loader image
France Tax Agency Missed Data Theft Seven Weeks

In a breach lasting seven weeks, cyber attackers successfully siphoned off tax data from the France tax agency using stolen staff passwords. According to a report by France’s national cybersecurity agency, ANSSI, the perpetrators exfiltrated information on hundreds of thousands of taxpayers and businesses in June and July, without being detected. Investigators found that the […]

DIVD Breached by AI Agent in Messy Attack

The Dutch Institute for Vulnerability Disclosure (DIVD) was breached by an AI-driven cyberattack, which the organization described as ‘loud and very, very messy.’ The incident highlights a growing trend where attackers harness automated artificial intelligence to exploit cybersecurity organizations. The breach underscores the increasing sophistication of tools employed by cybercriminals, who take advantage of AI […]

OLVX Operator Charged in North Macedonia

Authorities have charged the alleged OLVX operator in North Macedonia, following the disruption of a significant cybercrime marketplace earlier this year. Officials reported that the marketplace was dismantled in April, leading to the arrest of a 20-year-old suspect believed to be spearheading the illicit activities. Since its inception in 2023, the platform, known as OLVX, […]

Azerbaijan Blocks Social Media Amid Hijab Protests

In Azerbaijan, social media platforms Instagram, TikTok, and X faced blocking across multiple internet service providers as protests erupted against a school hijab ban. This clampdown on communication began as students protested rules excluding hijab-wearing girls from classrooms. The Proton observatory reported a surge in VPN sign-ups from Azerbaijani users, reaching over 4000% above the […]

Hack Forces French Supermarket Fridges to 50C

A hack forces a French supermarket to address a serious cybersecurity breach affecting its refrigerated units. Hackers managed to seize control of the software governing these units, causing temperatures to soar to 50°C (120°F) overnight. Supermarkets typically allow freezers a brief defrost cycle, where temperatures momentarily rise. However, these cybercriminals maliciously manipulated the system to […]

European Bank Breached Through Third-Party Gateway

A European bank was breached through a third-party gateway with insufficient security measures, putting its central systems at risk. Attackers exploited weak authentication protocols to gain unauthorized VPN access, allowing them to target the bank’s Windows Server Update Services (WSUS) infrastructure. Unit 42’s investigation, published on October 13, 2026, revealed compromised credentials as the entry […]

ECSO Outlines Six EU Space Cyber Priorities

The European Cyber Security Organisation (ECSO) outlines six priorities for the EU space cybersecurity policy, placing emphasis on robust security measures. Central to these priorities is the implementation of secure-by-design principles, which aim to embed security features at the earliest stages of system development. Furthermore, ECSO advocates for enhanced threat intelligence sharing to bolster collective […]

WordPress Plugin Flaw Risks Takeover of 5M Sites

A critical flaw in the All-in-One WP Migration and Backup plugin threatens over 5 million WordPress sites, exploiting SQL injection risks. Known as CVE-2026-19949, the vulnerability affects versions up to 7.109, allowing attackers to take control of websites. Security researcher Jack Taylor, through Wordfence’s Bug Bounty Program, identified the issue, earning $5,761 for his discovery. […]

Malicious Apache Modules Hijack Brazil Sites

Brazilian government websites have been compromised with malicious Apache modules, turning them into unsuspected phishing proxies. This discovery indicates a shift from domestic cyber threats in Brazil to exploitation by foreign actors, with the Chinese-speaking Gambling Goblin group identified behind the attacks. These actors use compromised servers to disguise fraudulent content on legitimate domains effectively. […]

The Gentlemen Hackers Encrypt Networks in 24 Hours

The Gentlemen hackers, a notorious ransomware group, have accelerated their attack strategy to encrypt enterprise networks within 24 hours. By disabling endpoint detection and response (EDR) systems along with backups, these criminals swiftly render businesses vulnerable. As a ransomware-as-a-service operation, the group allows affiliates to target accessible organizations. Analysts from Sophos, who studied 15 incidents […]

Bank of Baroda Confirms Email Account Breach

The Bank of Baroda breach has raised concerns after the institution confirmed that an employee’s email account was compromised. This security lapse allowed hackers access to certain sensitive data, the bank reported. The bank assured stakeholders that they swiftly initiated measures to contain the breach and mitigate further risks. Security protocols were reviewed to prevent […]

Workers Ask AI First, Threatening Teamwork

A growing trend shows that workers ask AI first before turning to colleagues for assistance. A recent series of studies highlights a shift where 75% of employees prefer AI tools over human interaction for workplace queries. This inclination could potentially backfire, according to experts. They warn that relying heavily on AI could diminish interpersonal skills […]