Cyber Attack

The JadePuffer ransomware group is attacking Azure users with agent-based attacks that gather information, steal passwords, and damage key components. The malware appeared in July. Researchers at Sysdig, a cloud security company, noted that it uses AI tools to automate the whole attack process. This includes searching for information, stealing credentials, …

GhostCode is a new phishing kit that changes a regular Microsoft 365 sign-in into an account theft. It doesn’t need to hack a password. Instead, it tricks people into letting criminals into their work accounts. The campaign started with normal messages sent through business contact forms. Attackers pretended to be …

Casbaneiro is going after online banking users by sending fake messages that seem like urgent bills or legal papers. The campaign uses custom PDF tricks to lead people to a harmful download, risking email information, bank activity, and system details. The Windows-based operation stays quiet until it really needs to …

A Russian-speaking hacker has used artificial intelligence like never before. They sent out hundreds of AI agents to find and attack major weaknesses in PaperCut NG/MF print management software, affecting at least 440 servers in 395 organizations across 48 countries. Security experts at GreyNoise found the campaign using their Global …

France’s data protection authority (CNIL) has fined Hôpital privé de la Loire €500,000 ($580,000) for not properly protecting the data of patients and their families. The French agency says that security problems caused a data leak in the summer of 2025. This exposed sensitive information about 524,867 patients and 202,246 other …

A cyberattack using open-source AI tools almost ran on its own. It affected government systems in Asia, compromised into 85 employee accounts, and took over 2,500 personal records, as per a study from Dream. The campaign shows how AI agents can work together to carry out big chunks of a …

A group of hackers named “Madarax” claims they have stolen and are offering to sell the personal information of about six million job seekers in Bangladesh. They claim to have taken this data from Bdjobs, the top online job website in the country. The claim appeared on the dark web …

US Bank is looking into LockBit’s claims about a breach and stolen data. The ransomware group says they will share the supposed stolen files on September 3 if a secret ransom is not paid. Lee Henderson, US Bank vice president of public affairs, confirmed that the company is aware of the …

T-Mobile’s cybersecurity team reportedly physically cut a network cable connecting compromised infrastructure to the outside world. According to Bloomberg, the move followed months of investigation into activity linked to Salt Typhoon, the China-associated espionage group accused of infiltrating telecommunications and internet providers worldwide. The event shows how serious the campaign is …

Security experts have shown that expired credit cards can still be used. A study from the University of Massachusetts Amherst, shared at the 35th USENIX Security Symposium, presents a new NFC relay attack called “Zombie Card” that can make expired Visa contactless cards work again, letting them make real purchases …