cyber-crime CrowdStrike finds possible bank hacker's CV among exposed AI logs Suspected Chinese speaker used Claude Code and agentic pentesting tool ARTEX in attacks on South Korean lenders
cyber-crime Ransomware fixer claimed he could decrypt files, allegedly defrauded clients instead Feds claim he charged clients more than ransoms, paid up, pocketed the difference
cyber-crime Teen suspected of running KillSec ransomware group as cops seize servers, arrest three Operation KillSwitch takes over leak site holding at least 110 TB of stolen data
cyber-crime Ex-NCA officer ordered to surrender £1.8M for stealing seized Bitcoin Paul Chowles helped himself to 50 coins while examining devices linked to Silk Road 2.0
cyber-crime Dutch police arrest 'security pro' in ShinyHunters probe Flashbangs reportedly deployed during operation as crime group denies any connection to suspect
cyber-crime Ex-soldier's telecom hacking spree earns him 70 months Active-duty campaign targeted at least ten organizations and sought $1 million in ransom payments
cyber-crime ShinyHunters tells The Reg: We hacked the FBI to 'protect our business' Data theft and extortion biz, that is
cyber-crime Bitget blames North Korea for $387.5M crypto wallet raid Familiar fingerprints point to Kim’s regime … to the surprise of nobody
cyber-crime Dyfed-Powys Police cops to cyberattack, staff data potentially nicked Force says public data appears untouched, but investigators looking into whether crims grabbed employee information
cyber-crime Another week, another data breach for Revolut customers DriveWealth coughs up historic customer info after attackers socially engineer their way inside
cyber-crime Meta ads steered Polish Android users into a premium-rate billing trap CERT Polska linked 852 promotions to 17 Google Play apps capable of sending costly texts or starting recurring subscriptions
cyber-crime Swedish celebs campaign for public rudeness ... to prevent cyber scams The campaign follows a highly profitable year for crooks targeting the over-60s
cyber-crime Whisky merchant Master of Malt confirms customer data spilt Attackers had four days to drink in names, addresses, emails and phone numbers
cyber-crime Well-done hack flames 3.2M Burger King Russia users HIBP confirms cybercrims stuck a straw into marketing reservoir, sucking up six-years of leaky Whopper secrets
cyber-crime RansomHouse picks a fight with Namibia's defense establishment National cyber team confirms the breach, but not whether data was stolen or encrypted
cyber-crime Clop gets a taste of its own medicine after ShinyHunters hijack leak site Rival crew demands eight figures and threatens to expose companies that paid to keep quiet
security North Korea's fake job interviews infected 30,000 devices WaterPlum recruiters used bogus coding tests to backdoor jobseekers and raid more than 7,000 crypto wallets
cyber-crime FBI: Fake cop and government impersonation scams cost victims $1.6B AI, fake uniforms, and mock offices help crooks sell the con
cyber-crime Spain gets its first taste of AI-aided cyber attack Data protection chiefs call for 'immediate review' of data protection models
security Iranian spies hit Windows machines with Chosen Brick data-stealing malware 'Enemies of the regime' on notice
cyber-crime CenterPoint Energy confirms intruder helped themselves to customer information Forum post claims 7.49 million files up for grabs as Texas utility investigates breach
cyber-crime HBO Max Reddit account compromised to serve ClickFix attacks Part of a 'massive 48-hour malvertising blitz' targeting macOS and Windows machines with malware
cyber-crime Cyberattack sends International Meteor Organization crashing back to Earth Attack dealt a 'critical blow' to aging infrastructure, with several weeks of disruption expected
cyber-crime Revolut falls for fake government requests, hands over customer data Passports, selfies, transaction histories exposed as self-proclaimed culprits demand 10,000 Bitcoin
security More JFrog Artifactory bugs under attack, and all 3 have patches If you're waiting for a sign to upgrade to a fixed version: this is it
cyber-crime AT&T store worker gets 16 months inside for SIM-swap side hustle Phone shop staffer claimed he was paid less than $4k for in his part attacks leading to combined intended losses of $600,000
cyber-crime Ukrainian lawyer's second career as a Conti coder earns him 4 years behind bars Swapping legal work for malware development ended in extradition and a guilty plea
security Hundreds of AI agents helped PaperCut attacker hit 395+ orgs, and some went off script Human operator: don't touch CIS orgs. AI agents: look a squirrel!
