Police Arrest Two Alleged TeamPCP Members Linked to Shai-Hulud Attacks
Australian authorities have charged two alleged TeamPCP members after software supply chain attacks exposed over 500,000 credentials and at least 300GB of data.
Data Breach Affects 8.7 Million Customers of Three UK Airports
Manchester Airports Group data breach affected 8.7 million customers at three UK airports, exposing mainly emails, phone numbers, postcodes and vehicle details.
CISA: Hackers Targeted Over 100 Internet-Exposed Water Systems
More than 100 U.S. water systems faced cyberattacks in July, with exposed PLCs and cellular modems giving hackers access to some utility controls and operations, CISA has now revealed.
CISA Warns Agencies to Patch Actively Exploited Oracle WebLogic Proxy Flaw
CISA has given federal civilian agencies until August 27 to patch the exploited Oracle flaw that can expose or alter critical data without prior authentication.
24,700 Fake Debt Relief Emails Target Over 9,000 Organizations in 14 Days
The fake debt relief emails contain no malicious links or attachments, but direct recipients to attacker-controlled phone numbers for vicrim's data.
NVIDIA NemoClaw Flaw Lets Malicious Websites Hijack OpenClaw AI Agents
A NemoClaw network configuration flaw lets malicious websites reach local Ollama servers, alter model templates and plant lasting instructions inside AI agents.
RecruitTrap Scam Uses Fake Interview Invites to Steal Corporate Logins
RecruitTrap scam uses fake recruitment pages on mobile devices to hide URL clues, reject personal emails and steal corporate login credentials.
Fake Minecraft Clients Spread WeedHack Malware on Windows to Steal Passwords
Fake Minecraft clients are delivering WeedHack malware that steals gaming sessions, browser passwords, crypto wallets and personal files from infected Windows systems.
Cudy WR3000 Router Flaws Can Be Chained to Gain Root Access
Public exploit tools for 2 Cudy WR3000 flaws can forge JWTs, bypass MQTT authentication, and remotely execute operating-system commands as root on the router.
ToxicPanda 2.0 Targets 349 Financial Apps and Steals Android Lock Credentials
ToxicPanda 2.0 is going after Android users in 16 countries, stealing banking and unlock credentials while taking control of devices through Wireless Debugging.