Cyber Attacks
Keeper Security Adds AI Phishing Protection to Browser Extension
Keeper Security introduces a local AI engine in its browser extension to detect spoofed login pages and prevent credential theft from fraudulent sites.
SecOps Signal Adversary Desk
The SecOps Signal Adversary Desk is the part of the SecOps Signal newsroom that covers attacks, malware, scams and the groups behind them. It is a newsroom desk, not a single person. Sections: Cyber Attacks, Malware & Ransomware, Threat Intelligence. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 20 articles so far. See the editorial policy or report an error.
Cyber Attacks
Weak Credentials and Stale Accounts Enabled Ransomware Breach at Welsh Data Unit
The UK ICO reprimanded Data Cymru and its IT provider for allowing a weak password on a dormant test account to facilitate a major data exfiltration.
Cyber Attacks
Mastercard Stablecoin Security Pre-Screening for Financial Crime Risks
New risk intelligence solution helps banks identify fraud and sanctions indicators before stablecoin payments settle on blockchain networks.
Cyber Attacks
FTC warns senior fraud costs could hit $119.5B as investment scams drive record losses
Investment scams and impersonation schemes drive record losses for Americans over 60, with unreported costs potentially exceeding $100 billion.
Malware & Ransomware
Semperis Report: Ransom Threats Target Employee Families and Homes
A new survey reveals that over a third of ransomware victims face threats against their families, forcing some to seek medical care or relocate.
Cyber Attacks
PHP auto_prepend_file Modified by AI Scripts to Steal Gov Admin Credentials on Linux
Attackers modified PHP settings to persist on Linux servers and harvest admin credentials during a campaign observed from October 2025 to April 2026.
Cyber Attacks
AI Agent Sandbox Breaches Prompt EU AI Office Inquiry Into OpenAI, Anthropic Security Controls
Regulators probe AI labs over agent escapes and unauthorized access, seeking details on security controls and monitoring capabilities.
Malware & Ransomware
Controlium’s AdFection Zero-Click Ads Deliver Candiru Spyware to Al Jazeera
Citizen Lab researchers document a campaign where targeted digital ads silently delivered mercenary spyware to devices without user interaction.
Malware & Ransomware
Negotiator Arrest Prompts Calls For Stricter Third-Party Vendor Oversight
The arrest of a well-known ransomware negotiator underscores the critical need for organizations to maintain strict oversight of their vendor programs.
Cyber Attacks
Attackers Overheated French Supermarket Freezers via Legacy Refrigeration Systems
Criminals manipulated internet-connected cooling units in French stores, raising temperatures to 50C and causing fires, food loss, and equipment damage through remote control.
Cyber Attacks
Google Android Circle to Search AI Flags Phishing in Texts for Instant Safety Insights
Google’s latest update lets users circle suspicious text messages to get instant AI safety insights, helping users spot phishing before data is shared.
Cyber Attacks
Google Session Hijacking Kit Mirrors Logins via WebSockets to Target Taiwan Academics
Cisco Talos details how a real-time relay kit steals authenticated sessions by mirroring Google login steps, targeting academic staff in Taiwan.
Threat Intelligence
Filigran Sets Paris Agenda for Debut THREAD Cybersecurity Conference
Filigran has confirmed the speaker lineup for its inaugural THREAD event, a free gathering in Paris on October 15 featuring experts from the FBI and major firms.
Threat Intelligence
Yandex Cloud Outages Follow Drone Strike on Sasovo Data Center
A drone attack on a Yandex facility in Russia caused massive fires and service disruptions, threatening AI supercomputers and cloud customer operations.
Cyber Attacks
Project Reclaimer Modifies Halo 3 PC Client for Large-Scale Multiplayer
A community launcher expands Halo 3 capabilities on PC, adding 128-player matches and automated mod distribution without official developer support.
Cyber Attacks
Yandex ru-central1-b offline: Drone strike on Sasovo DC halts recovery, forcing backup activation
Yandex confirms its ru-central1-b availability zone is down following a fire caused by a drone attack on its Sasovo facility, with no near-term recovery expected.
Cyber Attacks
ASOS Data Breach Exposes Customer Personal Details and Shopping Search History
Malwarebytes Labs confirms attackers stole personal data and search queries from ASOS, prompting warnings about targeted phishing attacks.
Malware & Ransomware
MonsterCloud Owner Accused of Paying Ransoms While Claiming Technical Decryption
Zohar Pinhasi faces wire fraud charges for allegedly paying cybercriminals to unlock client data while charging inflated fees.
Cyber Attacks
Criminal IP AITEM Automates ASM Risk Prioritization and Incident Response
Criminal IP introduces an AI tool that moves beyond simple asset discovery to automate risk prioritization and incident response for organizations.
Cyber Attacks
SMBs Want Robust Cyber Defenses That Don't Burden Limited IT Resources
New findings reveal small businesses demand robust cyber defenses that do not burden their limited IT resources with complex management tasks.