Microsoft 365 users fall victim to one-in-a-million password spray attack
The attacks all came from a single source, an IPv6 address range controlled by internet provider LSHIY LLC, Huntress said in a blog post. LSHIY…
Latest Cybersecurity News — Page 246
View all →
Expanding the Zero Critical Club to set a new standard for AppSec and SecOps teams
Security teams today are caught in a difficult position. Development teams are shipping features faster than ever, naturally expanding the attack surface, while attackers are…
NetNut proxy network disrupted, 2 million infected devices cut off
A joint operation involving Google has disrupted NetNut, a residential proxy network that gave access to millions of compromised Android devices, including smart TVs and…
Indian Govt Bans Apps Being Misused to Stop E-Rickshaws Remotely
The Indian government has directed Google and Apple to take down three mobile applications, BAT-BMS, Lossigy, and Epoch-i-ion, after they were allegedly misused to remotely…
Fake Google Play Store Pages Use Trusted Brand Names to Push Gambling PWAs
Scammers are exploiting consumers’ trust in household and financial brands by deploying polished fake Google Play Store pages and social media ads that push Progressive…
New PamStealer Malware Targets macOS Users via Fake Maccy Clipboard App
Mac users searching for a clipboard manager are being redirected to a fake version of Maccy, an open-source app, in a campaign that installs a…
Organizations struggle to prioritize known cyber risks
Organizations collect more cyber risk data than ever, with many still struggling to build a unified view of their exposure. The latest State of Threat…
Verified X ad spreads Mac malware, while ConsentFix steals Microsoft accounts
Cybercriminals are finding new ways to trick people into compromising their own devices and accounts. One campaign used a sponsored ad on X to target…
North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets
Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to…
Interview: Oracle NetSuite’s Evan Goldberg – SaaSpocalypse averted
Evan Goldberg, executive vice-president of Oracle NetSuite, recently took a class in artificial intelligence (AI) at Stanford University to brush up on his knowledge, he…
In Other News: Canadian Hacker Jailed, Open Source Zero-Days, Two Sentenced for ATM Jackpotting
SecurityWeek’s cybersecurity news weekly roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broader…
JADEPUFFER: First End-to-End AI-Driven Ransomware Operation
JADEPUFFER: First End-to-End AI-Driven Ransomware Operation Pierluigi Paganini July 03, 2026 Sysdig reports an AI agent ran a full ransomware attack end-to-end, exploiting flaws, stealing…