In a breach lasting seven weeks, cyber attackers successfully siphoned off tax data from the France tax agency using stolen staff passwords. According to a report by France’s national cybersecurity agency, ANSSI, the perpetrators exfiltrated information on hundreds of thousands of taxpayers and businesses in June and July, without being detected. Investigators found that the […]
The Dutch Institute for Vulnerability Disclosure (DIVD) was breached by an AI-driven cyberattack, which the organization described as ‘loud and very, very messy.’ The incident highlights a growing trend where attackers harness automated artificial intelligence to exploit cybersecurity organizations. The breach underscores the increasing sophistication of tools employed by cybercriminals, who take advantage of AI […]
A critical flaw in the All-in-One WP Migration and Backup plugin threatens over 5 million WordPress sites, exploiting SQL injection risks. Known as CVE-2026-19949, the vulnerability affects versions up to 7.109, allowing attackers to take control of websites. Security researcher Jack Taylor, through Wordfence’s Bug Bounty Program, identified the issue, earning $5,761 for his discovery. […]
Brazilian government websites have been compromised with malicious Apache modules, turning them into unsuspected phishing proxies. This discovery indicates a shift from domestic cyber threats in Brazil to exploitation by foreign actors, with the Chinese-speaking Gambling Goblin group identified behind the attacks. These actors use compromised servers to disguise fraudulent content on legitimate domains effectively. […]
The Gentlemen hackers, a notorious ransomware group, have accelerated their attack strategy to encrypt enterprise networks within 24 hours. By disabling endpoint detection and response (EDR) systems along with backups, these criminals swiftly render businesses vulnerable. As a ransomware-as-a-service operation, the group allows affiliates to target accessible organizations. Analysts from Sophos, who studied 15 incidents […]