AI-powered attacks, AI-powered defenses, and the vulnerabilities of the models themselves.
602 articles
Two teenagers have been sentenced to five and a half years each for a cyber-attack on Transport for London that cost £39 million. The breach compromised the data of millions of commuters and forced a mandatory password reset for 27,000 staff members.
The Guardian Technology · 65d ago
Two teenagers, Owen Flowers and Thalha Jubair, have been sentenced for their involvement in a cyber-attack against Transport for London (TfL). The incident, which was live-streamed, resulted in significant operational costs for the organization.
BBC Technology · 65d ago
Russian FSB hackers are actively scanning for routers that utilize legacy protocols and default login credentials. This campaign aims to harvest configuration data from vulnerable network hardware.
iTNews Australia · 66d ago
A former Moroccan intelligence officer has provided evidence of the state's use of NSO Group's Pegasus software to target high-profile individuals. The spyware allows for total device compromise, including camera and microphone activation.
The Guardian Technology · 66d ago
Medical clinic chain Partnered Health has confirmed a data breach involving the theft of sensitive personal information. The incident highlights ongoing cybersecurity vulnerabilities within healthcare data infrastructure.
iTNews Australia · 66d ago
Reports indicate that Iran leveraged known security vulnerabilities in global telecommunications infrastructure to track the location of US military personnel. This highlights critical security risks in legacy network protocols.
cnBeta (Full RSS) · 67d ago
The US government has unsealed criminal charges against alleged Russian hackers involved in ransomware attacks. A reward has been offered for information leading to their identification or location.
iTNews Australia · 67d ago
A new variant of the RedHook malware has been identified, capable of spying on screens and intercepting texts. It uniquely leverages built-in Android debugging tools to gain remote access without requiring root privileges.
Digital Trends · 68d ago
A Kenyan court ruled that Diamond Trust Bank and a local telco are liable for a $34,000 SIM swap fraud. The victim had previously reported the security breach, but the institutions failed to prevent the unauthorized withdrawal.
TechCabal · 68d ago
A cybersecurity negotiator exploited sensitive data to assist the BlackCat ransomware group in inflating ransom demands. The individual has been sentenced to 70 months in prison for this internal betrayal.
cnBeta (Full RSS) · 70d ago
This report outlines the evolving landscape of data security for 2026, focusing on the challenges faced by large logistics organizations like Toll Group. It highlights the intersection of AI-driven threats and the necessity for robust data governance frameworks.
iTNews Australia · 72d ago
A security vulnerability in the FIFA registration system allowed unauthorized access to backend systems due to a lack of proper authentication controls.
虎嗅 · 72d ago
Interpol concluded 'Operation First Light 2026', a global initiative targeting social engineering and investment fraud. The operation resulted in over 5,800 arrests and the interception of $293 million in illicit assets.
cnBeta (Full RSS) · 72d ago
The Australian Cyber Security Centre (ACSC) has issued its second alert in two months regarding the active exploitation of unpatched vulnerabilities in Content Management Systems. WordPress plugins are specifically highlighted as primary targets for these ongoing attacks.
iTNews Australia · 72d ago
Security firm Jamf discovered a fake website mimicking the Maccy clipboard manager to distribute the PamStealer malware. The malware uses Rust to steal browser data, crypto wallets, and clipboard contents.
IT之家 · 72d ago
A suspected Chinese espionage group, UNK_MassTraction, is exploiting a vulnerability in Roundcube to compromise university mail servers. The campaign specifically targets credentials from staff in sensitive research fields.
The Next Web (TNW) · 72d ago
Scammers are injecting adult content creators' names into high-authority government and university websites to manipulate search rankings. Copyright takedown requests are currently being used as a reactive measure to remove these malicious pages from Google.
Digital Trends · 73d ago
A study of 281 free Android VPN apps uncovered severe security flaws, including unencrypted data transmission and invasive tracking. These findings highlight the dangers of using 'free' privacy tools that monetize user data.
Digital Trends · 73d ago
Scammers are hijacking government domains to host malicious OnlyFans-related ads. Ironically, mass copyright takedown requests from adult creators are forcing these sites offline, inadvertently cleaning up the web.
Wired · 73d ago
Aegis Cybersecurity founder highlights increasing scrutiny of tech vendors. The report identifies critical gaps in SaaS backup strategies and board-level reporting.
iTNews Australia · 73d ago
A Falcon 9 rocket launched the CyberCUBE satellite, the first European Space Agency mission led by Romania. The satellite will spend a year testing security vulnerabilities in European spacecraft.
The Next Web (TNW) · 74d ago
Japanese telecom KDDI suffered a data breach in its ISP email platform due to a third-party software vulnerability. The incident, lasting from May to June, compromised over 12 million email addresses and 7 million passwords.
IT之家 · 74d ago
Cloudflare has officially joined the UK government's Cyber Resilience Pledge, a voluntary framework focused on cybersecurity governance and supply chain security. This move reinforces the company's long-standing commitment to transparency and security leadership.
Cloudflare Blog · 74d ago
Adobe is moving to a twice-monthly security patch schedule starting in July to address the rapid increase in software vulnerabilities. This shift aims to keep pace with the evolving threat landscape in the era of frontier AI.
Computerworld · 78d ago
Stelios Kouloglou, an EU lawmaker investigating spyware abuse, was targeted by Pegasus while serving on the investigative committee. The breach was confirmed by Citizen Lab.
The Next Web (TNW) · 78d ago
Citizen Lab has discovered that Pegasus spyware was found on the phone of a European Parliament member. This incident highlights significant security risks for high-profile political figures and the ongoing debate over surveillance technology.
Wired · 79d ago
A newly discovered macOS malware named PamStealer has been identified, highlighting the growing trend of sophisticated infostealers targeting Apple's ecosystem. This discovery emphasizes the increasing efforts by threat actors to compromise macOS environments.
Ars Technica · 79d ago
LaLiga's aggressive efforts to block illegal sports streaming are inadvertently taking down legitimate websites. This highlights the risks of automated IP blocking systems in large-scale content protection.
Bloomberg Technology · 82d ago
.jpg)
New regulatory frameworks are imposing stricter compliance standards on the convergence of IT and OT environments. Organizations must adapt their security posture to meet these evolving infrastructure mandates.
iTNews Australia · 82d ago
The US government has announced a $10 million reward for information leading to the identification of a Russian-state hacking group. This group has been actively targeting encrypted messaging platforms like Signal and WhatsApp since at least March.
Ars Technica · 82d ago