cyber-crime Trezor, BitBox users targeted in newsletter phishing spree Attackers exploit legitimate mailing channels to demand crypto wallet backups
cyber-crime Cryptocrook ringleader, 22, who met crew on Minecraft admits role in $245M heist Stolen funds bought mansions, private jets, and supercars – now he faces up to 20 years
cyber-crime Security boffin claims airport group left API keys in client-side JavaScript for four years Researcher believes overprivileged Iterable creds exposed 8.8M customer records – and could have enabled mass deletion
security ASCII smuggling isn't just an AI security risk Phishers find a new use for invisible Unicode tag characters
cyber-crime Cybercrooks trawl Fishbrain to net password hashes Armed with password hashes and salts, attackers could already be kraken those creds
cyber-crime Cops, CrowdStrike disrupt Sality botnet by poisoning the network and diverting into sinkholes 23-year-old botnet down
security Another Artifactory CVE under attack by AI agents or humans Unauthenticated intruders can mint admin tokens, and exposed servers are already being hit
cyber-crime The Gentlemen come calling as Nutex confirms sensitive data theft Ransomware crew threatens publication while healthcare biz assesses which records escaped
cyber-crime Healthcare cyberattacks hit pacemakers and millions of patient records McKesson admits breach as ShinyHunters demands $55.2M
cyber-crime CRPx0 hacking service for dummies claims victim count more than quintupled It's 'built to be operated by a human with no technical background'
cyber-crime More than 100 water systems were hit in July cyberattacks 'These are test runs for a larger-scale attack'
security Boston Scientific discloses 'global disruption' in ongoing cyberattack No timeline to restore IT systems as probe remains ongoing
security Iran-linked cyberattack shut down a UK power plant No risk to wider energy system, government tells The Reg
cyber-crime ShinyHunters and ReliaQuest trade blows over claimed breach Attackers took a look at an employee's identity dashboard, but security firm says that's as far as they got
cyber-crime $1T investment giant Apollo breached after social engineering attack Hackers spent four days inside the org's cloud platforms after apparently talking their way in
patches Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using it Ukrainian hacktivists exploiting the bugs, but TrueConf's reach stretches well beyond home turf
cyber-crime SickKids children’s hospital bandages up careers website after intruder breaks in Toronto org says it wasn’t the only one to be affected by the third-party software vulnerability
security Hackers poison popular Rust crates to steal developers' credentials Malicious updates turned routine builds into a delivery system for infostealer malware
$10K phishing kit claims it can plant rogue passkeys for persistent access to pwned accounts Seller's demos show a browser-in-the-middle attack adding credentials seconds after authentication
Microsoft sounds alarm over perfect-10 Entra ID flaw Redmond says the cloud identity bug is already fixed
cyber-crime Ransomware crook poses as recovery firm to steal payments from fellow extortionists Because apparently even ransomware gangs can't trust the people they do business with
cyber-crime Australian hotel chain leaks guests’ PII after breach at third-party database operator Unknown parties know where you stayed last summer, down under, across 120 Quest properties
security Crook hawks millions of records allegedly plundered from corporate Azure tenants McDonald's, Vodafone, TCS, Kyndryl, and others named as researchers point to compromised credentials
cyber-crime 1.6M RingCentral accounts' data dumped after ShinyHunters extortion attack Another one bites the dust
cyber-crime Mystery attacker spent a year raiding Salesforce and ServiceNow portals Custom tools harvested whatever over-permissioned guest accounts would surrender
cyber-crime Microsoft-vendetta hacker has a new zero day that gives system privileges on fully patched Windows Exploit Wednesday's back, baby
Smooth-talking fraudsters clone contactless cards, authorize payments in just 13 minutes Social engineering and malware combine to enable financial fraud before banks have time to act
cyber-crime Feds warn Gunra ransomware is exploiting known bugs to hit critical infrastructure Newly minted RaaS crew breaks in through using internet-facing kit via known Fortinet flaws, then steals and scrambles data
cyber-crime Cyberattack on logistics giant CEVA delivers customer data into the wrong hands Valve, Bol, ING, Ajax, and others affected as pwnage disrupts eight European warehouses
security Water system controllers don't belong on the internet, says ex-NSA chief after suspected Iran attacks Calling all defenders
cyber-crime ShinyHunters called cancer diagnostics biz and tricked staffers into giving them access. Now they've dumped 10.9M email addresses Cancer diagnostics breach spills personal and health info as extortion crew says healthcare giant ‘should’ve paid the ransom’
cyber-crime Intrusion at US healthcare software provider puts 3.8M people's data at risk Unlimited Technology Systems says names, Social Security numbers, diagnoses, and insurance details may have been swiped
security IBM's agentic AI platform is under active attack - patch now A critical Langflow flaw allowing RCE on default deployments is being exploited, says the CISA
cyber-crime Police National Legal Database confirms data theft after dark web leak ExfilSquad claims 135,000 contact records weeks after hitting the Department for Education
cyber-crime AI is 'both the weapon and the target' in latest wave of cyberattacks CrowdStrike tracks 89% surge in machine-assisted activity as patch windows shrink to 48 hours
cyber-crime US bank places trust in ransomware crew that promised to delete its data History suggests this was not wise
