Fanlore: Have I Been Pwned’s Post
public
–
2 min read
Fanlore Data Breach Exposes 145K Email Addresses and Hashed Passwords
Earlier this month, Fanlore a wiki platform focused on fandom…
Unnamed real-world entity: Irregular Details How a Naming Error Let AI Models Attack a Real Company
public
–
3 min read
AI Safety Firm Irregular Reports Real-World Cyberattacks by Tested AI Models
AI safety testing firm Irregular disclosed an incident in…
McDonald's and Gap: McDonald’s Employee Data Appears in Leak, Seller Claims 1.7M Records Stolen
public
–
3 min read
McDonald’s Employee Data Leak Exposes 1.7M Records in Alleged Azure Breach
A data seller known as TheHatman has…
WordPress: Critical WordPress RCE Vulnerability Allows Authors to Execute Code via Malicious PNG File
public
–
2 min read
WordPress Patches Critical RCE Vulnerability in Imagick Extension
WordPress has released version 7.0.4, a security update addressing a…
Zoom: Turns Out You Don’t Need The Most Powerful AI Models to Cause a Major Cybersecurity Incident
public
–
2 min read
AI-Driven Zero-Click Exploit in Zoom Highlights Growing Cybersecurity Risks
A critical vulnerability in Zoom, discovered by cybersecurity firm A Security,…
OpenAI, Google and Anthropic: OpenAI, Anthropic, and Google LLM APIs vulnerability Exposes Hidden Reasoning Traces
public
–
3 min read
AI Providers’ Encrypted Reasoning Flaws Exposed Sensitive Data in Major LLMs
A critical security vulnerability in how leading AI providers…
Zscaler: Ransomware gangs skip the CEO, head straight for the 40-something IT manager
public
–
2 min read
Ransomware Gangs Target Gen X Managers in Highly Focused Extortion Campaign
A recent ransomware campaign, tracked by Zscaler’s ThreatLabz,…
Government of Thailand: What the data is really saying
public
–
2 min read
Thailand’s Digital Security Struggles Highlight Systemic Risks in Government Data Handling
Thailand’s push toward digital governance has been…
n8n: China-based hacker employs DeepSeek in autonomous threat campaign
public
–
2 min read
Chinese-Speaking Threat Actor Leverages DeepSeek AI in Autonomous Hacking Campaign
A Chinese-speaking threat actor recently conducted an AI-driven hacking campaign…
ESIC: Uttarakhand: Cyberattack hits 10 govt websites, including CM's Relief Fund; ITDA restores services within hours
public
–
2 min read
Cyberattack Targets 10 Uttarakhand Government Websites, Services Restored Within Hours
A malware attack disrupted the websites of 10 Uttarakhand government…
Ledger: MacSync Stealer RAT Uses Fake Claude Guides to Steal Passwords and Crypto Wallets
public
–
3 min read
MacSync Malware Campaign Targets macOS Users via Fake Claude AI Guides
A newly uncovered macOS malware campaign, dubbed MacSync, exploits…
Anthropic and U.S. Water Systems: U.S. mulls strikes on Iranian energy targets, water systems hit with cyberattack, more | The Takeout
public
–
1 min read
U.S. Considers Strikes on Iranian Energy Targets as Cyberattacks Hit Water Systems
The U.S. is reportedly preparing potential…