All Issues
97 Cyber issues published
North Korea Just Stole $6.43 Billion From Binance
North Korea-linked hackers have pulled off the largest cryptocurrency theft in history, taking $6.43 billion from Binance across 11 blockchains. Chinese hackers are now running AI-powered cyberattacks against governments and telcos simultaneously. If you're on Windows 11, Microsoft has just fixed a security feature that was quietly broken by October's update — check yours is on.
953 Online Stores Hit in Stealthy Skimming Spree
Nearly a thousand online stores have been quietly infected with malware that steals from shoppers, with the campaign running since mid-2025 and still active today. A critical flaw in the Brotli compression library has triggered emergency patches from Microsoft, Node.js, and Python — update your developer tools now. Microsoft Teams is being used to deliver ransomware through fake IT support messages, and if your organisation allows external Teams chats, you need to read this.
Capcom's 11.7 Million Accounts Exposed
Capcom confirmed a breach of its membership system, exposing email addresses and login data for 11.7 million accounts. Ransomware affiliates are now using AI agents to automate intrusions at scale, with a single reused password unlocking entire corporate networks in some cases. Chrome's Enhanced Protection mode got a significant upgrade this week, now using server-side AI to catch scam pages and ClickFix attacks before they do damage.
LiteLLM Poisoned in Supply Chain Hit
A popular AI developer tool was quietly backdoored through stolen GitHub tokens, putting cloud credentials and private keys at risk for anyone who installed the affected version. Google Chrome is rolling out new defences against a trick that gets users to run malware themselves. One critical Fortinet flaw now has a public exploit — patch it today.
Grocery Giant Hit by Cyberattack, Stores Disrupted
Ahold Delhaize, the multinational behind Food Lion, Stop & Shop, and Albert Heijn, confirmed a cyberattack has knocked out online shopping across its U.S. and European brands. A four-vulnerability chain in Plex Media Server is being actively exploited in the wild — patch it now if you run one. The EU also published its first harmonised AI Act compliance standard today.
French Grocers Hit By Fridge-Hacking Attackers
Hackers turned hundreds of French supermarket refrigerators into heating units overnight, spoiling food across more than 700 stores and costing chains tens of millions of euros — exploiting firmware that some retailers had not updated since 2016. A Chinese state-sponsored group has been quietly exploiting a critical flaw in remote IT support software since August, and self-hosted customers still need to apply the patch manually. If you run a website or server, the UK's NCSC wants you moving to TLS 1.3 now.
Microsoft Kills 750 Million Phishing Emails at the Source
Microsoft dismantled three Chinese-linked phishing platforms that sent over 750 million malicious messages to Microsoft customers alone, hitting people in more than 150 countries. Windows users should install this month's security updates today — October's Patch Tuesday fixed a record 1,413 vulnerabilities, including a zero-day already being exploited in the wild. AI agents can now navigate unfamiliar industrial control systems and move physical equipment in under 16 minutes, a finding that has serious implications for physical infrastructure security.
Hackers Triggered Supermarket Freezers Across France
Attackers remotely switched on the defrost function of refrigeration units at roughly 400 French supermarkets overnight, spoiling fresh food across the country. A medical wearable company called iRhythm is notifying at least 360,000 patients that their personal data was stolen and held for ransom. WordPress site owners running the Bricksforge plugin should update immediately — a critical, actively exploited flaw is already being used to hijack websites.
Heart Monitor Firm Hit, 360,000 Records Gone
iRhythm, a medical device company, confirmed that hackers stole personal and health data from more than 360,000 patients after a social engineering attack in June. Citrix is urging immediate patching of a critical flaw in its NetScaler networking software, scored 9.5 out of 10 for severity. If you use NetScaler, stop reading and go patch.
400,000 Utility Accounts Breached in Portal Attack
Southern Company's customer portal was hit by an unauthorised intruder, exposing account data for 400,000 Georgia and Alabama Power customers. Chrome 155 just landed with patches for 247 vulnerabilities — update your browser today. The U.S. Senate also passed a sweeping healthcare cybersecurity bill following the Change Healthcare breach.