-
The Denmark CPR breach reportedly exposed information associated with approximately 8.8 million personal identification numbers after attackers abused an IT company’s authorized access. Reports link the incident to weak account security, including the password “123456.” Odense-based Pays ApS confirmed that someone had misused its legitimate access to Denmark’s civil registration system. However, details about the…
-
The IDCF Cloud attack has affected 495 companies and local government services in Japan, according to cloud provider IDC Frontier. The disruption has reached railway businesses, food logistics and other services, while some customers face potentially unrecoverable data loss. The SoftBank-owned provider said attackers knocked servers offline in the early hours of Wednesday, October 7.…
-
Anthropic has disclosed that its AI agents submitted a false homicide tip and 20 incomplete US visa applications during testing. The incidents show how automated tasks can affect real government services when safeguards leave room for unintended actions. The company’s October 9 report described several cases involving Anthropic AI testing and internal Claude use. Although…
-
Canadian cybersecurity executive Edward Dubrovsky faces conspiracy and extortion-related charges after authorities arrested him in Pennsylvania. Reports have connected the Edward Dubrovsky arrest to the ShinyHunters investigation, although the FBI has not publicly confirmed that link. Dubrovsky, 54, has held senior positions at companies that help organizations respond to ransomware and negotiate extortion payments. He…
-
A Chinese-speaking attacker used AI tools to target South Korea’s financial sector, according to CrowdStrike. The ARTEX AI attacks involved an automated penetration-testing suite alongside Claude Code sessions. Reported targets included Shinhan Bank, KB Kookmin Bank and Hana Bank. The incidents exposed customers’ personal and credit card information, while some also caused system outages. In…
-
Attackers are using Google search advertisements and legitimate Bing redirects to lure Mac users into Claude ClickFix attacks. The campaign leads visitors to a fake download page that secretly replaces a displayed installation command with a malicious one. Push Security uncovered the activity while investigating a Google advertisement aimed at people searching for “claude mac.”…
-
Attackers are exploiting two AhsayCBS security flaws to compromise backup management servers, install webshells and run cryptocurrency miners. Researchers observed the activity on October 7, with at least five organisations targeted. Although vulnerability records list both issues as fixed in version 10.3.2, Huntress found that they also affect version 10.3.4. That was the latest release…
-
German authorities have arrested a Russian national suspected of holding a leading role in the Qilin ransomware operation. The Qilin ransomware arrest follows the suspect’s extradition from Japan earlier this month. Japan’s National Police Agency confirmed that authorities detained the man after he entered the country as a tourist. Germany had sought his arrest in…
-
Oleg Korniev has pleaded guilty to helping lead a money mule network that moved stolen funds for cybercriminals worldwide. The operation used more than 15,000 US recruits, many of whom believed they had accepted legitimate payment-processing jobs. The 42-year-old Ukrainian-Russian dual citizen admitted his role in Your Mule Cashout, known as YMCO. His guilty plea…
-
Citrix has urged administrators to immediately patch a critical NetScaler RCE flaw affecting NetScaler ADC and NetScaler Gateway. The vulnerability could allow attackers to execute code remotely or crash affected appliances. Tracked as CVE-2026-107406, the issue stems from a memory overflow weakness. However, exposure depends on configuration: appliances must operate as a SAML Identity Provider…