India says the Kudankulam leak of documents, claimed by the World Leaks cybercrime group to originate from the Kudankulam Nuclear Power Plant, poses no risk to the facility’s safety or security. Indian officials confirmed that the leaked files contain no sensitive details that threaten the plant’s operational integrity. These disclosures come amid rising concerns about […]
Dutch intelligence says Russia is exploiting hacked IP cameras in a widespread espionage operation. This activity, confirmed by the Netherlands’ intelligence agencies AIVD and MIVD, targets cameras across the Netherlands, other EU and NATO nations, and Ukraine to gather critical military intelligence. The focus is on intercepting data about military transport routes and weapons shipments […]
Rapid7 pulls down an AI-assisted phishing toolkit from an exposed server, revealing a sophisticated WebDAV malware campaign. The cyber investigation company retrieved an extensive collection of 1,048 files from the unsecured server. These files included lure templates, filename-spoofing tests, execution experiments, droppers, and builder notes. Two distinct campaign chains emerged from the data. One of […]
A recent alert by Rapid7 has revealed a GenAI-powered malware factory crafted by threat actors to create over 1,000 attack files. This unexpected exposure on a WebDAV server provided insights into how these actors assemble, test, and distribute malicious software. Attackers targeted Windows users with deceptive documents and phishing lures exploiting WebDAV and file explorer […]
Security researchers reported swift exploitation of a newly disclosed vulnerability within the ServiceNow AI platform, known as CVE-2026-6875. This flaw can lead to remote code execution, marking a significant concern for enterprises relying on ServiceNow’s services. Cyber attackers began targeting this vulnerability mere days after its disclosure, escalating the urgency for affected organizations to implement […]
Estée Lauder confirms an Oracle EBS zero-day hack in August 2025 that led to the exfiltration of personal, financial, and health information. The attack targeted the company’s Oracle EBS instance, a software suite commonly used by large enterprises for supply chain, financial, and human resources management. The breach has raised significant concerns about data protection, […]
Coca-Cola halts Fairlife production across the United States following a debilitating ransomware attack. Company officials clarified that this disruption has not compromised the integrity or safety of its products. Importantly, Fairlife’s Canadian facilities continue operations without any interruptions. The interruption underscores the increasing threat of cyberattacks on major corporations, emphasizing the urgent need for robust […]
A Russian-speaking hacker, known by the alias ‘bandcampro,’ has adopted Google’s open-source Gemini CLI artificial intelligence to bolster their cyber operations, illustrating how Google Gemini fuels botnet control. This hacker employed the AI to break passwords and manage a botnet comprising eight dental clinic computers. The activities were uncovered through analysis of 200 Gemini CLI […]
F5 has released a patch, highlighting warnings for a severe vulnerability in NGINX, tracked as CVE-2026-42533. This vulnerability, scoring 9.2 on the CVSS, allows attackers to exploit heap buffer overflow via crafted HTTP requests, potentially leading to remote code execution. The flaw affects versions 0.9.6 to 1.31.2 of NGINX, both open source and NGINX Plus. […]
Microsoft fixes a Windows bug with the release of an emergency update aimed at addressing shutdowns on some Dell PCs. This quick response follows reports of adverse impacts caused by the July 2026 Windows 11 security updates. Users experienced unplanned shutdowns, leading to considerable disruptions in operations. By rolling out the KB5121767 out-of-band (OOB) update, […]
Hackers gained unauthorized access to sensitive data hosted by Ernst & Young, targeting a third-party management platform in a recent breach. The Ernst and Young hack compromised the personal information of individuals, including names, addresses, Social Security numbers, and credit/debit card details. Such breaches highlight vulnerabilities in data management systems and emphasize the critical need […]
OkoBot, a sophisticated new malware strain, targets cryptocurrency users by deceitfully embedding itself within fake software, thereby executing its primary function: stealing vital crypto seed phrases. Security firm Kaspersky disclosed that OkoBot, employing tactics like ClickFix and hidden browser extensions, goes beyond mere data theft. This malicious software clandestinely intercepts users’ workflow by recording activities […]