-
An AI voice scam reportedly helped fraudsters persuade Italian private bank Fideuram to transfer approximately €95 million to overseas accounts. The attackers impersonated senior figures using fake messages, documents and a phone call. Around €36 million reportedly remains missing. Fraudsters Impersonate Bank Chief and Lawyer The scheme began in February when Paolo Molesini, then chairman…
-
Kiteworks urged customers to temporarily take their file-sharing systems offline on September 26 after receiving intelligence about a possible attack. The company says the Kiteworks server shutdown was precautionary and that it has found no indication of a compromise. Customers Received Shutdown Instructions Kiteworks told customers that federal authorities had warned of a threat actor…
-
ShinyHunters breached and defaced Clop’s data leak site by exploiting a Grav CMS flaw, according to details that Grav’s developers confirmed. Clop has since moved the site to a new Tor address. ShinyHunters Defaced Clop’s Leak Site ShinyHunters first placed a small file on Clop’s site earlier this month. It later replaced the site’s content…
-
An Elementor WordPress flaw could let attackers create administrator accounts after a logged-in site administrator opens a malicious link. The issue affects Elementor versions 4.3.0 and 4.3.1. Elementor fixed it in version 4.3.2. Malicious Link Uses an Administrator’s Session The flaw involves cross-site request forgery, or CSRF. An attacker does not need an account on…
-
OpenAI may be preparing a ChatGPT Pro Max subscription priced at $500 per month. The unannounced plan has appeared in ChatGPT’s subscription interface, but OpenAI has not confirmed its launch date or final features. Subscription Preview Lists Faster Work and Codex TestingCatalog spotted the proposed plan alongside ChatGPT’s existing subscription options. One version of the…
-
A new MacSync malware campaign uses public iCloud calendar events as part of its infection chain, according to Kaspersky researchers. Commands hidden in an event description direct a downloader to fetch more malicious components from iCloud. Calendar Event Hides Download Commands MacSync targets macOS users through deceptive downloads and social engineering. Researchers have seen it…
-
Carbonato malware targets Docker hosts that expose their management API without authentication. Once inside, it installs an AI agent that helps operators run commands and collect credentials, according to researchers at ThreatDown. Exposed Docker APIs Give Carbonato Access Carbonato looks for Docker daemons with an unauthenticated API exposed on port 2375. It connects to the…
-
Developers who publish a private GitLab project email address to collect bug reports may also give attackers a way to create work items in their name. Researchers at Aikido found live addresses in public project documentation and warned that the same credentials could enable merge requests. Private Addresses Contain Long-Lived Tokens GitLab lets users create…
-
Attackers are exploiting a Roundcube SQL injection vulnerability that the Webmail project patched in May 2026, according to the Canadian Centre for Cyber Security. The flaw affects a plugin that connects Roundcube to a database for user lookups. Flaw Affects the virtuser_query Plugin The vulnerability, CVE-2026-48842, affects Roundcube’s built-in virtuser_query plugin. This plugin uses database…
-
CISA says ransomware groups are exploiting a critical vulnerability in JetBrains TeamCity. The agency has now marked the flaw as used in ransomware campaigns, after adding it to its list of known exploited vulnerabilities in August. Authentication Bypass Gives Attackers Server Access The vulnerability, CVE-2026-63077, affects TeamCity On-Premises. JetBrains released fixes on July 25, 2026,…