Latest Threat Feed

A massive international law enforcement operation has led to the arrest of 5,811 suspects and the seizure of more than $293 million in criminal assets during a coordinated crackdown on cyber-enabled fraud across 97 countries. The initiative, known as Operation First Light 2026, targeted organized fraud networks involved in business email compromise (BEC), romance scams, […]

Cybersecurity researchers have uncovered what they believe is the first documented ransomware campaign carried out entirely by an autonomous AI agent. Dubbed JadePuffer, the operation demonstrates how large language models (LLMs) can execute complex cyberattacks without continuous human guidance, marking a significant shift in the ransomware landscape. According to Sysdig, the AI-powered attacker exploited CVE-2025-3248,

LastPass has disclosed that customer information was accessed by cybercriminals after attackers stole OAuth authentication tokens during a recent supply chain breach involving the third-party platform Klue. The password management company stated that its core infrastructure, products, and customer password vaults were not compromised during the incident. However, the attackers were able to access certain

Nintendo is reportedly facing a potential cybersecurity incident after a threat actor claimed to have stolen nearly a decade of internal company data and is demanding $2 million to prevent its release. The allegations surfaced on a popular cybercrime forum, where the attacker claimed to possess approximately 859MB of data allegedly linked to the gaming

ServiceNow has disclosed a security incident after threat actors exploited a flaw in an API endpoint that allowed unauthorized access to customer data stored within affected instances. According to the company, attackers were able to abuse the vulnerability without authentication, enabling them to query information from customer environments. ServiceNow detected unusual activity linked to the

Multiple Instagram users are reporting that their accounts were hijacked after cybercriminals allegedly manipulated Meta’s AI-powered account recovery tools into believing they were the real owners. The incidents are raising serious concerns about the growing reliance on artificial intelligence for customer support and account security. Several high-profile and rare Instagram accounts were reportedly compromised this

Cybercriminals are now abusing ChatGPT’s built-in sharing tools to spread malware through legitimate OpenAI links, creating a dangerous new phishing campaign that is becoming harder for users to detect. Security researchers at Push Security discovered a campaign known as “LLMShare,” where attackers purchase Google advertisements targeting users searching for ChatGPT. Instead of redirecting victims to

Cybercriminals are exploiting excitement around the 2026 FIFA World Cup with fake websites designed to steal money, banking details, and personal information from fans searching for tickets and merchandise. The tournament, taking place from June 11 through July 19 across the United States, Canada, and Mexico, has already become a major target for phishing scams.