New Exvicy ClickFix Framework Built on Rival ErrTraffic's Code Information Security Magazine 2 weeks 2 days ago Sekoia said Exvicy, a new ClickFix MaaS framework, reused code from rival service ErrTraffic
Attackers Abuse npm Trusted Publishing in GHAPPIER Campaign Information Security Magazine 2 weeks 2 days ago CloudSEK linked GHAPPIER to a compromised npm package with valid trusted-publishing provenance
ShinyHunters Claim Hack of Rival Ransomware Gang Clop Information Security Magazine 2 weeks 2 days ago ShinyHunters has claimed responsibility for hacking the Clop ransomware group, defacing its leak site and alleging theft of key operational data
Experts Alarmed Over Gyazo’s Breach of 490 Million Metadata Records Information Security Magazine 2 weeks 2 days ago A breach at image-sharing service Gyazo on September 11 affected over 23 million customers
Revolut Customers Targeted with New Wave of Phishing Attacks Information Security Magazine 2 weeks 2 days ago Following a major data breach, Revolut customers are being sent convincing phishing messages
New Settra Ransomware Variant Deployed in Attacks on Retail and Manufacturing Information Security Magazine 2 weeks 5 days ago Huntress researchers highlighted a new ransomware variant, named Settra, and the post-compromise techniques used in two recent attacks
CISA Upgrades Vulnerability Reporting Platform with More Automation Information Security Magazine 2 weeks 5 days ago The US cybersecurity agency is moving to a new vulnerability coordination platform called VINCE-NT
Manufacturing Accounts for 22% of all Ransomware Victims Information Security Magazine 2 weeks 5 days ago Black Kite has found that manufacturing remained the most targeted sector for ransomware attacks, and saw a big jump in incidents in H1 2026
FamousSparrow Swaps SparrowDoor For New SparroWocky Backdoor Information Security Magazine 2 weeks 6 days ago ESET said FamousSparrow has replaced SparrowDoor with SparroWocky
CISA Urges Critical Infrastructure to Plant Decoys Inside Networks Information Security Magazine 2 weeks 6 days ago CISA released guidance on using cyber decoys to detect & disrupt malicious activity inside networks
New Chinese-Made ‘RatHat’ Android Malware Leverages AI to Steal Financial Data Information Security Magazine 2 weeks 6 days ago Researchers at Zimperium have uncovered a new Android malware strain, dubbed RatHat, with spyware and backdoor capabilities
Cyber Essentials Has Record Year but Takeup Remains Low Information Security Magazine 2 weeks 6 days ago New government figures reveal a 20% annual increase in certifications
Cisco Warns of Active Exploitation of Critical ISE Flaw Information Security Magazine 2 weeks 6 days ago Cisco urged ISE customers to apply a software update, as well as check for signs of exploitation
AI Agent Carries Out Multi-Stage Data Theft Attack Information Security Magazine 2 weeks 6 days ago Spanish data protection agency AEPD reveals the country’s first AI-powered data breach
PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug Information Security Magazine 3 weeks ago Attackers are exploiting a critical flaw in a third-party WooCommerce plugin to upload PHP webshells
CISA and NIST Issue Guidance to Protect Cloud Identity Tokens Information Security Magazine 3 weeks ago CISA and NIST issued final guidance to help protect cloud identity tokens and assertions
Cyber-Attacks Cost Organizations $52,000 on Average Information Security Magazine 3 weeks ago Hiscox highlighted the huge financial and operational costs of cyber-attacks, with the average cost of an incident at $52,000
Zero-Day Flaw in TP-Link Cameras Enables Eavesdropping Information Security Magazine 3 weeks ago OPSWAT researchers find two zero-days in TP-Link cameras
Major Cyber Vendors Turn to New UK Testing Program as MITRE Evaluations Face Changes Information Security Magazine 3 weeks ago A group of cyber threat detection providers, including CrowdStrike, Palo Alto Networks and Sophos, have joined SE Labs’ PIVOT program
NCSC and Allies Warn of Iranian Spyware Campaign Information Security Magazine 3 weeks ago The UK’s National Cyber Security Centre says Iranian Chosen Brick spyware is designed to snoop on dissidents