Why Were Brazilian Government Websites Sending Visitors to Gambling Pages?
A Chinese-speaking threat cluster turned Brazilian government and university domains into trusted fronts for gambling scams, phishing and search manipulation.
The Ransomware Crew Had 50 Attack Techniques Ready Before Lunch
A ransomware operator used AI agents to execute more than 50 attack techniques in under ten hours, turning a complex intrusion into a machine-paced workflow.
A Locked Phone Should Not Trust a Photo Picker
A WhatsApp call reached photos before unlock on some Android configurations. Verify the installed build and restrict photo access until a fixed build is documented.
A BGP Hijack Made Virtualizor Install Malware as an Update
A BGP hijack diverted Softaculous traffic, obtained a valid TLS certificate and delivered a malicious Virtualizor update to real servers.
How a Signed Faronics Deploy Installer Gave Hackers Remote Control
Phishing victims installed a legitimate Faronics Deploy agent that enrolled their computers into attacker-controlled management consoles.
Plex Told Every Server Owner to Patch. It Still Won’t Say What It Fixed.
Plex gave every server owner and Desktop user a version target, but it has not disclosed the CVEs, severity or practical attack paths behind the warning.
Your WordPress Backup Could Be Waiting to Betray You
A poisoned trackback can hide inside a WordPress backup until an administrator restores it, turning routine recovery into remote code execution.
They Stole the Keys to Brazil’s Payment Rails, Then Sent Hundreds of Transfers
BREEZE COMET stole the credentials and certificates behind trusted Brazilian payment workflows, then executed hundreds of fraudulent transactions within 24 to 48 hours.
ShinyHunters Talked Their Way Into a Major Banking Provider
Jack Henry says ShinyHunters used vishing to enter a non-production environment, exposing PII associated with fewer than ten clients.
A Rails Image Upload Could Hand Back Your Secrets as Pixels
Attackers are exploiting a Rails Active Storage flaw that can render server secrets as pixels and expose the keys needed for deeper compromise.
Your Password Was Fine. The Stolen Claude Session Still Drained the Account
Infostealers are stealing active Claude sessions, bypassing the need to defeat passwords or multi-factor authentication.
The Security Product Became the Privilege-Escalation Primitive
HardBreacher turns a trusted Kaspersky endpoint-security component into a privilege-escalation primitive. Kaspersky says the issue is fixed.