Attackers compromised a Cloudflare API key with full account permissions, allowing them to inject malicious scripts into website responses by creating a rogue Cloudflare Worker that cleverly evaded standard security checks. By modifying content at the CDN edge and removing key security headers, the hackers kept origin servers and files untouched, making the tampering difficult to detect.
London property managers City Relay have suffered a data breach, exposing sensitive financial information, after hackers exploited a vulnerability in a third-party cloud platform connected to their systems. The breach has prompted an immediate investigation and cybersecurity experts have been brought in to assess the damage.
Meet SparroWocky, a sneaky new backdoor that's been secretly targeting government agencies across Latin America since August 2025, courtesy of the China-aligned threat actor FamousSparrow. This modular malware mastermind can run commands, steal files, and even take screenshots, wreaking havoc on unsuspecting hosts.
In under six hours, a single operation compromised thousands of third-party credentials, highlighting the alarming speed and efficiency of AI-powered credential theft. This brazen heist was made possible by an AI-driven attack framework that worked tirelessly, scanning for vulnerabilities, troubleshooting issues, and rotating IP addresses with minimal human intervention.
The FBI has seized the domains of NightmareStresser, a notorious DDoS-for-hire service, in a major cybercrime crackdown. Visitors to the site now see a seizure banner, courtesy of the US Department of Justice.
Cisco has uncovered a critical zero-day vulnerability, CVE-2026-76460, that lets hackers bypass authentication on its Identity Services Engine and Passive Identity Connector, and it's already being exploited by attackers. This flaw allows unauthorized access to affected devices with just a crafted request.
A massive data breach at Gyazo, a popular image-sharing service, has exposed a staggering 23.6 million user records and 490 million image metadata records - putting users' sensitive information at risk. The breach occurred when an attacker exploited a vulnerability in Gyazo's image upload server, gaining access to sensitive data and arbitrary commands.
Meet SparroWocky, a sneaky new backdoor that's helping the China-aligned threat actor FamousSparrow wreak havoc in Latin America. This modular C++ backdoor has been taking center stage since August 2025, replacing its predecessor SparrowDoor as the group's go-to tool.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Meet RatHat, a sneaky Chinese malware that's using AI to secretly harvest financial data from Android devices - and traditional security controls just can't keep up. It spreads through clever tactics like smishing, malvertising, and fake APK downloads that trick victims into installing the malware themselves.
Cisco has uncovered a critical zero-day flaw in its Identity Services Engine, scoring a maximum CVSS rating of 10.0 and allowing attackers to bypass authentication and gain root access with just a single crafted request. This severe vulnerability requires immediate attention, as it can be exploited remotely without any credentials or user interaction.
The FBI has shut down NightmareStresser, a notorious DDoS-for-hire platform responsible for hundreds of thousands of attacks worldwide since 2022. This move is part of a global effort to take down malicious services that wreak havoc on the internet.
Cisco warns that a critical API vulnerability, CVE-2026-76460, is under active exploitation, allowing attackers to bypass security and gain unauthorized access to devices with a simple crafted request. This maximum-severity flaw scores a perfect 10.0 on the CVSS scale, making it a high-risk threat that demands immediate attention.
A mid-size company's security audit uncovered a shocking oversight: a test environment was accidentally exposing live customer data to the internet, highlighting how easily security problems can arise from simple mistakes. This eye-opening discovery was made by Richard Schut, Managing Director & AI Software Researcher at SmartRepl, during a routine audit aimed at identifying potential issues before migrating local systems to the cloud.
China-linked hackers are targeting Latin American governments with a new, sneaky malware called SparroWocky, designed to secretly collect intelligence on the region's responses to growing US pressure. The espionage campaign, tracked by ESET researchers, has hit government organizations in at least eight countries across the region.
The emergence of AI-powered agents in cyber attacks is a wake-up call to rethink our security and data protection strategies - and Spain's first agentic AI-powered data breach is a stark reminder of the risks. An AI agent autonomously launched a multi-stage attack, scanning files, logging in to a system, and searching for vulnerabilities to exploit.
Cisco has sounded the alarm on a critical zero-day flaw in its Identity Services Engine that's being actively exploited by attackers, allowing them to bypass authentication and gain unauthorized access. To stay safe, customers are urged to upgrade to a patched version ASAP.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Scammers are tricking users into handing over sensitive info by disguising malware as a familiar CAPTCHA challenge, taking advantage of our trust in these security checks. They're using fake CAPTCHAs that instruct victims to copy and paste a script into the Run box, effectively turning a security measure into a data-harvesting tool.
Meet CHOSEN BRICK, a sneaky Windows malware that's been used by Iranian hackers to turn everyday apps into long-term spying tools, helping the regime silence dissidents, activists, and journalists worldwide. This powerful malware can collect system info, capture screenshots, record audio, and even steal email content.
A sneaky malware operation, tracked as KREMLIN, has infected 1,515 systems, mostly in Brazil, by secretly installing malicious Chrome and Edge extensions that steal sensitive info. This cunning toolkit impersonates banks to trick victims into giving up their credentials and session tokens.
Kaspersky's Global Emergency Response Team has uncovered a sneaky tactic used by the NightEagle group to target Russian firms, exploiting legitimate tools like compromised VPN credentials and Cloudflare WARP to gain initial access. This clever approach allowed them to deploy the GhostContainer backdoor on Microsoft Exchange systems.
A recent AI-powered breach reported to the Spanish Data Protection Agency reveals a chilling new reality: AI-driven attacks are no longer just hypothetical threats, but a harsh reality that organizations must now confront. This breach, allegedly carried out by an agent powered by a large language model, successfully exploited vulnerabilities and logged in to sensitive systems.
In a proactive move to safeguard the nation's maritime security, the US Coast Guard and FBI teamed up to board two foreign commercial tankers in the Gulf of Mexico, investigating suspected cyberattacks that could have put crew safety and environmental stability at risk. The joint operation, which took place over two days in August, aimed to assess potential network compromises without disrupting vessel operations.
Meet AMOS Stealer, a sneaky information thief that's been targeting macOS systems since April 2024, and has recently been upgraded with frequent changes to evade detection. This malicious tool can quietly harvest sensitive credentials, wallets, and local data from unsuspecting users.
Google just patched a high-severity zero-day flaw that allowed hackers to exploit Pixel phones with zero clicks - and federal authorities are urging you to update your phone ASAP. This critical vulnerability let attackers escalate privileges and bypass permission checks, but thankfully it's now closed with a simple update.