China Spent Over a Year Inside U.S. Medical Research Networks — And Used Google’s Own Email Rules to Steal Data
The attackers, tracked as "UNC6508," did not write new malware to steal emails. They created an administrator rule inside Google...
Is OpenAI’s New Lockdown Mode an Admission That Default ChatGPT Was Never Safe Enough?
OpenAI introduced two new protections designed to help users and organizations mitigate prompt injection attacks when it launched Lockdown Mode...
China’s VerdantBamboo Experimented With Three Re-Entries and Three Malware in a Company Network
China's VerdantBamboo spent 18 months inside a company's network. The entry point was the managed service provider next door. The...
Study of AI-Assisted Cyberattacks May Reshape How Security Industry Measures Risk
The threat intelligence community has spent decades building frameworks to assess how dangerous a cyberattacker is. Anthropic just published data...
New Threat Actor Targets Crypto Firms’ Development Infrastructure
A previously undocumented threat actor is conducting highly targeted attacks against cryptocurrency organizations, using fake recruitment opportunities, custom macOS malware,...
Pink Extortion Group Emerges Targeting Microsoft 365 Data
A newly identified cyber extortion operation is gaining attention among incident responders after security researchers uncovered a threat group using...
The NHS Was Lucky. The Next Victim Might Not Be.
In May 2026, malicious code appeared inside packages used across NHS software projects. The software supply chain attack named Mini...
AI-Powered Marketing Service “Active Listening” Deceived Customers: FTC
The pitch for "Active Listening," an AI-powered advertising service that listened to consumers' real-world conversations through their smartphones and smart...
European Agencies Shutter VPN Service Used for Ransomware Attacks
The French and Dutch law enforcement seized a large-scale virtual private network (VPN) service catering to cybercriminals, offering services to...
Massive npm Supply Chain Attack Hits AntV Ecosystem; Hundreds of JavaScript Packages Compromised
A major software supply chain attack has compromised hundreds of widely used npm packages tied to the AntV ecosystem, exposing...
Q1 2026 Threat Reports
❮
❯
Latest Cyber News
Web Stories
