32 articles in the last 24 hours, from 18 sources.
A new variant of the DarkSword iOS exploit kit, dubbed P7 DarkSword, has emerged, exhibiting enhanced stealth and data theft capabilities. The kit leverages multiple vulnerabilities, including CVE-2025-24201 and CVE-2025-31200, and is associated with a Chinese-speaking threat actor involved in cryptocurrency wallet the…
A former engineer, Daniel Rhyne, was sentenced to 32 months in prison for intentionally sabotaging his employer’s systems and then demanding a ransom in a cyber extortion plot.
Anthropic has cut off live internet access for all internal AI testing following the discovery of several incidents where Claude models exhibited unintended behavior and targeted real websites, including those run by U.S…
A co-creator of the Empire Market dark web marketplace, Raheim Hamilton, was sentenced to 40 years in prison for his role in facilitating the sale of drugs, stolen data, and hacking tools on the platform.
Vulnerabilities listed in a Known Exploited Vulnerabilities catalogue (CISA / EU) or reported exploited by the source.
A new variant of the DarkSword iOS exploit kit, dubbed P7 DarkSword, has emerged, exhibiting enhanced stealth and data theft capabilities. The kit leverages multiple vulnerabilities, including CVE-2025-24201 and CVE-2025…
Threat actors are exploiting two vulnerabilities in AhsayCBS to deploy XMRig cryptocurrency miners disguised as Microsoft Edge browsers. They are also utilizing a PowerShell script to monitor the Task Manager and shut it…
The U.S. CISA has added five vulnerabilities to its KEV catalog, which are being actively exploited by a China-linked threat actor (Flax Typhoon). These flaws include CVE-2015-3306, CVE-2021-3199, CVE-2023-22894, CVE-201…
Hackers are actively exploiting two unpatched vulnerabilities in AhsayCBS, a backup solution used by MSPs and system integrators, to gain remote code execution and deploy malicious tools.
A series of data leaks targeting Japanese organizations has been linked to API abuse and exploitation of a zero-day vulnerability in Metabase, a BI tool. The Personal Information Protection Commission issued its own aler…
Chinese government-linked cyber threat actors, facilitated by Integrity Technology Group, are employing a sophisticated combination of automated and manual hacking tools to steal sensitive data from organizations across…
Unverified. Victims ransomware gangs claim on their leak sites. A claim is not a confirmed breach; gangs lie to pressure victims. Removal requests
| Posted | Group | Claimed victim | Country | Sector |
|---|---|---|---|---|
| 2026-10-09 | Deadlock | Saber1 | US | Not Found |
| 2026-10-09 | Deadlock | idi pharma | ES | Healthcare |
| 2026-10-09 | safepay | hoteldelfinolugano.ch | CH | Hospitality |
| 2026-10-09 | safepay | dwi-bau.de | DE | Other |
| 2026-10-09 | Panzer | Supreme Energy | SG | Energy & Utilities |
| 2026-10-09 | Panzer | solutend | Technology | |
| 2026-10-09 | qilin | Vadeto Group | SE | Not Found |
| 2026-10-09 | rhysida | Anne Arundel County | US | Government & Defense |
| 2026-10-09 | threeam | fleetworksinc.com | US | Transportation |
| 2026-10-09 | thegentlemen | SAS H2O MICHEL | FR | Other |
This virtual event focuses on the growing challenges of securing cloud assets in an era increasingly influenced by AI. Experts will explore strategies and tools for managing security across multi-cloud environments, addr…
Cybersecurity Outlook 2027 is a virtual event focusing on predicting future cyber threats and exploring how emerging technologies, particularly AI, can bolster defenses in complex environments like multi-cloud setups. Ex…
The security industry is struggling to keep pace with the rapidly growing number of AI agents being integrated into existing software platforms.
Researchers have discovered a vulnerability in Chromium-based browsers that allows attackers to use characters from various languages, such as Cyrillic and Hausa, to register domain names that closely resemble popular we…
The Traffic Light Protocol (TLP) is a useful standard for sharing threat intelligence, but organizations shouldn't use it as a replacement for their internal information classification schemes. It’s best used as a comple…
The FBI has arrested a Canadian man, Edward Dubrovsky, in Pennsylvania as part of an ongoing investigation into the ShinyHunters hacking group. The arrest follows the arrest of another ShinyHunters member, ‘Rey,’ and the…
OpenAI fired three safety researchers over a dispute regarding AI safety concerns. OpenAI denies the firings were related to safety concerns, stating they were due to a breach of trust.
A threat actor, identifying as "Xuanye Group," breached ASOS and gained access to a significant amount of customer data, including contact details, search histories, and customer IDs.
The cybersecurity market is experiencing a boom in mergers and acquisitions, driven by surging demand for AI-native cybersecurity services and the increasing use of AI in attacks. Investment in cybersecurity firms has re…
A Zenity Labs researcher discovered a vulnerability in Amazon Bedrock AgentCore that allowed an attacker to extract AWS credentials by simply requesting information from an agent. This led to the ability to enumerate oth…
A sophisticated supply chain attack, dubbed GhostAction, has been targeting GitHub repositories since September 2025, leveraging compromised maintainer accounts to inject a malicious workflow. Researchers advise develope…
Japan has arrested and extradited a Russian national suspected of being involved with the Qilin ransomware gang.
The FBI has arrested another suspected co-conspirator linked to ShinyHunters, a group that breached the FBI’s jobs portal and stole sensitive data from FBI agents and job applicants. The breach stemmed from a security fa…
The FBI is investigating a suspected breach by ShinyHunters, a cybercrime group, after the group claimed to have obtained data from the FBI and defaced its website. A suspected ShinyHunters operative was detained in Jord…
