The New York AG reached a settlement with Perry Johnson & Associates and four related companies over a 2023 breach.
Tag: EN
New Abe Office Malware Tricks Chrome Into Decrypting Its Own Protected Browser Cookies
A newly analyzed remote-access trojan masquerading as an “Abe Office workstation helper” combines hidden-browser control with tooling designed to bypass…
PyPI makes release attestations easier to find with new security tab
The Python Package Index (PyPI) has added a security tab to its project pages, giving developers a place to check where individual release files came…
Hackers Used Default admin:admin Credentials to Exploit ForgeRock RCE and Remotely Unlock Cars
Researchers used default admin:admin credentials as part of a vulnerability chain that let them run code on two automakers’ production ForgeRock servers…
Pro-Russian hackers target European officials, offer rewards for personal information
Pro-Russian hackers published the personal information of Italian Foreign Minister Antonio Tajani and other senior European officials on the dark web,…
Plex2Shell Exploited Against QNAP NAS Users
Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices.
Jailbroken DeepSeek AI Agent Breaches European Telecom and Accesses Millions of Patient Records
A jailbroken DeepSeek AI agent spent more than two weeks breaking into a European telecom provider and 13 companies hosted on its systems. It reportedly…
Ukraine dismantles crypto scam network that stole €4.3 million
Ukrainian law enforcement arrested four suspects in a case involving the theft of more than €4.3 million using a network of cryptocurrency investment scam…
Japanese homeware giant pulls online store after cloud breach puts 7.7M records at risk
No reopening date as orders face delays and some customers are told to refuse deliveries to cancel purchases
Google Gemini Safety Bypass Lets Users Download AI-Generated Images That Its Own Filters Blocked
Google Gemini allowed users to download AI-generated images that its safety filters had refused to display, according to research published by Fog…
Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers
Hackers compromised an external cloud service used by the shopping platform and may have stolen personal information from it.
Researchers Uncover NotC2 AI-Powered C2 Framework That Hides Malicious Commands Inside AWS Services
Varonis Threat Labs has built NotC2, a proof-of-concept command-and-control (C2) framework. It runs entirely on native AWS services and uses Amazon…
CISA and the FBI Warn Of Attacks against Industrial Refrigeration Controllers
US agencies warn attackers are going after industrial refrigeration controllers. The fixes are basic, and most start with getting them off the internet.…
Hackers Hijack 10 npm Packages to Spread PolinRider Malware Using Ethereum Blockchain
Attackers have taken over 10 npm packages and slipped hidden code into 12 releases. The code uses the Ethereum blockchain to find a server and download…
What a Hacked Refrigerator Can Teach Us About Cybersecurity
The supermarket fridge is probably the dullest machine in any store. It hums, it stays cold, and nobody gives it a thought until the milk goes sour. On…
CISA Warns of SonicWall SonicOS SSLVPN Vulnerability Exploited in Attacks
CISA added a SonicWall SonicOS SSLVPN vulnerability, CVE-2026-19868, to its Known Exploited Vulnerabilities catalog, warning that valid-credential users…
Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web
Italian Foreign Minister Antonio Tajani said Saturday that his personal data had been disseminated on the dark web.
AI Security
Two weeks ago, I attended the [un]prompted AI security conference in San Francisco. It was an excellent event: three days of very dense talks about all…
Google Gemini Safety Filter Bypass Exposes Blocked AI Images Through Download Links
Google Gemini exposed images that its safety filters had rejected through download links, revealing an infrastructure weakness rather than a conventional…
Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH
The initial exploitation attempts are attributed to botnets and crypto miners, but other threat actors are expected to follow suit.