Cybercrime

Cybercrime, hacking, malware, phishing, and online criminal activity

• Active Directory flaw exposed company passwords to hackers — A company stored service account passwords in Active Directory description fields, allowing initial access brokers to compromise the entire domain. - Attackers…
• Five Eyes Warns of China-Linked Spies Using Job Scams for Intel — Five Eyes intelligence agencies issued a warning that China-linked espionage groups use online job platforms to recruit individuals for intelligence gathering.…
• Commvault Urges AI-Driven Cyberattack Resilience Rethink — Commvault warns AI-enabled cybercriminals are destroying victim data environments, forcing organizations to re-evaluate their cyber resilience strategies. -…
• Chinese Hackers May Use LLMs for Atlas RAT Malware Development — A Chinese cybercrime group, TA4922, is deploying new Atlas RAT malware in European attacks and researchers suspect LLMs accelerate its development. - TA4922…
• Dashlane Warns 20 Encrypted Vaults Stolen in 2FA Attack — Dashlane issued an opaque advisory warning that attackers stole 20 encrypted user vaults after a brute-force attack on two-factor authentication. - Attackers…
• Microsoft 365 Android Apps Vulnerable to Token Theft — Microsoft 365 Android applications possess a critical debug flag vulnerability, allowing other apps to steal user account tokens. - The flaw bypasses Android's…
• AI Models Detect Software Vulnerabilities Amid Malspam Surge — AI models are crucial in discovering software vulnerabilities, enhancing cybersecurity defenses against new attack vectors. - These models analyze code and…
• Unmonitored AI Chatbot Data Fuels Reddit Spam Problems — Companies are manipulating AI chatbots by flooding popular Reddit forums with promotional content, prompting subreddits to restrict specific topics. - This…
• Ultrahuman data breach accessed customer wellness records — Wearable ring maker Ultrahuman confirmed a data breach exposed customer wellness data via an internal tool after an employee's laptop was infected with…
• Malwarebytes Releases Free Scam Phone Number Checker — Malwarebytes launched a free online tool to check if mystery phone numbers are linked to scam activity before answering or engaging. - The Scam Number Check…
• AI Worm Autonomously Spreads, Exploiting Network Flaws — Researchers developed a self-replicating AI agent capable of exploiting network vulnerabilities across diverse devices at low cost. - The AI worm uses publicly…
• Instagram Alerts Users After AI Chatbot Led to Account Hacks — Instagram is notifying users who were targeted by hackers exploiting vulnerabilities in Meta's AI-powered support chatbot. - The AI chatbot flaw granted…
• Ultrahuman Confirms Data Breach, Cites No Password Misuse — Ultrahuman admitted a recent security breach compromised its user database but states no passwords or credit card data were affected. - The smart ring…
• 2026's Major Cyberattacks Target Energy, Surveillance Systems — Critical infrastructure and federal surveillance systems experienced significant cyberattacks and data breaches in 2026. - A large DOGE data breach compromised…
• WordPress Plugin Flaws Lead to Website Takeovers — Threat actors exploit vulnerabilities in Kirki and Burst Statistics WordPress plugins, enabling privilege escalation and full website compromise. - Kirki…
• Hackers Breached Global Stock Exchange Executive's Email — A senior executive's email at a global stock exchange was compromised for five months, leading to data exfiltration. - Attackers maintained access from October…
• CISA Warns of Exploited Linux Kernel Vulnerability CVE-2022-0492 — CISA issued a warning about active exploitation of CVE-2022-0492, a Linux kernel vulnerability enabling container escapes and privilege escalation. - The flaw…
• HD Moore Webinar Addresses AI-Discovered Software Vulnerabilities — HD Moore led a webinar on securing networks against software vulnerabilities detected by AI models, focusing on proactive cybersecurity strategies. - The…
• AI Models Secure IAM Attack Surface via Visibility Platforms — AI models are becoming crucial for cybersecurity, especially in identifying software vulnerabilities and securing Identity and Access Management (IAM). - AI…
• OpenAI Codex Aids HTTP/2 Web Server Exploit Discovery — Security researchers discovered a new HTTP/2 Bomb exploit, aided by OpenAI's Codex, capable of knocking major web servers offline in seconds. - The exploit…

All topics · Home