Chick-fil-A Accounts Get Fried in Credential Stuffing Attack
US fast-food chain Chick-fil-A has disclosed a data breach stemming from a credential stuffing attack targeting its customers’ online accounts. According to notifications sent to…
Latest Cybersecurity News — Page 131
View all →
GAO report details scope of cybersecurity regulation overlap
A morass of rules is forcing companies to report the same information multiple times — and sometimes, those rules conflict. Source link
AgentForger proves AI agents can become persistent insider threats
A ‘planted accomplice’ that does all the work Once activated, AgentForger can perform reconnaissance to create an internal map of a company. For instance, agents…
Exposed JDWP Exploited in the Wild
During routine monitoring, the Wiz Research Team observed an exploitation attempt targeting one of our honeypot servers running TeamCity, a popular CI/CD tool. Our investigation…
Australian energy provider Origin says data breach exposes client data
Australian energy provider Origin Energy has confirmed a data breach by an unknown threat actor that exposed customers’ personally identifiable information (PII). The company has…
Hackers’ OPSEC Mistake Exposed a Global Espionage Campaign and Its New TriBack Malware
A simple mistake by cyber spies has pulled back the curtain on a wide ranging espionage effort. It reached hospitals, government offices, and schools across…
Critical FreePBX Flaws Let Unauthenticated Attackers Execute Code and Take Over Administrator Accounts
Critical security vulnerabilities in FreePBX have been disclosed, exposing organizations to risks of unauthenticated remote code execution and the takeover of administrator accounts. These flaws,…
Months-long breach exposes South Korean diplomats’ personal data
South Korea’s Foreign Ministry has disclosed that attackers breached the Korea National Diplomatic Academy’s online education system, compromising personal data belonging to current and former…
Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge
The Chaos ransomware group ran its command-and-control through the victim’s own browser. Cisco Talos on Thursday detailed msaRAT, the Rust implant behind it, found on…
Alphabet borrows $100bn to pay for AI investments
Alphabet, the parent company of Google, has reported revenue for the second quarter of 2026 of £120bn, an increase of 24%, with Google Cloud experiencing…
US and allies say Russian hackers stole emails without social engineering
The United States and more than a dozen allied nations said that Russian hackers stole emails from users of the Zimbra email program without having…
Is Patching Dead? Vulnerability Management in the Post-Mythos Era
On July 14, 2026, the White House launched Gold Eagle: a federal clearinghouse that uses frontier AI to identify, rank, and coordinate the remediation of…