All Issues
97 Cyber issues published
FBI's Hackers Are Getting Arrested
A teenager arrested in Jordan is now helping the FBI track down the rest of ShinyHunters, the group that stole data on nearly every FBI agent. A critical flaw in Rejetto's file server software is being actively exploited, and patching is straightforward. The US Senate has passed a bipartisan bill aimed at forcing healthcare organisations to take cybersecurity seriously.
A 16-Year-Old Ran a Global Ransomware Gang
A multinational law enforcement operation has dismantled KillSec, a ransomware group allegedly run by a Romanian teenager, with three arrests and 110TB of stolen data secured. Separately, attackers are hijacking ChatGPT's own infrastructure to trick users into installing malware on their machines. FortiMail has a critical, actively exploited vulnerability with no patch yet — if you run it, act now.
Ransomware Hits Air Traffic Control in Africa
South Africa's air traffic control company found ransomware-linked malware on a live operational network, with signs that stolen data was sent to IP addresses in China. WatchGuard's firewall operating system has a critical vulnerability that needs patching today. If you run a website, Cloudflare's new free certificate authority is worth knowing about.
AI-Powered Cloud Attack Wipes Azure in Minutes
An AI-driven attacker called JadePuffer tore through a Microsoft Azure environment in hours, deleting storage, databases, and apps after credentials were accidentally exposed in a public GitHub post. A Chrome extension with millions of downloads has been quietly stealing browser histories, AI chat logs, and screenshots. Citrix NetScaler admins need to patch two actively exploited critical flaws today.
North Korea Walks Off With $387 Million
North Korean hackers have stolen $387 million from crypto exchange Bitget, with the company's User Protection Fund stepping in to cover affected users. A newly disclosed flaw in Roundcube webmail is being actively exploited in the wild — patch now if you run a server. Senators Warner and Cruz have introduced a bipartisan bill on telecom cybersecurity standards, though whether "voluntary" is enough remains an open question.
A Security Firm Got Breached By Its Own Ex-Employee
CrowdSec, a French cybersecurity company, lost 170 private GitHub repositories after attackers exploited an access token belonging to a former employee who was never fully offboarded. AI chatbots including ChatGPT and Gemini are being fed fake support numbers and phishing pages by a coordinated poisoning campaign affecting over 370 companies. Meanwhile, a critical F5 BIG-IP vulnerability is being actively exploited in the wild — patch today if you run it.
German University Breach Exposes 52,000 Students
A cyberattack on one of Germany's largest universities has put student bank details, health insurance numbers, and financial aid records at risk. A newly discovered Android trojan is using AI to navigate your phone in real time — and it can reinstall itself even after you delete it. Google has been fined $463 million for mishandling location data, a reminder that your privacy settings are worth a look today.
23 Million Gyazo Records Hit in Server Attack
A hacker broke into Gyazo's servers and walked off with 23 million user records, plus metadata for nearly half a billion images. An AI agent was used to breach a Spanish organisation's data systems — and it did the job faster than any human attacker could have. A critical unpatched vulnerability in workflow software has been actively exploited since August; if your team runs Orkes Conductor, this one needs attention today.
610,000 Roblox Accounts Sold for Pocket Change
Three Ukrainians face trial for stealing and selling 610,000 Roblox accounts using hijacked session cookies. A critical flaw in a popular WordPress events plugin leaves over 200,000 sites open to full takeover — update the plugin now if you run one. Plus: a new browser AI attack technique, a fake CAPTCHA scam making the rounds, and the EU proposing an emergency cyber response mechanism.
Revolut Gave Your Data to Fraudsters
Revolut disclosed that fraudsters used a legitimate government email address to trick the company into handing over sensitive customer data, targeting crypto-linked high-net-worth accounts. A critical flaw in ConnectWise ScreenConnect is being actively exploited in worm-like attacks — patch to version 26.6.5 immediately if you use it. The NSA is also reorganising itself around five new mission centres, with cybersecurity and AI each getting dedicated divisions.