-
Nearly two years after a cyberattack disrupted Transport for London’s (TfL) online services and exposed customer data, two…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Group-IB says scammers are targeting Céline Dion fans through Facebook, duplicate digital tickets and fake websites impersonating Ticketmaster, AXS and the venue site.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A one-click Claude Desktop flaw allowed attackers to submit concealed instructions without review, exposing chats and enabling code execution on some systems remotely.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft’s July 2026 Patch Tuesday fixes 622 CVEs, including exploited AD FS and SharePoint flaws, plus the disclosed BitLocker bypass requiring urgent action.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Upwind links compromised AsyncAPI npm packages to a coordinated supply chain attack spanning repositories, publishing pipelines, and developer systems at risk.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Telegram’s t.me links stopped resolving after the .ME registry applied serverHold. The app still works, while the reason for the domain action remains unknown.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Proofpoint details how attackers spoof OAuth client IDs to probe Microsoft Entra accounts, test credentials and bypass common sign-in detections at cloud scale.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Dr.Web details Siggen Windows backdoor that uses Steam for C2, steals credentials and crypto data and infects Visual Studio projects to spread among developers.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Former ransomware negotiator Angelo Martino gets 70 months in prison for helping BlackCat extort US victims and misuse confidential client data in cyberattacks.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft details GigaWiper, a destructive Windows backdoor that can wipe disks, encrypt files and give attackers remote access to compromised systems globally.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
