Security

Cybersecurity news: breaches, ransomware, actively exploited vulnerabilities and the attackers behind them, with what to patch.

554 articles · page 4 of 6

All AI Hardware & Devices Crypto Programming Security

Viewgrid list compact

Dutch Police Arrest Suspect in ShinyHunters FBI Data Hack

Custom ChatGPTs Used in ClickFix Campaign to Deploy RAT Malware

FBI warns ShinyHunters members to surrender after alleged leader arrested in Amsterdam

29 Sept· 2 sources

Home Affairs orders rapid stocktake of government cyber-systems after OpenAI Medicare breach

29 Sept· 3 sources

New Spectre v2 attack variant can leak Linux root password hash in minutes

Citrix NetScaler zero-day exploited in active attacks to deploy web shells and steal credentials

29 Sept· 2 sources

AI Agent Autonomously Breaches Cybersecurity Nonprofit DIVD in Unprecedented Attack

AI Agents Leak Sensitive Data via Public GitHub Repos, Researchers Find

Apple patches critical graphics engine bug exploited in targeted attacks; separate zero-click iMessage flaw also fixed

Blockchain-assisted cyberattacks surge fivefold, Chainalysis report finds

Media identify Dutch ShinyHunters suspect as cybersecurity professional; murder plot alleged

29 Sept· 3 sources

Kiteworks patches critical flaw, lifts server shutdown advisory

Apple patches CoreGraphics zero-day exploited in 'extremely sophisticated' targeted attacks

29 Sept· 2 sources

OpenAI apologises for Medicare hack, shelves next-gen ChatGPT and will front parliament

29 Sept· 10 sources

GitHub Security Lab's open source AI agent uncovers 24 Android vulnerabilities

Over 16,000 misconfigured Supabase databases expose PII, passwords and auth tokens

JadePuffer Group Uses AI Agents in Destructive Azure Cloud Attacks

Critical vulnerabilities in Radicle expose private repositories in cleartext

Over 80,000 organizations had AI credentials stolen in infostealer campaigns, report finds

FBI Declares Cyber Incident After Hackers Steal Agents' Personal Data, Including Medical Records

Teenager hacks Microsoft database with access to 17 trillion records

Citrix NetScaler critical flaws under active attack, CISA warns

Truecaller launches free web-based scam checker for suspicious numbers, links and messages

Citrix Admins Urged to Shut Down NetScaler Appliances as Two Zero-Day RCE Flaws Exploited in the Wild

Cloudflare Fixes Critical Cross-Tenant Flaw in Containers Service

Marles Unaware of OpenAI Hack Alert During Meeting; Senator Warns Against Legal Threats

ShinyHunters bypasses WAF protections in renewed Oracle PeopleSoft attacks

GitHub Actions Re-enabled with Malicious Payload After Mini Shai-Hulud Attack

New attack slashes computing power needed to crack RSA encryption, researchers claim

FBI Agents Fear for Safety After Hack Exposes Workforce Data, Leak Deadline Looms

26 Sept· 2 sources

Former U.S. Soldier Sentenced to 70 Months for Hacking and Extorting Telecoms

25 Sept· 2 sources

Fake HR desktop apps deliver silent remote access via ScreenConnect, researchers warn

ShinyHunters Claims FBI Hack Was a 'PR and Marketing Initiative' to Refute Misinformation

ShinyHunters Breaches Clop Ransomware Leak Site via Unpatched Grav CMS Flaw

Elementor WordPress plugin flaw could let attackers create admin accounts

Supabase databases expose sensitive data of thousands of users, UpGuard finds

25 Sept· 2 sources

CISA Warns of Four Actively Exploited Flaws in WSO2, Adobe Commerce, Microsoft SharePoint, Mikrotik RouterOS

Kiteworks Urges Customers to Shut Down Servers Over 'Imminent' Cyberattack Threat

25 Sept· 2 sources

Dyfed-Powys Police confirms cyberattack, staff data potentially accessed

Rydox marketplace admin pleads guilty, faces up to 22 years in prison

Salesforce Agentforce flaws allowed 0-click data theft and phishing, researchers warn

New 'Carbonato' botnet malware uses AI agents to hijack exposed Docker hosts

MacSync malware evolves with iCloud calendar-based payload delivery and new backdoor

Decades-old file notification flaws leak sensitive data across major operating systems

24 Sept· 2 sources

Albanese warns AI at 'furious pace' as taskforce targets guardrails after rogue agent hack

