Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3799 articles
ShinyHunters claims its server hosting leaked data will be unavailable for about 24 hours during maintenance, with mirrors and torrent links planned. The group says backups preserve the data; these claims are unconfirmed.
India temporarily restricted Telegram and disabled message editing ahead of the NEET-UG retake after fake exam-paper scams. Authorities removed channels and bots, and police arrested members of an alleged fraud ring; rights groups criticized the restrictions.
Malwarebytes says more than 40 lookalike World Cup streaming sites use malicious ad networks to trigger redirects, scams and possible malware downloads. The sites hijack clicks and load hidden ads; Malwarebytes recommends official streams and blocking ads.
Zimperium reports that Rokarolla, an Android trojan, targets 217 banking and crypto apps. It spreads through fake Chrome and TikTok installers and uses overlays to steal credentials and control infected devices.
Aikido Security says at least 15 JetBrains Marketplace plugins stole developers’ AI API keys and were installed nearly 70,000 times. BleepingComputer independently confirmed theft code in one plugin, which remained available at publication.
Backslash Security says it found more than 30 security-relevant Claude Code fixes from April to early June 2026, including prompt injection and credential leaks. The report warns delayed updates may leave brief exposure windows.
Lawmakers questioned the Trump administration’s export controls on Anthropic’s Fable 5 and Mythos 5 models. Anthropic said the order forced it to disable them; some lawmakers sought more information and questioned the national security rationale.
Kaspersky says malicious Wallpaper Engine wallpapers on Steam Workshop delivered backdoors and other malware, including tools that stole Steam credentials. Steam removed the identified uploads, but researchers warn more may appear.
An Institute for Security and Technology policy paper says AI bills of materials could improve supply-chain transparency and reduce cyber risk, but adoption requires shared foundations plus demand through mandates, regulations, or contracts.
An article reports that The Gentlemen uses LLMs to analyze stolen data, develop tools, and tailor extortion, alongside infostealer credentials and unpatched Cisco and Fortinet devices. The group claims about 500 victims in under a year.
The FTC says Americans lost $3.5 billion to imposter scams in 2025, with social media and fake bank alerts prominent. The agency says enforcement under its Impersonation Rule has halted some schemes.
The UK plans age checks for new social media accounts from spring 2027. Experts warn checks may be bypassed with VPNs and could expose ID and biometric data to breaches.
Cybersecurity startup Magnitude emerged from stealth with $10 million in seed funding. It says its AI agents continuously assess third-party risks, identify potentially exposed vendors and dependencies, and help prioritize remediation.
TrustCloud says Application Assurance continuously analyzes enterprise data about production apps to assess their security, replacing manual questionnaires. The vendor also says it can assess agentic apps; it does not secure the apps themselves.
Wiz has launched a public preview of its Exposure Management Dashboard, which organizes CTEM workflows for scoping, discovery, prioritization, validation, and remediation, using platform agents to help teams manage security risks.
Maine restricted public access to its breach portal after fake notices named VRChat and Discord. The state is reviewing safeguards; VRChat said it had no reason to believe its systems or data were compromised.
The article describes reported ShinyHunters targeting of education platforms and FulcrumSec’s extortion claim against Global Schools Foundation, which confirmed a cyberattack. Specific stolen-data claims and attribution remain unverified or contested.
StepSecurity announced Package Configs, a Dev Machine Guard feature that audits developer machines’ package registries, cooldown settings and credential exposure to help identify gaps exploited by npm and PyPI supply-chain attacks.
The DOJ seized cfake[.]com and socfake[.]com after a court found probable cause they were used to distribute nonconsensual AI-generated intimate images. A coordinated U.S., Italian and French operation led to an arrest in Nice and a cryptocurrency seizure.
Google says UNC6508 targeted U.S. and Canadian organizations from at least September 2023, using the INFINITERED backdoor and exposed REDCap servers. Google disrupted some infrastructure and notified affected organizations; the campaign’s full scope remains unknown.
Proofpoint says UNK_DeadDrop used recruitment and code-review lures to target nearly 100 organizations, abusing VS Code project auto-execution to install malware and steal credentials and wallet data. The article also summarizes separate malicious-extension and supply‑
After the U.S. imposed export controls on Anthropic’s Fable 5, cybersecurity experts argued that reported jailbreaks did not demonstrate unique offensive capabilities and said the model’s vulnerability-finding and patch-testing functions support defense.
CERT-AGID says it handled over 650 cases involving abused or maliciously created Italian PEC mailboxes since January 2026. It coordinates with providers to reset compromised accounts or deactivate malicious ones and warns recipients about suspicious messages.
The FBI warns that fraudsters use couriers to collect cash from victims of cryptocurrency investment scams, authenticating pickups with passwords or dollar-bill serial numbers. It urges victims to report scams and avoid handing cash to strangers.
