-
Trezor says a phishing campaign targeted about 347,000 customer email addresses after hackers breached its third-party marketing provider, Brevo. Around 2,500 recipients clicked the malicious link before the company disabled it. The attackers sent fake security warnings from a legitimate Trezor email address. They claimed that a hardware flaw threatened the recovery seeds used to…
-
A Ukrainian national has received a four-year prison sentence for his role in Conti ransomware attacks. The cybercrime operation targeted organizations in the United States and other countries between 2020 and 2022. Oleksii Oleksiyovych Lytvynenko, 44, worked as both a network intruder and malware developer. He personally helped attack at least 12 companies and stored…
-
The Mantax Otax malware combines ransomware, spyware and remote-control capabilities. It can encrypt files, steal sensitive information and harass victims with disruptive content. Operators in Indonesia spread the malicious software through APK files hosted outside Google Play. They then use phishing and social engineering messages to convince targets to install the apps. After installation, Mantax…
-
Surfshark has disclosed a security incident involving an internal test server and a separate proxy system. According to the VPN provider, a configuration error left the testing environment accessible from the internet. An unauthorized party then entered the server and accessed internal information. The exposed material included service configurations, build-related credentials, parts of system binaries…
-
Microsoft Excel users report that the KB5002914 security update has broken copy-and-paste functions and formula dragging. According to affected users, removing the update or returning to an earlier Office build restores normal behavior. Microsoft released the patch during its September 2026 Patch Tuesday. Reports about the problem then appeared on Reddit and Microsoft’s Q&A forums.…
-
A suspected Russian-speaking attacker used hundreds of AI agents to build and launch a worldwide campaign against vulnerable PaperCut servers. The operation compromised systems belonging to at least 395 organizations in 48 countries. The PaperCut AI attack targeted two actively exploited vulnerabilities in PaperCut NG/MF. Researchers say the threat actor used AI models alongside widely…
-
IDScan has confirmed that an unauthorized party accessed customer information held on its cloud platform. The disclosure follows reports linking the company to a database containing more than 153 million driver’s license scans. The identity verification provider discovered the incident around September 1, 2026. It then published a security notice on September 4. According to…
-
A massive online fraud network known as DoppelCart operates more than 119,000 fake stores designed to steal payment card information. Most of the fraudulent domains use the .SHOP top-level domain. In fact, the network accounts for approximately 2.72 percent of all websites registered under that domain extension. German cybersecurity company Nebty discovered the operation. It…
-
Security researchers have discovered a Linux rootkit targeting F5 BIG-IP Access Policy Manager environments. The malware injects a fileless web shell directly into system memory. Therefore, it can give attackers remote access without writing the malicious PHP code to disk. Rootkit may follow exploitation of critical flaw Researchers believe attackers deploy the malware as a…
-
The ShinyHunters extortion gang claims it breached Florida’s Driver and Vehicle Information Database. The group says it stole more than 200,000 records containing sensitive information about drivers. The alleged Florida DMV breach has not yet received official confirmation. However, the attackers published a screenshot that appeared to show a record from the database as evidence.…