A Russian-speaking cybercriminal betrayed his ransomware-as-a-service (RaaS) partners to make off with funds extorted from over two dozen global victims, CloudSEK has revealed. The threat intelligence specialist detailed the double cross in a new report, The Gentlemen Files, published on… Read More "Ransomware Affiliate Double-Crosses Operator to Steal Victim Funds"
Social Engineering Detection Moves Into the Live Conversation
Companies are pouring time and dollars into security awareness training, but there is little empirical evidence to suggest it actually works against social engineering. Social engineering remains a primary and successful attack vector. While system vulnerabilities can be patched, social… Read More "Social Engineering Detection Moves Into the Live Conversation"
AI accelerates n-day attacks, as flaw disclosures and exploits double
Attackers are increasingly weaponizing already-disclosed flaws rather than new zero-days, and AI tools may be accelerating how quickly they do it. According to a report from Google’s Threat Intelligence Group (GTIG), attackers have exploited more vulnerabilities in the wild thus… Read More "AI accelerates n-day attacks, as flaw disclosures and exploits double"
FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
Ravie LakshmananOct 06, 2026 The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees. That’s according to a… Read More "FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach"
Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each product’s web application root directory. The attacker must already know a file’s exact name… Read More "Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products"
ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits
A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browser’s cache. “Instead of downloading and executing remote payloads like the typical attack pattern, in this attack, the… Read More "ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits"
Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account
Unauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 million people, living and dead, in Denmark’s national population register, the country’s digitalization ministry said on October 5. They used a private Danish company’s… Read More "Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account"
Teams-Themed Phishing Campaign Abused Legitimate Microsoft Login Pages
A recent hacking campaign impersonated notifications from Microsoft Teams and abused Microsoft’s legitimate authentication infrastructure to compromise corporate Outlook, SharePoint and OneDrive accounts. In a blog post published on July 29, cybersecurity researchers at Check Point warned that attackers are… Read More "Teams-Themed Phishing Campaign Abused Legitimate Microsoft Login Pages"
AI and Automation Fall Short of Sysadmin Expectations
AI and automation have not been as transformative for IT and security workflows as system administrators thought they would be when asked two years ago, according to Action1. The endpoint management specialist polled over 1000 sysadmins globally to compile its… Read More "AI and Automation Fall Short of Sysadmin Expectations"
Anthropic Reveals Claude Escaped Testing, Breaching Three Companies
Anthropic has found evidence that three of its Claude AI models reached the internet from an evaluation environment to hack third-party organizations, in an echo of revelations from OpenAI last week. The AI giant said in a blog post on… Read More "Anthropic Reveals Claude Escaped Testing, Breaching Three Companies"