New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands
Cybersecurity researchers have called attention to a new modular malware called TELEPUZ that’s been spreading via websites infected with ClickFix lures since late April 2026.…
Month: July 2026
A fifth of PC devices still on Windows 10
Analysis of data collected by Lansweeper has found that almost 22% of devices are still running Windows 10, in spite of Microsoft officially ending support…
Nichirei Cyberattack Disrupts KFC Japan Supply Chain
The Nichirei cyberattack has disrupted food deliveries across Japan after the frozen food and logistics provider confirmed its servers were compromised in a cybersecurity incident…
Qantas Did Everything “Right” — And Got Breached Anyway
A vishing call to an overseas contact center agent. A fake IT ticket. A default setting nobody thought to lock down. That’s all it took…
Qantas escapes formal OAIC probe over 2025 vishing breach
Qantas will not face an investigation by the Office of the Australian Information Commissioner (OAIC) for the June 2025 data breach that saw millions of…
Two Scattered Spider Hackers Sentenced to Jail in UK
Two members of the Scattered Spider cybercrime group have been sentenced to jail in the United Kingdom, the country’s National Crime Agency (NCA) announced on…
TuxBot v3: The IoT Botnet Built With AI
TuxBot v3: The IoT Botnet Built With AI – Bugs, Disclaimers and All Pierluigi Paganini July 16, 2026 TuxBot v3, an AI-built IoT botnet for…
DigiCert survey finds 81% of Australian organisations hit by AI security incidents or vulnerabilities
DigiCert research suggests AI-related security problems are already affecting many Australian enterprises, with 81% of surveyed organisations reporting either an AI-related incident or identifying AI-related…
CISA urges software vendors to formalize vulnerability disclosure programs
The Cybersecurity and Infrastructure Security Agency (CISA) and four international cybersecurity agencies have published guidance urging software manufacturers and online service providers to establish coordinated…
Shai-Hulud npm Supply Chain Attack
On September 15, 2025, malicious versions of multiple popular packages were published to npm. They contained a post-install script that harvested sensitive data and exfiltrated…
Russian hackers trojanize WebEx, Zoom apps to push Starland malware
A financially motivated Russian threat actor tracked as UAT-11795 is using trojanized software to steal credentials and cryptocurrency by deploying a new backdoor called Starland…
Red – A Red Teamer to Find Prompt Injection Vulnerabilities in GPT 5.6 Sol
OpenAI has introduced GPT-Red, an internal automated red-teaming model designed to identify and remediate prompt injection vulnerabilities in GPT-5.6. This approach aims to tackle a…