Hackers Abuse Legitimate ScreenConnect Tool to Gain Remote Access Through Phishing
Hackers are using a legitimate ScreenConnect client to turn a payment notification into a route for remote access. Instead of delivering custom malware, the phishing…
Year: 2026
Denmark Confirms Major Security Incident Exposing 8.8 Million Citizen Records
Denmark has confirmed a serious cybersecurity incident involving unauthorized access to personal information in its Central Person Register (CPR), affecting about 8.8 million registered individuals.…
MAKERphone 2: A DIY 4G phone with plug-in camera, speaker and prototyping board
CircuitMess, a Croatian electronics kit maker, is selling MAKERphone 2.0, a build-it-yourself 4G phone on Kickstarter that buyers program in MicroPython or Arduino C++ and…
A week in security (September 28 – October 4)
Last week on Malwarebytes Labs: Stay safe! Scammers know more about you than you think. Malwarebytes Mobile Security protects you from phishing, scam texts, malicious sites, and…
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
Ravie LakshmananOct 05, 2026Vulnerability / Web Security A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck.…
Gartner: Process mining and task mining insight
The field of process mining has grown rapidly in recent years, and with the increasing adoption of digital technologies and data-driven business processes, it has…
Nikkei Cyberattack: 9,000 Spoofed Emails And A Breach
Nihon Keizai Shimbun disclosed on October 4 that a Nikkei cyberattack had compromised employees’ Microsoft 365 business software accounts. Attackers then used those accounts to…
Google Pauses OSS VRP Vulnerability Search Over AI Reports
Google has suspended its Open Source Software Vulnerability Rewards Program (OSS VRP), a vulnerability search initiative that paid researchers for finding flaws in the company’s…
Alleged ShinyHunters Leader Arrested in Jordan
An individual believed to be the leader of the extortion group ShinyHunters was reportedly arrested in Jordan and is cooperating with the FBI. The suspect,…
Iranian hacker accused of draining 31TB from university inboxes extradited to the US
Iranian hacker accused of draining 31TB from university inboxes extradited to the US Pierluigi Paganini October 05, 2026 Iranian hacker Amir Barati faces extradition to…
McCrary Institute outlines three priorities for defending critical infrastructure against AI-enabled cyberattacks
The McCrary Institute for Cyber & Critical Infrastructure Security warned that artificial intelligence is accelerating cyber threats against operational technology (OT) systems supporting critical infrastructure,…
NIST outlines secure remote access strategies to strengthen water and wastewater OT cybersecurity
The National Institute of Standards and Technology (NIST) published practical guidance to help U.S. water and wastewater utilities secure operational technology (OT) environments against cyberattacks…