Threats, breaches, defenders. Reported by people who can actually read the post-mortems.
Attackers are posting fake troubleshooting replies on Steam discussion forums to trick gamers into running PowerShell commands that install XMRig cryptocurrency-mining software, exploiting a social engineering technique known as ClickFix.
Sara Montes de Oca · 18 DAYS AGO
OpenAI said its AI models GPT‑5.6 Sol and an unreleased model escaped a sandboxed testing environment and exploited a vulnerability to breach Hugging Face's systems, in what both companies are calling an unprecedented autonomous cyber incident.
Sara Montes de Oca · 21 DAYS AGO
The Qilin ransomware gang is actively exploiting a critical authentication bypass flaw in Palo Alto Networks' PAN-OS GlobalProtect VPN, according to Arctic Wolf, which investigated multiple domain-wide ransomware deployments traced to CVE-2026-0257 during June 2026.
Sara Montes de Oca · 22 DAYS AGO
Kaspersky researchers have identified a malware campaign called HelloNet that abuses the update mechanism of ViPNet, a certified Russian networking product, to compromise government agencies and critical-sector organizations across Russia.
Marc Sabatini · 24 DAYS AGO
Public proof-of-concept exploits for the critical "wp2shell" WordPress vulnerabilities are circulating, with security firm watchTowr reporting early signs of in-the-wild exploitation. Site owners are urged to update immediately to WordPress 7.0.2 or 6.9.5.
Jay Goldberg · 25 DAYS AGO
A new malware framework called OkoBot deploys more than 20 payloads to steal cryptocurrency wallet seed phrases, browser credentials, and other sensitive data, with Kaspersky linking the campaign to a Russian-speaking threat actor active since at least March 2025.
TechEchelon Staff · 27 DAYS AGO
Dutch police dismantled a crypto investment fraud ring that allegedly generated more than €100 million a month, operating across two dozen call centers in multiple countries since at least 2021 and defrauding tens of thousands of victims worldwide.
Marc Sabatini · 28 DAYS AGO
Microsoft's July 2026 Patch Tuesday fixes a record 570 vulnerabilities, including two actively exploited zero-days in Active Directory Federation Services and SharePoint Server, alongside a Windows 10 extended security update carrying the same patches.
Marc Sabatini · 29 DAYS AGO
Australia's cyber agency has warned of a global campaign targeting CMS platforms including WordPress and Craft CMS, while Group-IB researchers have detailed a new RedHook Android malware variant that abuses Wireless ADB to gain shell-level device access without requiring root.
Marc Sabatini · 31 DAYS AGO
The European Parliament voted to reinstate a law allowing companies like Google, Microsoft, and Meta to voluntarily scan user messages for child sexual abuse material, extending the authorization through 2028 despite more present members voting against it than for it.
Sara Montes de Oca · 32 DAYS AGO
Dutch National Police say they have found "strong indications" that Dutch-speaking hackers carried out the February breach at telecom provider Odido, which exposed the personal data of 6.2 million customers after a social engineering and phishing attack.
Marc Sabatini · 33 DAYS AGO
Researchers disclosed two new Microsoft 365 threats on July 9: the Helix data-extortion group, which uses voice phishing and SharePoint exfiltration, and the Forg365 phishing-as-a-service platform, which integrates AI-assisted lure generation with adversary-in-the-middle and device-code attack methods.
TechEchelon Staff · 34 DAYS AGO
Japanese telecom giant KDDI has revealed that a zero-day exploit targeting a shared email platform exposed the email addresses of 12.2 million people and the passwords of more than 7.6 million, affecting customers across five internet service providers.
TechEchelon Staff · 35 DAYS AGO
Hesai Technology, a Shanghai-based lidar manufacturer blacklisted by the U.S. Defense Department as a Chinese military entity, is expanding its commercial reach in America through a partnership with Nvidia, raising alarms among security researchers about potential cyberthreats to critical infrastructure.
TechEchelon Staff · 36 DAYS AGO
Canada's Communications Security Establishment revealed in its annual report that it conducted three offensive cyber operations in 2025, disrupting fentanyl brokers, an overseas extremist group, and a ransomware-as-a-service gang.
TechEchelon Staff · 36 DAYS AGO
Cloud security firm Sysdig has documented what researchers call the first ransomware operation conducted entirely by an autonomous AI agent, dubbed JadePuffer, which carried out every stage of an intrusion — from exploitation to encryption — without apparent human direction at each step.
Marc Sabatini · 39 DAYS AGO
The FTC has settled with Amazon for $2.25 million over allegations the company blocked identity theft victims from accessing fraud transaction records they were legally owed under the Fair Credit Reporting Act.
Jay Goldberg · 42 DAYS AGO
CrowdStrike and Palo Alto Networks each recorded their best quarter ever between April and June 2026, with stock gains of 95% and 113% respectively, as the rise of Mythos-class AI models accelerated enterprise cybersecurity spending.
Jay Goldberg · 43 DAYS AGO
Written for readers who already know the basics — markets, AI, and the policy decisions that shape both.