Meet ARTEX, an AI-powered pentesting tool that was originally designed for learning and research, but was repurposed by hackers to steal sensitive data from South Korean financial organizations. In a shocking campaign, attackers used ARTEX to breach security and get away with valuable information.
Massive data breaches are making headlines, with over 150 million driver's licenses compromised and around 5,000 Dropbox accounts exposed through a third-party vulnerability. These staggering incidents highlight the vulnerability of our sensitive information in today's digital landscape.
Meet ASHVEIN, a sneaky new malware that's helping Russia-aligned hackers steal sensitive info from Ukrainian government targets - and hiding their tracks in clever, invisible ways. This .NET infostealer and remote access trojan is a master of disguise, blending credential theft, surveillance, and remote control features to fly under the radar.
Thanks to AI, phishing emails have become a whole lot harder to spot - gone are the telltale signs of poor grammar and misspelt words, replaced with slick, error-free language that's almost indistinguishable from the real thing. Phishing has evolved into a massive threat, with the FBI reporting a 274% surge in losses over just two years.
ASOS recently suffered a data breach when an attacker impersonated a trusted contact to steal employee login credentials, which were then used to access sensitive customer information on third-party platforms. The breach highlights the importance of protecting sensitive data and preventing unauthorized access.
A recent healthcare breach has put 20 million patient records at risk, highlighting the vulnerabilities that can arise during cloud migrations - especially when sensitive data is left exposed on servers. Even with the best intentions, a single misstep can leave patients' personal and medical information in the wrong hands.
Google thwarted a sneaky attack where hackers hijacked three country-code domains to obtain fake HTTPS certificates for several Google sites and other organizations, quickly blocking the unauthorized certificates through Chrome's emergency response system. The compromised domains included .gh, .sl, and .as, which were manipulated by attackers to gain DNS control.
The operators of UAC-0099, a group likely aligned with Russian interests, have been steadily refining their MATCHBOIL malware, making it a more potent tool for future attacks. This deliberate evolution shows a clear intent to evade detection and enhance the malware's flexibility.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
ASOS recently fell victim to a sneaky social engineering attack, where hackers tricked an employee into handing over their login credentials, allowing the attackers to access sensitive customer data stored on third-party platforms. The company quickly sprang into action, locking down the affected platforms to prevent further damage.
Meet Wazza Phishkit, a sophisticated threat that's targeting banking, manufacturing, and government organizations across the US, Europe, and Australia with a multi-stage routing chain designed to evade detection. This engineered delivery system uses a series of checks to route visitors to its final lure, making it a complex and formidable phishing threat.
Meet the new face of cybercrime: AI-powered hacking. A Chinese hacker recently used agentic AI tooling, alongside traditional tactics, to pull off a massive data heist at a South Korean bank.
Beware of malicious Firefox extensions that masquerade as helpful tools but secretly steal your crypto wallet secrets, including recovery phrases and private keys, by intercepting them during wallet import flows. These sneaky add-ons can even fake legitimate wallet interfaces to trick you into handing over sensitive info.
A critical Atlassian vulnerability, CVE-2026-21589, with a near-perfect CVSS score of 9.3, is being actively exploited in the wild, putting multiple products at risk. This flaw allows for arbitrary file access, posing a significant threat to users of eight Atlassian Data Center products.
The FBI and US Secret Service have sounded the alarm: a whopping 86,644 Fortinet devices across 194 countries are compromised, and the FortiBleed threat is still very much active, leaving organizations at risk of being locked out of their own systems. This widespread campaign targets Fortinet FortiGate firewalls and SSL VPN gateways, putting businesses and individuals on high alert.
Meet Zohar Pinhasi, the mastermind behind MonsterCloud, who's accused of pulling off a despicable scam that left ransomware victims paying twice - once to the hackers, and again to him for fake decryption services. By posing as a hero with secret tools, he allegedly re-victimized his clients and lined his pockets with a hefty profit.
A small construction company's confident dismissal of expert help - "you're too expensive" - turned to desperation when a ransomware attack crippled their operations, forcing a shutdown. Just weeks earlier, they'd rejected a proposal from a cybersecurity consultant that could have prevented the disaster.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
The US government is putting out a $10 million reward for information that leads to the identification or capture of Zhang Yu, a Chinese national accused of being involved in the notorious 2021 Microsoft Exchange Server attacks as part of the HAFNIUM hacking group. This move sends a strong message to others who help hide China's cyber operations: they could be next.
A malware worm has been discovered exploiting the popular Tensorlake npm package to steal sensitive credentials, with the first malicious commit occurring on October 7, 2026, at 01:20 a.m. UTC. The compromised package, version 0.5.144, was quickly taken down after publishing to the npm registry on October 8, 2026.
The FBI has taken a major step in the fight against child exploitation by seizing two websites, NudeLeaksTeens and NLTVIDS, that were selling and distributing shocking content. These sites were offering horrific collections of child sexual exploitation material, including a 189GB collection of 315 girls' images and videos for just $64.90.
Malware authors are now using blockchain technology to launch devastating cloud supply chain attacks, as seen in the ChainDrop attack that infected over 400 npm packages. This sneaky tactic uses a custom runtime to launch a credential harvester, allowing attackers to capture sensitive cloud provider IAM keys and more.
Meet Zohar Pinhasi, a so-called ransomware "fixer" who's accused of running a brazen scheme that raked in over $19 million from desperate clients, with a simple twist: he paid just $8 million in ransoms, pocketing the rest.
A CEO's shocking scheme to profit from ransomware recovery has landed him in hot water, accused of secretly paying off ransomers while pretending to decrypt the malware for his clients, leaving them victimized twice over. The alleged scam, which ran from 2018 to 2023, could now cost him up to 20 years in prison.
Tens of thousands of Fortinet FortiGate firewalls and SSL VPN gateways are under active attack by hackers leveraging a massive June credential leak, putting countless networks at risk of disruption. The breach, known as FortiBleed, exposed a staggering 73,932 firewall URLs across 194 countries, giving attackers a treasure trove of vulnerable targets.
Google revealed that several top brands and online services were hit by the same attacks, following their initial mitigation efforts. Attackers exploited vulnerabilities in country-code top-level domain (ccTLD) registries and DNS to hijack Google domains, not by breaching Google's infrastructure, but by compromising third-party operators.