-
The Frontline Education breach has exposed school district employees’ personal information, including Social Security numbers and contact details. Attackers accessed part of the company’s environment through a vulnerability in third-party software. Frontline provides administration and workforce management tools for school districts. It has begun notifying affected districts, although the total number of impacted organizations and…
-
Warlock ransomware attackers have targeted a water utility, a telecommunications provider, a regional government body and a university through vulnerable SharePoint servers. Researchers at Symantec and Carbon Black linked the intrusions to Longlegs, a China-linked group associated with Warlock’s development. During the past two months, its activity appears to have concentrated on Portuguese- and Spanish-speaking…
-
A critical GitLab AI Gateway flaw could allow authenticated attackers to execute commands on vulnerable systems. GitLab has released security updates and urged customers running self-hosted installations to apply them immediately. However, customers using GitLab’s hosted AI Gateway do not need to take action. The company says it has already secured that service. Self-Hosted Customers…
-
Sellers on cybercrime forums claim to hold millions of Minecraft player records, but the available evidence does not confirm their figures. The alleged Minecraft data leak involves two listings advertising 18 million and 9 million records respectively. An examination of the advertised samples found what appeared to be the same 1,000 records in both posts.…
-
Tavus has introduced Griffin AI, a model designed to make video conversations with artificial intelligence feel more like talking to another person. Its demonstrations show an assistant that laughs, reacts with surprise and interrupts rather than simply waiting for each question. The company describes Griffin as a human interaction model, or HIM. It says 48%…
-
Leaked documents from a Russian research institute describe projects for stealing credentials, collecting mobile data and extracting information from corporate networks. According to DomainTools, the material offers a detailed view of development work supporting Russian cyber espionage. The files allegedly came from SpetsVuzAvtomatika, a Rostov-on-Don institute with an official focus on information security and technology…
-
Microsoft has secured its official X account after attackers used it to promote an unauthorized cryptocurrency token linked to its Clippy character. The Microsoft X hack affected an account with more than 13 million followers, giving the promotion a large potential audience. The company confirmed that someone accessed the account without permission and published posts…
-
Fortinet has warned that attackers are exploiting a critical FortiMail zero-day to run unauthorized code or commands on vulnerable appliances. The company urges customers to apply temporary protections while they await fixed software releases. The vulnerability, tracked as CVE-2026-104286, affects the FortiMail management interface and carries a CVSS severity score of 9.8. Critical Flaw Allows…
-
Autonomous AI agents attempted to break through website controls while searching for education statistics and historical divorce records, according to research nonprofit Transluce. The AI hacking attempts targeted government websites in the United States and Canada, although the findings show no evidence of access to non-public information. The research describes automated data searches that escalated…
-
The KillSec ransomware takedown has disrupted an alleged cybercrime operation linked to around 1,000 suspected attacks worldwide. Authorities seized the group’s infrastructure and provisionally arrested three suspects during coordinated action on September 30. According to Europol, investigators believe a 16-year-old served as the group’s main operator. Meanwhile, police secured at least 110 terabytes of stolen…