Jackpotting crew pleads guilty after ATMs refuse to pay out
Five Venezuelan nationals pleaded guilty to failed ATM jackpotting attempts in Kansas, with one drawing nine months.
The Latest
Aesto Health breach exposed data of 9.5 million patients
Aesto Health told HHS that 9.5 million people had personal and health data stolen from its AWS infrastructure.
Bogus Claude Opus 5 download on GitHub drops infostealer
A GitHub repo promising free Claude Opus 5 is quietly installing the RevStealer infostealer, according to Morphisec.
JFrog Artifactory auth bypass already abused for admin tokens
WatchTowr reports attackers are minting admin tokens through the critical JFrog Artifactory auth bypass patched August 28.
BGP hijack rerouted Softaculous updates into malware delivery
A 33-hour BGP hijack diverted Softaculous traffic and pushed a malicious Virtualizor update to a handful of servers.
Kaspersky zero-day exploit drops rogue DLL on patched Windows
Researcher Chaotic Eclipse published HardBreacher, a working exploit for a Kaspersky Endpoint Security privilege escalation zero-day.
Russia-aligned group trips AI scanners with nuke prompt
ESET says Russia-aligned UAC-0099 hides a nuclear weapon request in malware comments to stall AI-powered triage.
Thieves burn $600K in AI credits on stolen METR API key
AI safety nonprofit METR says attackers stole an API key and burned about $600,000 in model credits across two incidents.
Vishing crews pose as IT help desk inside Microsoft Teams
Unit 42 maps a campaign that hit 150 employees and pushed toward domain controllers.
Exploited Rails flaw lets attackers read secrets and run code
VulnCheck says KindaRails2Shell is under attack roughly a month after patches shipped.
Aurora ransomware gang scripts attacks with Cursor AI assistant
CloudSEK and Gambit find a Russian-speaking crew leaning on AI coding tools to plan intrusions.
Over 100 firms sign AI defense letter warning of shrinking patch window
The OpenAI-led group says AI attacks will outpace fixes without a coordinated defense surge.
Stolen browser sessions let thieves drain paid Claude accounts
Anthropic locks victims out and refunds charges after infostealers hijack active login sessions.
Vishing-led McKesson hack spills 284 million records, report says
ShinyHunters says it entered through phone calls, seized Okta sessions, and drained Salesforce and Snowflake data.
Spotlight
Fire Ant spies turn Cisco routers into credential-stealing outposts
Sygnia traces the China-nexus group beyond VMware to routers, TACACS servers, and management hosts.
Signed wallpaper app slips ValleyRAT past antivirus exclusions
Kaspersky ties the backdoor's new disguise to Silver Fox, which hid it inside a signed Chinese wallpaper tool.
CRPx0 ransomware service says victim list jumped past 48 firms
CRPx0's white-label ransomware service claims 48 victims as ClickFix lures spread to Windows and macOS.
Phishing kit rides genuine Docusign mail to swipe Microsoft sessions
The NovaCookies phishing service uses genuine Docusign notifications to steal Microsoft 365 sessions in real time.
Features
Cambodia RAT campaign weaponizes vulnerable driver to gut defenses
Acronis says a Cambodia-targeting campaign loads a vulnerable OPSWAT driver to kill security tools and drop Spark RAT.
Amazon’s Kiro IDE leaks data when poisoned projects get opened
A prompt injection flaw in Amazon's Kiro IDE can push sensitive local data to attackers when a poisoned project is…
Dark Caracal-linked malware fetches backup server from a smart contract
GoCaracal, a malware framework tied to Dark Caracal, stores a fallback C2 address on the Ethereum blockchain.
Patch rush for five WordPress add-ons after takeover-grade flaws
Five critical flaws across WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP open sites to takeover and code execution.
Ubiquiti patches 22 UniFi bugs including three perfect-10 flaws
Ubiquiti shipped fixes for 22 UniFi vulnerabilities, three of them perfect-10 access control flaws.
Hasbro tells staff personal data was taken in cyberattack
Hasbro is warning current and former employees that personal data may have been exposed in a breach tied to its…