Krebs on Security
The Hacker News
- P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands [13h]
- The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't [1d]
- Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws [1d]
- Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories [1d]
- FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack [1d]
- TP-Link Sued by Four More U.S. States Over Router Security and China Ties [2d]
- Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access [2d]
- Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects [2d]
- Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge [2d]
- Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies [2d]
BleepingComputer
- Nippon Columbia malware incident exposes 8.6 million karaoke fan records [3h]
- Cyber exec arrested in case allegedly tied to ShinyHunters hackers [1d]
- ARTEX AI, Claude agents used in cyberattacks on South Korean banks [1d]
- Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management [1d]
- Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks [1d]
- Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto [2d]
- FBI arrests another suspected ShinyHunters hacker after agency breach [2d]
- Germany arrests alleged core Qilin ransomware member after extradition [2d]
- How to keep AI agents within their permissions [2d]
- Max severity SonicWall SMA1000 flaw now exploited in attacks [2d]
- Man admits to running network of 15,000 money mules for cybercriminals [2d]
- Microsoft: Outdated Windows devices will stop receiving security updates [2d]
- Citrix warns admins to patch new NetScaler RCE flaw immediately [2d]
- Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland [2d]
- FBI disrupts Chinese hacking tools used to breach critical infrastructure [2d]
- Ransomware attack disrupts Japan's IDCF Cloud used by govt clients [2d]
- Low-cost Android phones ship with residential proxy malware [2d]
Dark Reading
- [Virtual Event] Cybersecurity Outlook 2027 [now]
- [Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AI [now]
- ASOS Breach Reveals the Risks in Customer-Facing SaaS [1d]
- AI Scramble Drives Cybersecurity M&A Boom [1d]
- What We Missed: FBI Strikes Back at ShinyHunters [2d]
- Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too [2d]
- Social Engineering AI Agents: The New BEC for 2026 [2d]
- 'AgentCorruption' Puts AWS Environments at Risk With Single Prompt [2d]
- Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting [2d]
- Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift [2d]
The Record
- Japan confirms arrest of Russian Qilin operative, extradition to Germany [1d]
- Hundreds of thousands impacted by data breach at biosensor firm iRhythm [2d]
- Leader of vast money mule operation that laundered cybercriminal proceeds pleads guilty [2d]
- FBI touts another ShinyHunters arrest in response to data breach [2d]
- Belarusian hacktivists admit to 2023 breach of Russian state healthcare network [2d]
- OpenAI says it disrupted Russian and Iranian influence ops that used ChatGPT [2d]
- Co-creator of Empire Market dark web marketplace given 40-year sentence [2d]
- Lawmakers warn Google could expose Spirit Airlines data in $10 million AI training deal [2d]
- International coalition seizes tools used by cyber firm behind Flax Typhoon [2d]
CyberScoop
- Canadian cybersecurity executive arrested in federal extortion case [1d]
- Leader of 764 pleads guilty, faces up to 30 years in prison [2d]
- Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software [2d]
- DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub [2d]
- Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions [2d]
- OpenAI says Iran, Russia used AI journalists, think tanks to influence Western media [2d]