-
Five Venezuelan nationals have pleaded guilty to conspiring to commit bank larceny after attempting to use malware to force cash dispensers at US ATMs to release money. Luis Alberto Velasquez-Artigas, Royder Adrian Figuera-Perez, Javier Mejia Jr., Gabriel Alexjandro Corales-Garcia and Italo Lizandro Corrales-Carrillo admitted their roles in the attempted ATM jackpotting attacks. Velasquez-Artigas has received…
-
Attackers are exploiting two recently patched PaperCut zero-days to steal data from vulnerable PaperCut NG and MF print management servers. The flaws, tracked as CVE-2026-81578 and CVE-2026-82078, can be chained to bypass authentication and achieve remote code execution. PaperCut issued several emergency patches after learning that attackers had already used the vulnerabilities as zero-days. Attackers…
-
Cronos has resumed block production after an attack on the Tectonic lending platform used manipulated token prices to secure roughly $74 million in borrowed assets. The network paused operations after detecting the incident, freezing transactions while validators restored the chain to a point before the exploit. Cronos said the network is now online again and…
-
FulcrumSec has claimed responsibility for the Manchester Airports data breach, alleging that it stole around 86GB of customer, booking and travel information. Hackers claim theft of 86GB of data Manchester Airports Group, or MAG, disclosed the incident on August 27. The company said attackers stole customer data connected to Manchester, London Stansted and East Midlands…
-
Researchers have uncovered malicious browser extensions for Chrome and Edge that stole cryptocurrency, browsing data and account information from victims. Malicious browser extensions targeted Chrome and Edge users Application-security firm Socket discovered a malware framework hidden in browser extensions that appeared legitimate when first published. The operation may have been active since early 2024. Researchers…
-
Brave Browser 1.94 introduces email aliases that let users hide their primary email address when signing up for online services. Brave email aliases hide primary addresses The new feature creates disposable email addresses that forward messages to a user’s main inbox. This allows users to keep their real address private from websites. It can also…
-
McKesson has disclosed a cybersecurity incident involving unauthorised access to third-party applications and data theft. ShinyHunters claims it stole roughly 284 million patient-related data records. McKesson data breach investigation remains ongoing McKesson discovered the incident on August 25 and disclosed it in a filing with the US Securities and Exchange Commission. The company said it…
-
Hasbro has disclosed a data breach that exposed personal and financial information belonging to an undisclosed number of employees. Hasbro employee data breach affects personal data Hasbro notified the Massachusetts Attorney General’s Office about the incident. The company did not say when it detected the breach or how many people were affected overall. The exposed…
-
More than 8,300 Internet-exposed Gitea servers remain vulnerable to a critical code injection flaw that attackers are actively exploiting. Gitea code execution flaw affects exposed servers The vulnerability, tracked as CVE-2026-60004, allows attackers with repository write access to execute commands with the permissions of the Gitea service account. The issue affects Gitea’s diffpatch API endpoint. Attackers can…
-
A 68-year-old man has received a prison sentence of more than six years for running an illegal IPTV service that generated almost £1 million over three years. Police shut down illegal IPTV service The City of London Police said Milan Ibrahim operated a sophisticated illegal streaming operation from premises in Chorley. Investigators found that the…