Cybersecurity

Cybersecurity

Dustin breach may expose customers to future attacks

Dustin says the hacker group FulcrumSec has begun publishing data from its breach of the IT reseller. FulcrumSec claims it holds 6.2 terabytes of data and that the first release was about 430 gigabytes…

menu_book2 min read visibility1 reads history3 days ago linkTechtidningen share

Cybersecurity

Microsoft warns of passkey phishing campaign targeting cloud accounts

Passkeys have made password theft far more difficult, but attackers are adapting by tricking users into authenticating on computers they control. A new Microsoft report describes a highly sophisticated campaign aimed at

menu_book2 min read visibility1 reads history3 days ago linkTechRadar share

Cybersecurity

AI voice scams are making familiar voices unreliable

AI voice cloning has reached a point where scammers can convincingly imitate people, making a familiar voice unreliable proof of identity. A 2026 paper, Evaluating AI Models' Capability to Automate Voice Phishing Attacks

menu_book2 min read visibility1 reads history4 days ago linkTechRadar share

Cybersecurity

Hidden attack bypassed Claude Code Auto Mode

Security researcher Johann Rehberger says he tricked Anthropic’s Claude Code, running Opus 5, into executing malicious code after asking it to summarize content. His prompt-injection attacks worked in 60% to 80% of tests

menu_book2 min read visibility5 reads history4 days ago linkBankinfosecurity share

Cybersecurity

Revolut discloses data breach exposing financial information and passports

Fintech company Revolut has disclosed a data breach after sharing information from an undisclosed number of customers with a threat actor impersonating a government agency. The attacker requested personally identifiable

menu_book1 min read visibility1 reads history4 days ago linkBleepingComputer share

Cybersecurity

Hackers exploit Tencent app flaw to deploy GrayRabbit malware

Threat actors linked to a China-aligned espionage group are exploiting critical vulnerability CVE-2026-51990 in Tencent’s Sogou Input Method for Windows to deploy the GrayRabbit backdoor, Gen Digital researchers report.

menu_book2 min read visibility1 reads history5 days ago linkBleepingComputer share

Cybersecurity

Dutch NCSC warns exploitation of two critical Check Point VPN flaws is imminent

The Dutch Nationaal Cyber Security Centrum (NCSC) warns that exploitation of two critical flaws in Check Point VPN is imminent. The vulnerabilities are tracked as CVE-2026-85102 and CVE-2026-85103. No public proof-of-con

menu_book2 min read visibility1 reads history6 days ago linkBleepingComputer share

Cybersecurity

Passkey-themed phishing hits Microsoft 365 accounts and steals data

Microsoft says threat actors linked to ShinyHunters, Helix and other extortion gangs are using passkey- and single sign-on-themed social engineering to compromise corporate accounts and steal data from Microsoft 365 serv

menu_book1 min read visibility1 reads history6 days ago linkBleepingComputer share

Cybersecurity

Researcher Says 6TB Claude Routing Dump Could Enable Hacks of Xiaomi, Huawei and Chinese Agencies

A researcher says a 6TB data dump from a China-based large language model router contained enough valuable credentials to enable attacks on Xiaomi, Huawei and Chinese government agencies. The data was reportedly gathered

menu_book1 min read visibility1 reads history1 week ago linkWccftech share

Cybersecurity

Attackers Abuse Trusted AI Platforms to Deliver Malware

Attackers are abusing trusted AI platforms to host malicious content, manipulate search results and deliver malware, according to Huntress. Over the past nine months, the Huntress Security Operations Center tracked campa

menu_book1 min read visibility1 reads history1 week ago linkBleepingComputer share