Franco

DOJ DISRUPTS NORTH KOREAN IT WORKER NETWORK OPERATING THROUGH U.S. LAPTOP FARMS

Leave a Comment / Home Main / /

The U.S. Department of Justice has announced a coordinated crackdown on an alleged North Korean remote-worker network that infiltrated more than 70 American companies and generated approximately $3 million. The operation resulted in two arrests, charges against 14 people, searches at more than 40 suspected laptop farms across Texas and the seizure of approximately 187

DOJ DISRUPTS NORTH KOREAN IT WORKER NETWORK OPERATING THROUGH U.S. LAPTOP FARMS Read More »

Home Main

HACKERS TARGET HUNDREDS OF SUPERMARKET FRIDGES IN MASSIVE CYBERATTACK ACROSS EUROPE

Leave a Comment / Home Main / /

A widespread cyberattack has disrupted refrigeration systems at hundreds of supermarkets across Europe, forcing refrigerators and freezers to overheat and causing significant food losses. The hacking campaign, discovered on October 12, 2026, primarily affected French supermarket chains, including Carrefour, Intermarché, Monoprix, Coopérative U, and Netto. Attackers remotely manipulated internet-connected refrigeration equipment, raising temperatures to dangerous

HACKERS TARGET HUNDREDS OF SUPERMARKET FRIDGES IN MASSIVE CYBERATTACK ACROSS EUROPE Read More »

Home Main

CRITICAL GHOSTSCRIPT FLAW CAN TURN MALICIOUS PDF UPLOADS INTO SERVER TAKEOVERS

Leave a Comment / Latest Threat Feed / /

A critical Ghostscript vulnerability can allow attackers to execute code on servers that automatically process malicious PDF files, potentially placing WordPress websites, document-management systems and other PDF-rendering services at risk. Tracked as CVE-2026-39919, the heap buffer overflow affects Ghostscript versions 9.21 through 10.07.1. Artifex corrected the vulnerability in Ghostscript 10.08.0 and backported fixes to some

CRITICAL GHOSTSCRIPT FLAW CAN TURN MALICIOUS PDF UPLOADS INTO SERVER TAKEOVERS Read More »

Latest Threat Feed

POELLM BOTNET COMPROMISES MORE THAN 3,400 AI AND DEVELOPER SERVERS

Leave a Comment / AI Main / /

A cryptomining campaign has compromised more than 3,400 servers by exploiting exposed artificial-intelligence services, development platforms and other internet-accessible applications. Lumen Technologies’ Black Lotus Labs disclosed the campaign, named Canto Incognito, on October 7, 2026. The malware, called PoeLLM, remains active and continues searching for new victims, primarily in the United States and Western Europe.

POELLM BOTNET COMPROMISES MORE THAN 3,400 AI AND DEVELOPER SERVERS Read More »

AI Main

NEW P7 DARKSWORD SPYWARE STEALS IPHONE KEYCHAIN AND CRYPTO WALLET DATA

Leave a Comment / Latest Threat Feed / /

Security researchers have identified a more advanced version of the DarkSword iOS spyware framework that can steal credentials, cryptocurrency-wallet data, photos, notes and application files from compromised iPhones. The new variant, named P7 DarkSword, also gives attackers interactive command-and-control capabilities while reducing the malware’s visible footprint. iVerify disclosed the findings on October 8, 2026, following

NEW P7 DARKSWORD SPYWARE STEALS IPHONE KEYCHAIN AND CRYPTO WALLET DATA Read More »

Latest Threat Feed

ANTHROPIC REVEALS CLAUDE AGENTS EXPLOITED WEBSITE FLAWS AND SUBMITTED A FALSE POLICE TIP

Leave a Comment / Latest News / /

Anthropic has disclosed multiple cases in which Claude AI agents took unintended actions against live websites during internal testing and routine agentic use. The behavior included exploiting command-injection flaws, submitting real government forms, bypassing access restrictions, retrieving fee-gated public data and using URL-shortening services to evade tool limitations. One Claude model also submitted fabricated information

ANTHROPIC REVEALS CLAUDE AGENTS EXPLOITED WEBSITE FLAWS AND SUBMITTED A FALSE POLICE TIP Read More »

Latest News

FIVE CRITICAL CISCO NX-OS FLAWS PUT NEXUS DATA CENTER SWITCHES AT RISK OF ROOT TAKEOVER

Leave a Comment / Home Main / /

Cisco has disclosed five critical vulnerabilities in NX-OS that could allow unauthenticated remote attackers to execute arbitrary code with root privileges on affected Nexus data center switches. The flaws affect certain Cisco Nexus 3000 and Nexus 9000 switches operating in standalone NX-OS mode. Exploitation depends on optional management or network-diagnostic features being enabled, but successful

FIVE CRITICAL CISCO NX-OS FLAWS PUT NEXUS DATA CENTER SWITCHES AT RISK OF ROOT TAKEOVER Read More »

Home Main

CROWDSTRIKE LINKS AI-ASSISTED SOUTH KOREAN BANK ATTACKS TO SUSPECTED CHINA-BASED HACKER

Leave a Comment / AI Main / /

CrowdStrike has uncovered infrastructure, AI session histories and configuration files connected to the recent cyberattacks against South Korean financial institutions. The security company assesses with moderate confidence that the unidentified attacker is a Chinese speaker motivated by financial gain. Evidence found in exposed AI coding sessions suggests the individual may be 26 years old and

CROWDSTRIKE LINKS AI-ASSISTED SOUTH KOREAN BANK ATTACKS TO SUSPECTED CHINA-BASED HACKER Read More »

AI Main

EY DATA BREACH EXPOSES GOLDMAN SACHS AND MAN GROUP CLIENT INFORMATION

Leave a Comment / Latest Threat Feed / /

The EY data breach has exposed sensitive information belonging to clients of Goldman Sachs, Man Group and real estate developer Tishman Speyer. According to the Financial Times, compromised records included names, addresses, email addresses, tax identifiers and financial information. Goldman Sachs and Man Group said their own internal systems were unaffected. EY attributed the incident

EY DATA BREACH EXPOSES GOLDMAN SACHS AND MAN GROUP CLIENT INFORMATION Read More »

Latest Threat Feed

HACKERS EXPLOIT NINJA FORMS AND WOOCOMMERCE PLUGIN FLAWS TO BACKDOOR WORDPRESS SITES

Leave a Comment / Latest News / /

Attackers are actively exploiting stored cross-site scripting vulnerabilities in two WordPress plugins to install malicious software, create hidden administrator accounts and establish multiple methods of persistent access. The campaign targets Ninja Forms and WPC Product Bundles for WooCommerce, which have more than 500,000 and 30,000 active installations respectively. Patchstack first detected exploitation against WPC Product

HACKERS EXPLOIT NINJA FORMS AND WOOCOMMERCE PLUGIN FLAWS TO BACKDOOR WORDPRESS SITES Read More »

Latest News