Cyber Attack

Ransomware groups are using a flaw in Palo Alto Networks GlobalProtect VPN to get around multi-factor authentication and access corporate networks. In one case studied, attackers got into VMware management systems and took credentials from a domain controller’s virtual disk, evading the security tools in the virtual machine. Palo Alto …

Cybersecurity researchers at Palo Alto Networks’ Unit 42 have uncovered a sophisticated cyberattack targeting Fortinet network management infrastructure, involving the deployment of a stealthy malware implant known as PEERSTITCH. According to the investigation, attackers exploited CVE-2024-47575 in FortiManager to steal configuration files, credentials, cryptographic material, and network information associated with …

Hackers got into the identity and access management system at the Technical University of Denmark (DTU) and downloaded a lot of data, which could impact about 200,000 current and past users. Threat actors broke into DTU profiles and used them to get into the university’s identity system, DTUBasen, which has …

Nearly 100,000 Bee Cheng Hiang customers had their email addresses leaked when an employee used an AI tool to generate code for a large marketing email. The event is said to be Singapore’s first data leak involving AI that was reported to the Personal Data Protection Commission (PDPC). The incident …

Apple has launched iOS 26.7.1 and iPadOS 26.7.1 to fix a serious zero-day flaw that it believes might have been used in a very advanced attack on specific people. The security flaw, labeled as CVE-2026-86950, impacts the CoreGraphics framework. This is an important Apple part that helps show graphics, images, …

The JadePuffer ransomware group is attacking Azure users with agent-based attacks that gather information, steal passwords, and damage key components. The malware appeared in July. Researchers at Sysdig, a cloud security company, noted that it uses AI tools to automate the whole attack process. This includes searching for information, stealing credentials, …

GhostCode is a new phishing kit that changes a regular Microsoft 365 sign-in into an account theft. It doesn’t need to hack a password. Instead, it tricks people into letting criminals into their work accounts. The campaign started with normal messages sent through business contact forms. Attackers pretended to be …

Casbaneiro is going after online banking users by sending fake messages that seem like urgent bills or legal papers. The campaign uses custom PDF tricks to lead people to a harmful download, risking email information, bank activity, and system details. The Windows-based operation stays quiet until it really needs to …

A Russian-speaking hacker has used artificial intelligence like never before. They sent out hundreds of AI agents to find and attack major weaknesses in PaperCut NG/MF print management software, affecting at least 440 servers in 395 organizations across 48 countries. Security experts at GreyNoise found the campaign using their Global …

France’s data protection authority (CNIL) has fined Hôpital privé de la Loire €500,000 ($580,000) for not properly protecting the data of patients and their families. The French agency says that security problems caused a data leak in the summer of 2025. This exposed sensitive information about 524,867 patients and 202,246 other …