Three-quarter of cyber incidents affecting UK critical infrastructure organizations over the past year originated from nation-state actors or were linked to hostile states such as Russia, China and Iran, according to Richard Horne, CEO of the UK’s National Cyber Security… Read More "Hostile States Behind 75% of Cyber-Attacks on UK CNI, NCSC Warns"
A coordinated campaign against government and financial targets across Latin America has been laid bare by the attackers’ own mistake, after they left a staging server exposed online. New analysis from CloudSEK detailed the operation, which it named Operation Escaneo,… Read More "LATAM Infrastructure Hit by Fortinet and Ivanti Exploits"
Cybercriminals are experiencing the same concerns as many employees working in legitimate jobs: many are worried that the rise of AI tools and large language models (LLMs) could result in them losing their jobs. That is according to analysis of… Read More "Cybercriminals Are Worried About AI Taking Their Jobs Too"
The UK’s data protection watchdog has decided not to purse a criminal investigation against a former healthcare worker who tried to access and sell the medical records of the Princess of Wales. The Information Commissioner’s Office (ICO) began a criminal… Read More "ICO Cautions Healthcare Worker After Princess of Wales Incident"
A cryptocurrency-stealing malware campaign has been spreading by faking its own popularity, dressing up booby-trapped “tools” with bogus GitHub stars, inflated download counts and AI-narrated YouTube tutorials. New analysis from Check Point Research traced the operation to a Rust-based clipboard… Read More "Fake GitHub Stars and AI Videos Mask a Crypto Clipper"
Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that’s distributed by means of a multi-stage phishing chain capable of bypassing traditional security controls. Avalon combines credential collection, lateral movement, remote access, recovery disruption, and ransomware execution,… Read More "New Avalon Malware Framework Packs CrownX Ransomware Capabilities"
A leading security vendor has warned customers that attackers are actively exploiting a high-severity CVE in one of its products that it patched last month. CVE-2026-0257 is an authentication bypass vulnerability in the GlobalProtect portal and gateway of Palo Alto… Read More "Palo Alto Warns High-Severity Bug Is Being Actively Exploited"
Security firm runZero has disclosed seven vulnerabilities in FatFs, a small filesystem library that lets a device read and write the FAT and exFAT formats used on USB drives and SD cards. The flaws matter because FatFs is nearly everywhere. It ships inside… Read More "Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices"
Threat actors are delivering malware from phishing pages hosted on legitimate ChatGPT domains, Push Security has warned. The vendor claimed that hackers are abusing ChatGPT’s code-rendering feature to build pages spoofing the brand. These redirect victims to a fake download page… Read More "Attackers Abuse Shared Content for ChatGPT Phishing Campaign"
A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no special access take full control of a machine as root. It affects Linux desktops, servers, and Android, and a fix is out. Bad Epoll… Read More "New “Bad Epoll” Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android"
