploit Check Point 0-Day Flaw to Execute Code on Management Servers
Check Point has issued an urgent security alert about CVE-2026-93616, a critical vulnerability involving directory traversal and arbitrary file uploads. This...
Stealthy WordPress Malware Uses Must-Use Plugin and Ethereum EtherHiding for Persistent Backdoor Access
A newly analyzed WordPress malware implant combines must-use plugin persistence, hidden administrator accounts, credential theft, cross-site propagation, and...
ShinyHunters Claims FBI Breach Exposed Data of All Employees and Applicants
The cybercriminal group ShinyHunters has claimed to have breached systems linked to the FBI, obtaining highly sensitive information on “almost all” FBI emplo...
Product showcase: Scamwise checks the red flags before you take the bait
Scamwise is a free scam-checking service from Savi that examines suspicious messages, emails, websites, phone numbers, images, and real-world situations for ...
Critical F5 BIG-IP APM Flaw Actively Exploited for Remote Code Execution
F5 has disclosed a critical remote code execution vulnerability in its BIG-IP Access Policy Manager (APM) that is already being exploited in the wild. This v...
Nearly two-thirds of tested websites fail every bot test
Malicious bot activity increased 124% between July 2025 and June 2026, compared with 13.2% growth in human traffic.
Sovereignty vs Convenience
Technology decisions have traditionally been driven by functionality, price, and ease of use. If a solution met the business need and integrated with existin...
Rabbit’s new OS lives in the cloud and borrows your laptop to get things done
Rabbit, the Santa Monica company that makes the r1 handheld, released OS3, an agentic operating system. It runs in Rabbit’s cloud and operates a user’s compu...
NetBSD 10.2 security fixes close a remote kernel bug in ipfilter
A NetBSD box at the edge of a network, filtering traffic with ipfilter, has been carrying a kernel flaw that someone outside the machine can set off. The bug...
ShinyHunters claims attack on FBI exposes almost all agents
The FBI jobs site, which was temporarily defaced, remains unavailable and the agency said it’s investigating the claims. The post ShinyHunters claims attack ...
BigCommerce merchants impacted by third-party app data breach
The breach occurred between September 13 and September 17, 2026, when attackers gained access to shopper data via compromised credentials for the Ribon and R...
VA criticizes Baylor Genetics for delayed notification after data breach
The cybersecurity incident at Baylor Genetics, occurring around June 15, resulted in unauthorized access to sensitive information of 30,263 veterans.
Amazon blocks Meta's Muse AI agent from its marketplace
Amazon stated that third-party applications facilitating purchases should operate openly and respect service provider decisions.
TASK#STOMP campaign uses PowerShell backdoor for data theft
The TASK#STOMP campaign begins with an encoded Visual Basic Script (VBScript) executed by wscript.exe, with the initial access vector likely being phishing o...
BYD Shark 6 remotely hacked, exposing vehicle controls and cabin audio
Cybersecurity researcher Dan Hreszczuk of Fortify Labs found a critical vulnerability in a BYD Shark 6, allowing remote access to vehicle functions.
US jails adopt continuous biometric monitoring amid data privacy concerns
Companies like 4Sight Labs are equipping correctional facilities with technologies such as the OverWatch wearable, which tracks vital signs like heart rate a...
FBI CJIS security policy updates to version 6.1
Version 6.1 introduces stricter encryption requirements, increasing the minimum symmetric cipher key strength for CJI in transit and at rest outside physical...
Microsoft Entra ID to retire SMS sign-in in 2027
Microsoft will retire SMS and voice-based sign-in as a first-factor authentication method for Entra ID workforce tenants starting February 1, 2027.
New Exvicy malware-as-a-service framework copies rival's code
Exvicy operates as a ClickFix framework, distributing malware through compromised WordPress websites, according to Sekoia's Threat Detection & Research t...