A single shared IP fronted 1,200 lookalike shopping domains
Akamai's 2026 Fraud and Abuse Report traces retail fraud networks that survive takedowns by rebuilding look-alike storefronts within hours.
The Latest
Belgium took its tax portal down rather than let an intrusion spread
FOD Financien isolated infected elements and pulled MyMinfin, Tax-on-web and Biztax offline, pushing the filing deadline to November 16.
A DHS directory leaked while the agency was still investigating
An Okta records haul covering 41,000 staff reached a public leak site days after the hackers handed it to a…
Drupal Commerce orders are being lifted through a route guard gap
Drupal rates the Commerce Core access bypass 21 out of 25 and says it is already being exploited against stores…
Comcast’s Claude Code extension hid an SSH tunnel in plain sight
A tampered 2.1.313 build on Open VSX added an attacker key to authorized_keys and kept a tunnel alive after the…
An intruder moved $6.3B out of Binance in roughly twenty minutes
Analysts point to North Korea's TraderTraitor after Binance wallets on ten blockchains produced valid signatures the exchange cannot explain.
A reseller’s Trezor shipped with an extra board and a radio
Trezor is warning CryptoBilis buyers to build a fresh wallet after a customer found a second circuit board that reads…
Bitdefender counts 4.85 billion scans against home routers
Televisions and smart plugs carried nearly a quarter each of the vulnerability observations in nine months of telemetry from 10.4…
Fake OpenAI and Anthropic installers hide miners behind real binaries
Check Point traced the Yoba campaign through SEO-poisoned sites and real GitHub repositories shipping DLL sideloading.
Google’s Gemini 4 Carbon doubles down on secure code
Google claims its newest model writes secure code more than twice as often as Argon and fixes flaws Chrome's team…
A logic-only chain walked out of Edge without memory corruption
Orange Tsai's Pwn2Own Berlin chain used five mishandled browser features and fewer than 100 lines of code.
Alpine rebuilt its GitLab after a CVSS 10 flaw nearly landed
The distro's own forge ran vulnerable Ruby for a week, and the logs needed to rule out code execution were…
Thousands of live Gitee secrets include an AI platform admin key
A month-long scan of 7.25 million Chinese repositories produced 26,400 credentials that still authenticated when tested.
Volt Typhoon rebuilds its relay chain in under two minutes
Black Lotus Labs mapped four years of throwaway relay hops that carried at least four zero-day exploits into US networks.
Spotlight
Stolen school logins are hopping between districts by email
MS-ISAC flagged leaked credentials at 808 K-12 organisations and traced attacks spreading through genuine staff mailboxes.
Attackers posed as 32 AI bots to hunt for secret files
Cequence caught one actor cycling through fabricated OpenAI, Anthropic and Meta user agents against roughly 90 credential paths.
An autonomous researcher found four bugs in lab control software
EPICS Base carries a 9.8 integer overflow that could turn accelerator consoles into remote code execution.
A vendor key on a public website exposed 238,000 health records
SquareML's read-only analytics credential sat online for fourteen months before anyone revoked it.
Features
Adobe patches four 9.9 flaws in Campaign Classic at once
Eight critical bugs reach arbitrary code execution and security bypass in the marketing platform.
Turning off remote code trust does not save Unsloth users
A model-type string reaches exec() in a flaw rated 8.6, so a trusted-looking config can run attacker code.
Trend Micro maps three intrusions with AI at three depths
One attacker ran 44 agents from recon to reporting while another used a model only to write tools.
GMO offers $1M for tips after refusing an extortion demand
The Japanese group shut 26,739 trading desktops and is now paying for information leading to arrests.
Infisical reaches a $600M valuation on agent credential demand
The secrets manager raised $40M to keep AI agents away from the keys they act on.
So-net confirms 2.2 million member records left its database
Sony's Japanese internet arm found the October 19 break-in four days later and cut the server's network link.