Cybersecurity

Cybersecurity

Trezor warns of suspected crypto-theft implant in Safe 5 wallet

Trezor says it has received credible reports of a suspected hardware implant in a Trezor Safe 5 sold by Southeast Asian reseller CryptoBilis. The company has not yet examined the device and has not…

menu_book2 min read visibility1 reads history3 days ago linkBleepingComputer share

Cybersecurity

Pentagon investigates spoiled food in military freezers as possible cyberattack

US military bases reported malfunctioning commissary freezers and spoiled food in August 2026. The Pentagon is investigating whether the incidents were a coordinated cyberattack. According to Reuters, six bases reported

menu_book1 min read visibility1 reads history3 days ago linkTechRadar share

Cybersecurity

Malicious Claude Code extension on Cursor planted SSH backdoors

A malicious version of Anthropic’s Claude Code extension was available in Cursor’s VS Code extension marketplace for about 11 hours on October 29, exposing up to 5,000 developers to malware that attempted to install…

menu_book2 min read visibility1 reads history3 days ago linkBleepingComputer share

Cybersecurity

How SS7 and Diameter Attacks Can Expose Your Phone

Weaknesses in SS7 and Diameter, the signaling protocols mobile carriers use to route calls, texts and data, can let attackers track phones, intercept communications or impersonate subscribers without accessing their devi

menu_book2 min read visibility1 reads history3 days ago linkBleepingComputer share

Cybersecurity

Drupal warns of actively exploited critical Commerce Core flaw

Drupal has warned administrators to patch a critical access bypass vulnerability in its Commerce Core module, saying attackers are exploiting it in the wild. Tracked as CVE-2026-118539, the flaw stems from missing author

menu_book1 min read visibility1 reads history3 days ago linkBleepingComputer share

Cybersecurity

Lazarus Uses ML-KEM-1024 to Protect Malware Delivery

Kaspersky says the North Korean hacking group Lazarus has added post-quantum encryption to a malware delivery tool used in a campaign targeting South Korean organizations. In its analysis of Operation FlashHole, Kaspersk

menu_book2 min read visibility1 reads history3 days ago linkTechRadar share

Cybersecurity

Binance investigates potential $5.8 billion crypto theft

Binance says it is investigating reports of a potential security breach involving digital assets. The exchange has not confirmed whether any transfers were unauthorized, how the suspected breach occurred, or whether asse

menu_book2 min read visibility1 reads history3 days ago linkBleepingComputer share

Cybersecurity

Hugging Face malware campaign returns to mine cryptocurrency on GPUs

A malware campaign targeting Hugging Face model repositories returned within days of its first takedown, according to security researchers at Pluto Security. The researchers found 31 malicious repositories across seven a

menu_book2 min read visibility1 reads history3 days ago linkBleepingComputer share

Cybersecurity

Japan Airlines says Amadeus breach exposed data of about 92,000 customers

Japan Airlines (JAL) says a breach at Amadeus’s Passenger Service System exposed information linked to about 92,000 customers. JAL Group uses the system for reservations, ticketing and check-in for JAL and Japan Transoce

menu_book1 min read visibility1 reads history3 days ago linkBleepingComputer share

Cybersecurity

Study Finds Gaps in Oversight of AI Security Actions

A study by Illumio says organizations are handing decisions once made by people to AI, including decisions involving user permissions and sensitive data. Its findings point to gaps between the limits organizations believ

menu_book1 min read visibility1 reads history3 days ago linkTechRadar share