LoongLeak attack strips AES keys from Loongson processors
Researchers show Loongson cache flaws leak kernel keys across VM boundaries.
The Latest
Helix crew claims near-million file haul from Uber Freight
The extortion group linked to BlackFile successors says it stole nearly 1M files.
GhostDesk malware rides fake CCleaner installers into Chrome
Malwarebytes finds a lookalike CCleaner site pushing a Chrome credential stealer.
Apple threat alerts reach spyware targets in 110 countries
A fresh round of Apple mercenary spyware warnings lands in 110 countries.
WindRelay streams card data over NFC during live scam calls
Group-IB links WindRelay and SpyNote in real-time card fraud across Europe.
Dutch NCSC confirms live attacks on macOS Screen Sharing bug
Attackers are exploiting CVE-2026-65400 to drop Monero miners on exposed Macs.
ZeroBytes peddles 2M French taxpayer records on hacking forum
France's DGFiP confirms a June intrusion that exposed taxpayer data.
Vishing entry behind 1.6M-account RingCentral data leak
ShinyHunters dumped account data after RingCentral refused an extortion demand.
AmnesiaStealer trades keychain dumps for live macOS browser hijacks
Jamf Threat Labs details a three-stage Rust stealer that harvests macOS credentials and gives operators live, hidden control of the…
Free 15.5 GB dump puts 7.3 million Chess.com accounts at risk
A free archive with 7.3 million Chess.com records looks like large-scale scraping, though one internal-facing detail needs explaining.
Probes hit GeoServer SQLi zero-day within hours of disclosure
watchTowr logged hundreds of exploitation probes against an unpatched GeoServer SQLi bug within hours of its disclosure.
Akira’s Safe Mode play blinds EDR but crashes its own encryptor
Huntress says an Akira affiliate rebooted a victim into Safe Mode to kill EDR, then the encryptor crashed on the…
Session swap bug in Adobe Commerce draws attacks right after patch
Sansec blocked the first exploits of CVE-2026-71362, an unauthenticated account takeover in Adobe Commerce rated 9.1.
Dark web vendors peddle AI attack planners with nation-state depth
Trellix found dark web services like APEX AI and MessiahGPT that lower the skill bar for ransomware-grade attacks.
Spotlight
Trezor customer data spills through logistics partner ShipMonk
A breach at shipping partner ShipMonk exposed names, emails and addresses for over 13,000 Trezor customers.
Fake IT interviews slip poisoned WireGuard builds past Ukrainian sysadmins
CERT-UA ties fake recruiter lures to Sandworm subgroup UAC-0145, which hides PowerShell execution inside a poisoned WireGuard client.
Hundreds of Chrome VPN extensions secretly shunt traffic to one proxy
Socket finds 737 VPN and proxy add-ons funneling browser sessions through a single provider.
Anonymous guest access let one actor mine SaaS portals for 17 months
Reco tracks a long-running campaign harvesting records from over-permissioned SaaS portals.
Features
CEVA breach stalls eight European warehouses and leaks client data
A July cyberattack on CEVA Logistics halted shipments and exposed customer details for Valve and others.
US memo recruits vetted companies to hit foreign cybercrime networks
A new White House program would let private firms run offensive operations under federal oversight.
Agentic hackers breached Taiwan agencies with self-correcting AI tool
Israeli firm Dream documents what appears to be the first autonomous AI attack on a government.
New Defender exploit defeats RoguePlanet patch, hands out SYSTEM shells
A researcher's ShieldBreak PoC claims to bypass Microsoft's fix for the Defender RoguePlanet flaw.
Fake defense jobs deliver Troy backdoor via Windows kernel bug
Check Point ties a Windows zero-day to Lazarus attacks on defense firms using fake job offers.
Forged JWT tokens put unpatched SharePoint servers in attacker hands
Attackers are exploiting a critical SharePoint authentication bypass days after Rapid7 shipped proof-of-concept code.