-
Wesco has confirmed that it is investigating a cybersecurity event after the data extortion group ExfilSquad claimed to have stolen information from the company. The distributor said the Wesco security incident involves its cloud-based customer relationship management environment. It added that it has worked with its CRM vendor and does not believe sensitive data faces…
-
Mozilla has replaced the Firefox GPG signing key used for certain Firefox and Thunderbird release files after an unencrypted copy was accidentally committed to a private GitHub repository. The company said it found no evidence that an unauthorised party accessed the exposed key. It also assessed the risk of a supply-chain attack as low because…
-
DDoS botnets are rebuilding quickly after authorities disrupted two of the largest known operations, Kimwolf and Aisuru. Researchers warn that takedowns can reduce a botnet’s immediate impact, but they do not remove the insecure devices that made it possible. As a result, new groups are competing for the same pool of exposed routers, cameras, Android…
-
FirewallFalcon Manager presents itself as a free, open-source tool for managing Linux servers, VPN services and proxy infrastructure. Researchers now warn that the software hides a backdoor that can give attackers extensive control over systems where it is installed. The tool has been promoted through Telegram channels to VPN resellers and so-called Free Internet operators.…
-
An HP ThinPro flaw could allow someone with physical access to certain thin clients to bypass disk encryption and recover sensitive local data. Researchers found the issue in ThinPro 8 and 9, HP’s Linux-based operating system for enterprise thin client devices. The weakness affects how the system validates its boot process before releasing an encryption…
-
AI content watermarks are moving into practice as technology companies face new transparency duties under the EU AI Act. Anthropic has begun adding machine-readable marks to content generated by Claude. The company’s move follows Article 50 requirements that aim to help people identify synthetic or manipulated material. The rules apply to providers of general-purpose AI…
-
A Levi Strauss cyberattack has led to the theft of corporate data after attackers used social engineering to gain access to three employee devices. The clothing company said it detected the incident, contained the intrusion and began an investigation. It also brought in external cybersecurity specialists to support its response. Early findings indicate that the…
-
Social media account hacks are exposing victims to serious privacy and safety risks. The FBI has warned that criminals are using stolen access to find, share and sell intimate photos and videos. Attackers often pair explicit material with a victim’s personal information. This can lead to harassment, extortion and repeated abuse long after the original…
-
Children in the UK are reporting more fake and manipulated images of themselves online, new figures from child-safety groups show. Report Remove received 420 reports between January and June 2026. That already exceeds the 397 reports recorded during all of 2025. Some cases involved AI-generated or digitally altered images. The Internet Watch Foundation said some…
-
AI-powered fake-girl bots are targeting gamers and social media users with flattery, fake conversations and OnlyFans promotions. Researchers say the campaigns can push users toward real subscription accounts, impersonation scams or credential-stealing sites. The messages often begin inside games or social platforms before moving to Discord. OnlyFans scam bots do not always send a malicious…