Crypto wallets, banking apps, and public-sector systems are being targeted by malicious activity, while defenders and regulators are tightening controls…
Tag: CyberMaterial
EU CRA 24-Hour Vulnerability Reporting Rule Effective Sept 1
Manufacturers selling connected products in the European Union face a new legal obligation beginning September 11, 2025, requiring them to report actively…
F5 launches Workforce AI Security platform
F5 has introduced Workforce AI Security, a new platform designed to give enterprises visibility and control over how employees interact with AI tools and…
Gigabud Android Trojan Clones Banking Apps
Group-IB researchers have identified a sophisticated Android banking trojan called Gigabud that exploits Android’s work profile feature to conduct…
Wipro and CrowdStrike Launch CISO Command Center
Wipro has partnered with CrowdStrike to launch the CISO Command Center, a service that integrates Wipro’s cybersecurity consulting capabilities with…
Springfield Schools Recover from Cyberattack
Springfield Public Schools shut down operations mid-week following a cyberattack that forced all schools to close and left thousands of families…
Trezor, BitBox users targeted in phishing campaign
Trezor and BitBox, two major cryptocurrency hardware wallet manufacturers, have issued urgent warnings after attackers compromised their shared email…
Cyber Briefing: 2026.09.09
Authenticated sessions exploited, application security flaws, weak account-recovery mechanisms, and exposed credentials to gain unauthorized access, steal…
BigBear 2.0 phishing campaign hijacks M365 sessions
A large-scale phishing operation has compromised thousands of Microsoft 365 accounts by stealing authenticated session cookies that remain valid even…
Singapore man pleads guilty to $245M crypto theft
A 22-year-old Singapore national has admitted to leading a criminal operation that stole more than $245 million in cryptocurrency from victims’ digital…
Jellyfin 12.0 releases security fixes
Jellyfin has released version 12.0 of its media server platform with several critical security patches addressing vulnerabilities that could expose files…
ShinyHunters claims Florida DMV breach
The notorious cybercrime group ShinyHunters has claimed responsibility for breaching Florida’s Department of Highway Safety and Motor Vehicles, allegedly…
DeepSeek Harness Sandbox Bypass Flaw
Security researchers have identified a critical sandbox escape vulnerability in DeepSeek Harness, the open-source framework developed by DeepSeek for…
Open Standard for Revocable API Keys Proposed
Security researchers have proposed an open standard designed to make API keys self-destruct within 60 seconds of being detected as leaked.
Cyber Briefing: 2026.09.08
Attackers are exploiting critical identity flaws, automating credential theft with AI, compromising AI development ecosystems, and abusing…
AI Coding Tools Targeted by Threat Actors
Threat actors have shifted focus to exploiting AI-assisted coding tools and development environments, resulting in several major software supply chain…
LG TVs Spying on Users Even When Offline
LG smart television sets are actively monitoring users and their home networks even when the devices appear to be offline or in standby mode, according to…
Tenable Launches AI Inspector for Community AI Components
Tenable has introduced AI Inspector, a free security evaluation tool designed to help organizations assess risks in community-developed AI components.
Hackers deploy AI frameworks for mass credential theft
Cybercriminals have begun deploying autonomous AI frameworks that coordinate multi-stage attacks with little human intervention, dramatically compressing…
Grindr settles UK privacy class action for £26M
Dating app Grindr has agreed to pay £26 million to settle a UK class action lawsuit alleging it improperly shared sensitive user data with third parties.