cyber-crime Scotland's university procurement center confirms cybercrooks broke in APUC investigating after criminals claim historical data theft
cyber-crime Amazon links four poisoned npm packages to one North Korean crew Researchers say Sapphire Sleet socially engineered maintainers before publishing malicious updates through trusted accounts
cyber-crime Europol flags 4,340 'horrific' URLs linked to The Com Stop the spread (of online recruiting and propaganda)
security Attackers pummel critical WordPress vuln to create all sorts of mischief Plus dozens of PoCs in the public domain
cyber-crime Frontier LLMs couldn't help Hugging Face fight off evil agents Chinese open-weight model GLM 5.2 happily obliged
cyber-crime Infosec expert: Paidwork users' data pwned after 23M-record database dumped online HIBP claims leaked info includes bank account numbers, payout histories, and personal details
cyber-crime Ransomware curdles production at Coca-Cola's Fairlife dairy biz No use crying over spilled milk when US plants can't bottle it in the first place
cyber-crime C'mon, just copy this text string and paste it into your macOS Terminal – it'll fix your computer, honest Newly documented stealer ClickLock comes for the more trusting Mac user with spot of social engineering
cyber-crime Brit Scattered Spider duo handed tickets to prison over Transport for London attack Sentencing bookends the biggest cybercrime conviction in UK history
cyber-crime Tech support scam caused massive data breach at Australian airline Qantas It’s possible to leak PII describing 5.7 million people without breaching privacy rules
cyber-crime German firm files for insolvency, blames cybercrims who shut down production for 6 weeks ZEGO-TVZ says the financial fallout from a March cyberattack left shutting its doors as the only option
cyber-crime An unnamed US county – perhaps in Ohio – paid $1M extortion demand to cybercriminals Leaked negotiations spill the tea
cyber-crime Accenture admits to 'isolated matter' after crook tries to flog alleged 35GB haul Consulting giant says it has 'remediated ... source' after crook claims to offer source code, keys, and cloud creds for sale
security Suspected Chinese snoops caught breaking into universities' Roundcube mailservers Proofpoint researcher tells The Reg: 'We estimate the total volume of targets would be a few dozen'
cyber-crime Windows is watching: Anti-piracy tool fingers Scattered Spider suspect Along with other telemetry, Windows GDID makes online activity more traceable
cyber-crime CAI cloud worm gives competitors' malware the boot, then steals secrets and mines for coin Dog-eat-dog world for credential-stealing attackers
security Predatorgate snoopfest victims launch €8M sueball at spyware maker Greek lawsuit comes as rights campaigners lobby the EU to take firmer stance on spyware abuses
cyber-crime Fake IT bods on Microsoft Teams coax workers into installing malware Unit 42 says attackers are posing as helpdesk staff and persuading employees to hand over remote control before dropping EtherRAT trojan
security MFA-optional banks leave safe doors (and accounts) wide open for thieves to pillage Financial institutions are putting their clients at risk in the name of convenience.
cyber-crime Dev says Google warned him about account hijack – then charged him $11,000 anyway Left hand, meet right hand
cyber-crime Oracle E-Business Suite was under attack via critical flaw before the public exploit code was even released Attackers appear to have reverse-engineered Big Red's patch
cyber-crime EvilTokens device-code phishing kit totally more evil than we all thought It's a 'complete BEC operations environment,' Talos researcher says
security Anonymous researcher drops 0-day 'exploitarium' repo At least two vulnerabilities are already under attack
cyber-crime Amazon Q flaw let booby-trapped Git repos execute code, swipe cloud creds Researchers warn many AI coding assistants now execute commands from project configurations
cyber-crime Ex-Huntress analyst claims company insider fed info to a ransomware crim. Social media drama ensues Former employee accuses company of prioritizing pending IPO over client security
security Microsoft uses AI to link two malware operations in racketeering suit 200+ C2 servers linked to StealC and Amadey shut down
cyber-crime You have got to be KDDI-ng – Japanese telco exposes 14.2 million managed email credentials Five ISPs and plenty of users await their fate
cyber-crime Security shops among the 'hundreds' of Klue hack victims As yet another extortion crew Icarus exploits Salesforce-linked integrations
cyber-crime Crooks found a new way to collaborate using Teams – by hiding command-and-control traffic
cyber-crime Malware dev tries to steal Claude users' secrets, writes npm slop, leaks own GitHub private token
cyber-crime A Russian speaker and jailbroken Gemini went on a hacking spree and emptied at least one MAGA victim's crypto wallets
cyber-crime Nobody believes the 'criminals and scumbags' who hacked Canvas really deleted stolen student data
cyber-crime Foxconn confirms cyberattack after ransomware crew claims it stole confidential Apple, Nvidia files
security First reports come in of victims of critical cPanel vuln as 'millions' of sites potentially exposed
security What type of 'C2 on a sleep cycle' do they leave behind? Novel Chinese spy group found in critical networks in Poland, Asia
security Burglar alarm biz burgled: ADT confirms cyber intrusion after ShinyHunters extortion attempt
security 'Several dozen' high-value corporations hit by new extortion crew in helpdesk phishing spree
security Operation Lightning takes down SocksEscort proxy network blamed for tens of millions in fraud
security Cybercrime isn't just a cover for Iran's government goons - it's a key part of their operations