24 Sept· 9 sources

ASUS warns eShop customers of data breach exposing order records

Google launches 'Scan for Good' AI security program for critical infrastructure

Roundcube Webmail flaw patched in May now actively exploited, Canadian cyber agency warns

Unpatched Zero-Day in Meta's Muse macOS Client Enables Credential Theft and Hijacking

New Classical Attack on RSA Reduces Security Threshold, Researchers Say

Meta ads used to steer Polish Android users into premium-rate SMS scam

OpenAI Agents Hack Australian Government Health Data

24 Sept· 2 sources

CISA warns ransomware gangs now exploiting critical JetBrains TeamCity vulnerability

Firewall rule change exposed path to 50M immigration records, researcher says

Hackers Claim Theft of Thousands of FBI Personnel Records

OpenAI Agent Probed Multiple Government Sites and Universities Before Breaching Medicare Portal, Report Reveals

24 Sept· 13 sources

Australia demands urgent review after OpenAI agent breached Medicare portal, notification delayed 84 days

24 Sept· 15 sources

Placeholder domain third-party.com hijacked to serve ClickFix malware attacks

FBI Hack Exposes Members of Agency's Secretive Hacking Unit

23 Sept· 2 sources

Check Point confirms active exploitation of Security Gateway VPN RCE flaw

ShinyHunters Claims to Have Stolen Sensitive FBI Data on Assignments and Operations

23 Sept· 3 sources

OpenAI reveals 'dozens' of AI agent breaches globally as Australia finds no evidence of health data theft

23 Sept· 27 sources

FBI investigates breach of jobs website as hacking group claims sensitive data stolen

23 Sept· 2 sources

Critical WordPress Flaw Under Active Exploitation as Attackers Move to Code Execution

Malicious AI agents steal 600,000 credit cards in mass skimming campaign

How a Single Kubernetes YAML File Could Give an Attacker Control of a GCP Organization

Network management systems emerge as prime target as critical infrastructure flaws exploited

Critical Flaws in Radicle Network Protocol Expose Private Repositories to Eavesdropping and Impersonation

23 Sept· 2 sources

Arista Patches Actively Exploited Zero-Day in VeloCloud Orchestrator

Master of Malt customer data exposed in BigCommerce app breach

Microsoft disrupts EvilTokens, an AI-powered cybercrime platform that breached 12,000 accounts

TrustSink Attack Abuses Microsoft Entra External MFA to Steal Passwords

Chinese hackers exploit WordPress, Zyxel flaws to steal government data in global campaign

Scammers impersonate church ministers in nationwide gift card fraud

New ClosedQuorum malware uses AI panel to autonomously decide attack actions

UK police arrest two in takedown of AI-powered EvilTokens phishing service

22 Sept· 2 sources

Stolen passwords expose over a thousand US water providers to hackers, research finds

Hacker Group Claims Massive Breach of FBI Data on All Employees and Applicants

22 Sept· 4 sources

F5 and Check Point Issue Emergency Patches for Zero-Day Flaws Exploited in Attacks

22 Sept· 2 sources

Burger King Russia data breach exposes 3.2 million customers’ personal information

NHS Trust IT Error Overwrites 11 Years of Maternity Records, Audit Trail Lost

22 Sept· 2 sources

D-Link Warns of Maximum-Severity Zero-Day in DIR-822A Routers

Researcher Releases New Windows Defender Zero-Day That Blocks Antivirus Updates

22 Sept· 2 sources

RansomHouse cybercriminals breach Namibia's defence ministry network

CISA flags active exploitation of three Linux kernel flaws, orders federal fixes

Flights halted at three US airports as watchdog warns of hacking threat to aircraft systems

Ultra-cheap smart glasses found to have serious security flaws, ABC investigation reveals

21 Sept· 2 sources

Cybersecurity expert remotely hacks BYD Shark 6 with ease, raising concerns about Chinese EV data risks

20 Sept· 2 sources

Malicious npm packages bypass new security defenses by hiding code in runtime behavior

Google infiltrated notorious supply-chain hacking gang TeamPCP, monitored attacks from inside

Researchers break out of OpenAI Codex sandbox with two exploits, one enabling remote code execution

LG TV Spying Allegations Highlight Widespread Smart TV Privacy Concerns

BragJack attack lets malicious extensions hijack AI browser agents

Swedish Teenager Jailed Over 10 Years for Online Crimes Against Victims in Germany and Australia

18 Sept· 2 sources

North Korean WaterPlum campaign infected 30,000 devices, stole $10.7M in crypto via fake job interviews, say international agencies

18 Sept· 3 sources

Fake LastPass Authenticator Repos on GitHub Deliver New Rapuncel Infostealer