Five alleged leaders of the Black Axe criminal organization have been extradited from South Africa to the US to face charges over romance scams, advance-fee fraud and money laundering. The US Department of Justice (DoJ) said the five Nigerian nationals… Read More "Black Axe Members Extradited to US Over Internet Fraud Claims"
One Packet Can Crash OT Servers in Industrial Sectors
CORRECTION A now-patched flaw in an open source database used in industrial and Internet of Things (IoT) environments could let unauthenticated attackers crash vulnerable servers with a single specially crafted network packet if not addressed. The vulnerability, tracked as CVE-2026-42542… Read More "One Packet Can Crash OT Servers in Industrial Sectors"
Most Firms Unable to Recover Quickly from Ransomware
Only four out of more than 800 clients (0.5%) assessed by Fenix24 came close to their own 24 to 48-hour ransomware recovery targets, and then only for partial business operations. None reached full operational capacity until several weeks after the… Read More "Most Firms Unable to Recover Quickly from Ransomware"
‘NeedyMantis’ Provides Long-Term Access to Compromised Networks
A previously unidentified malware family is giving attackers long-term stealth access to targeted networks once they’ve already infiltrated a system, revealing a potential blind spot for defenders that tend to focus more on initial intrusion rather than post-compromise activity. The… Read More "‘NeedyMantis’ Provides Long-Term Access to Compromised Networks"
Most Fraudulent Hires Receive Credentials Before Detection
Most fraudulent hires receive corporate credentials and internal network access before being detected, according to a new report by HYPR. Fraudulent candidates successfully navigate pre-hire screening and take up their roles in 42% cases. Just 3% are subsequently detected as… Read More "Most Fraudulent Hires Receive Credentials Before Detection"
FTC is Investigating OpenAI and Anthropic Over Possible risks to Consumers
The U.S. Federal Trade Commission has opened an investigation into OpenAI, Anthropic and other artificial intelligence companies over dangers their technology may pose to consumers, the agency said Wednesday. The AI giants and other tech companies in recent months have… Read More "FTC is Investigating OpenAI and Anthropic Over Possible risks to Consumers"
Unsloth Studio Flaw Turns Model Inspection Into Code Execution
Unsloth has fixed a vulnerability in its Web user interface (UI) front end that exposed users to arbitrary code execution through malicious models. Pillar Security’s Ariel Fogel published a blog post today covering a flaw in Unsloth Studio. Unsloth Studio… Read More "Unsloth Studio Flaw Turns Model Inspection Into Code Execution"
Russian-Linked Hackers Accessed Polish Power Plant OT Through APN
The Polish CERT (CERT.PL) has published details of another attack on its energy infrastructure which took place during a suspected Russian cyber campaign in December 2025. The post mortem on the attack took three months to complete and was therefore… Read More "Russian-Linked Hackers Accessed Polish Power Plant OT Through APN"
Apple Zero-Day Vulnerability Weaponized in Targeted Attacks
Apple released new versions of iOS and macOS to address a zero-day vulnerability that a threat actor is actively exploiting in targeted attacks. The out-of-bounds write vulnerability, tracked as CVE-2026-86950, affects Apple’s CoreGraphics framework, which macOS and iOS use to… Read More "Apple Zero-Day Vulnerability Weaponized in Targeted Attacks"
NIST Seeks Public Input on AI-Ready NVD Modernization
The US National Institute for Standards and Technology (NIST) is looking to modernize its National Vulnerability Database (NVD) to address challenges posed by AI and incorporate more automation and AI workflows. In a request for information (RFI) published on August… Read More "NIST Seeks Public Input on AI-Ready NVD Modernization"