Cyberattack on Japanese logistics firm forces KFC to halt online orders
A ransomware attack on Nichirei Group cold-chain logistics systems disrupted KFC Japan ingredient supply, stopping app and website orders.
The Latest
Chinese actors use Claude Code and DeepSeek to automate cyber espionage
Security researchers uncovered state-sponsored operators using Claude Code and DeepSeek models to automate intelligence gathering and maintain persistent access to…
Scattered Spider hackers sentenced to five years for TfL cyberattack
Two members of the Scattered Spider cybercrime gang received 5.
Unpatched Shark vacuum flaw lets attackers control millions of devices remotely
A certificate flaw in Shark robot vacuums allows attackers to command any device in the same AWS region, accessing cameras…
ClickLock macOS stealer kills apps every 210ms until victims give up password
A new infostealer called ClickLock holds macOS desktops hostage by repeatedly killing applications until the user types their login password.
SonicWall SMA1000 zero-days exploited in the wild for ransomware access
Two chained vulnerabilities give attackers full remote code execution on unpatched SMA 1000 appliances.
Critical RabbitMQ bug exposes OAuth secrets to unauthenticated attackers
A high-severity flaw in RabbitMQ lets attackers steal OAuth secrets from the management interface without authentication.
Ryuk ransomware operator pleads guilty in US federal court
An Armenian national admitted to deploying Ryuk ransomware on hundreds of corporate servers, collecting over $15 million in Bitcoin ransoms.
Memghost attack plants false memories in AI agents through a single email
Researchers discovered the MemGhost technique, which injects persistent false memories into AI agents via crafted email content, causing long-term manipulation…
Progress orders ShareFile customers to shut down storage zone servers
Progress Software told ShareFile customers to power down on-premises Storage Zone Controllers over an undisclosed security threat.
FBI seizes NetNut proxy platform behind 2-million-device popa botnet
The FBI seized domains tied to NetNut, a residential proxy service linked to a botnet of at least two million compromised smart TVs and streaming devices.
UK and EU formally blame Russian FSB for cyberattack on Poland’s power grid
The UK and EU formally attributed the December 2025 cyberattack on Poland's power grid to Russia's FSB, issuing fresh sanctions…
Google and Microsoft pull ModHeader extension with 1.6 million installs
Google and Microsoft removed the ModHeader browser extension from their stores after discovering a dormant data collector in a March…
New GigaWiper backdoor bundles disk wiping, fake ransomware, and spyware
Microsoft uncovered GigaWiper, a destructive Windows backdoor combining disk-wiping, fake ransomware, and espionage capabilities in a single payload.
Spotlight
CrashStealer macOS Malware Evades Gatekeeper Using Notarized Dropper
Jamf Threat Labs discovers new macOS stealer using signed and notarized dropper to bypass Gatekeeper protections
First agentic ransomware autonomously hacks network and demands payment
Sysdig documents the first confirmed agentic ransomware operation to autonomously complete the full attack chain.
Microsoft patches record 622 flaws including two zero-days under attack
Microsoft's July 2026 Patch Tuesday fixes 622 CVEs including exploited SharePoint and AD FS zero-days
Exposed server reveals WP-SHELLSTORM backdooring thousands of WordPress sites
WP-SHELLSTORM crew exposed after leaving server open, revealing 1.4M site targets and mass webshell operations
Features
Claude for Chrome flaw lets other extensions read Gmail and Google Docs
Two unpatched Claude for Chrome flaws let rogue extensions forge clicks that access Gmail, Docs, and Calendar data.
Jailbroken Google Gemini spun up new C2 server for Russian fraudster in six minutes
A jailbroken Gemini AI performed 90% of a Russian fraudster's botnet operation including spinning up a C2 server in six…
AsyncAPI npm packages with millions of weekly downloads compromised via GitHub actions
Five AsyncAPI npm packages with 2.9 million weekly downloads were trojanized after a GitHub Actions token theft.
Hackers spoofed 3.7 million OAuth client ids to enumerate entra ID users
Attackers used 3.7 million spoofed OAuth client IDs to enumerate Entra ID user accounts and map application ecosystems.
LabubaRAT masquerades as NVIDIA software to control Windows hosts
A new Rust-based RAT called LabubaRAT disguises itself as NVIDIA software and supports multi-channel C2 communications.
German textile firm files for insolvency after cyberattack shut production for six weeks
German manufacturer ZEGO-TVZ filed for insolvency after a March cyberattack halted production for nearly six weeks.
