A long-running malware campaign targeting the Node Package Manager (NPM) ecosystem has successfully distributed malicious code through eight compromised…
Tag: CyberMaterial
FBI Confirms Multiple Arrests in ShinyHunters Probe
The FBI has confirmed arresting multiple suspects during its investigation into the ShinyHunters extortion group, though the bureau declined to identify…
Asos hacked; threatening notification sent to customers
Fashion retailer Asos experienced a significant security breach on Tuesday morning when attackers gained unauthorized access to its app notification…
Hack The Box launches AI Range Enterprise Edition
Hack The Box has launched AI Range Enterprise Edition, a new platform designed to help enterprise security teams test and evaluate AI security agents…
Cyber Briefing: 2026.10.06
Malicious packages, critical software flaws, customer-targeted compromise, and extortion activity remain key risks, while security teams are developing…
Cyber Briefing: 2026.10.05
Deepfakes, evolving phishing techniques, large-scale data exposure, AI-related access risks, and regulatory changes are reshaping how security teams…
Google Suspends Open-Source Bug Bounty Until 2027
Google announced on October 1 that it is suspending its Open Source Vulnerability Rewards Program (OSS VRP) until 2027, citing an overwhelming increase in…
Senate Passes Healthcare Cybersecurity Bill
The U.S.
Denmark population register breach affects 8.8M
Denmark is investigating a significant data breach affecting its national population register, with approximately 8.8 million records potentially…
Deepfakes weaponized for social engineering attacks
Deepfake technology is being actively weaponized by cybercriminals to conduct sophisticated social engineering attacks, according to cybersecurity experts…
Apple Tightens macOS Full Disk Access Controls
Apple has announced stricter controls for Full Disk Access permissions in macOS following concerns that AI agents and other applications are exploiting…
Star Blizzard Phishing Campaign with RedFlick
Russian state-sponsored threat group Star Blizzard has expanded its phishing operations with a new malware delivery technique dubbed RedFlick, according…
Cyber Briefing: 2026.10.01
Malware campaigns are combining phishing, browser-session theft, and malicious loaders to compromise accounts, while a major military-data breach has…
LLM Pen Testing: Harness Matters More Than Model
Ridge Security released the first public benchmark comparing eight leading large language models in autonomous penetration testing workflows, revealing…
Pentagon breach exposes 2.76M SSNs, military records
The Pentagon has confirmed a major data breach at the Defense Manpower Data Center (DMDC) that exposed sensitive personal information belonging to…
Microsoft enables Windows settings backup by default
Microsoft has activated Windows settings backup and restore by default for enterprise devices upgraded to Windows 11 version 26H2.
Treasury Blacklists ATM Malware Developer
The United States Treasury Department has imposed sanctions on a malware developer and associated network members connected to the Tren de Aragua criminal…
Underground Crypto-Stealing Operation Drains $100K
A sophisticated cryptocurrency-stealing operation has successfully drained roughly $100,000 from victims by hijacking their authenticated browser…
Star Blizzard APT Uses RedFlick Chain
Russian state-sponsored threat actor Star Blizzard has adopted a new infection technique dubbed RedFlick to deploy the CosmicPulse backdoor in recent…
Cyber Briefing: 2026.10.02
Shadow AI exposure, healthcare tracking disputes, a hijacked Microsoft X account, accelerated vulnerability-reporting requirements, an Iranian hacking…