AI is changing cybersecurity teams — but not necessarily by replacing the people who work on them. New research from IANS finds that CISOs are largely looking to AI to help their existing teams do more, while rethinking how work… Read More "IANS’ Kakolowski: How AI Is Reshaping CISO Budgets"
Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan
Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate processes to blend in and evade detection. Threat actors are known to name their malicious software after… Read More "Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan"
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Cybersecurity researchers have disclosed details of a “human-operated phishing platform” that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus. The products, which claim to offer campaign optimization, spend… Read More "Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes"
FBI removes contractor working with its PeopleSoft system after data breach, says report
The US Federal Bureau of Investigation has removed an Accenture contractor working on its PeopleSoft installation over their role in a data breach that exposed personal details of FBI employees, Reuters reported Monday. This is the first time that anyone… Read More "FBI removes contractor working with its PeopleSoft system after data breach, says report"
Critical Medical Devices Unable to Support PQC Transition
Most medical devices cannot be upgraded to post-quantum cryptography (PQC), leaving sensitive healthcare data vulnerable to future quantum-enabled attacks, an investigation by Forescout has found. An analysis of more than 2.5 million devices across more than 50 healthcare delivery organizations… Read More "Critical Medical Devices Unable to Support PQC Transition"
ClickFix Attack Hides VBScript Payload in Browser Cache
A ClickFix campaign has been observed hiding a VBScript payload in the browser cache, disguised as an image, so the script was already on the device when the victim was tricked into running a command through Windows Run. Microsoft Threat… Read More "ClickFix Attack Hides VBScript Payload in Browser Cache"
FBI Blames Contractor’s Missed Patch for ShinyHunters Breach
The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees, Reuters reported on Tuesday, citing two people familiar with the matter. The FBI has not publicly named the contractor or… Read More "FBI Blames Contractor’s Missed Patch for ShinyHunters Breach"
Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
The Hacker NewsOct 06, 2026Supply Chain / Artificial Intelligence In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered. Thousands of… Read More "Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers"
Nikkei Discloses Two Employee Cloud Account Compromises
Japanese media group Nikkei has disclosed unauthorized access to two employee cloud accounts, one of which was used to send around 9000 phishing emails to staff and to people its journalists had been in contact with. In a statement published… Read More "Nikkei Discloses Two Employee Cloud Account Compromises"
FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware
A Venezuelan national believed to be a leader of Tren de Aragua (TdA)’s ATM jackpotting activities and the developer of the infamous Ploutus ATM malware has been arrested. According to the US, TdA is a violent transnational criminal organization that… Read More "FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware"