Vishing Extortion Group UNC6671 Rebrands After Making Millions
UNC6671, an extortion group engaging in tailored IT helpdesk voice phishing (vishing), has rebranded and diversified its operations over the past several months, Google Threat…
Latest Cybersecurity News — Page 40
View all →
Meta Ordered to Pay $567 Million Over Child Safety Failures in New Mexico Case
Meta Ordered to Pay $567 Million Over Child Safety Failures in New Mexico Case Pierluigi Paganini August 07, 2026 Meta was ordered to pay $567M…
AI firms know policymakers won’t ‘let you make a Terminator factory,’ DHS official says
Leading AI companies have learned important lessons from recent incidents, the official said, and regulation isn’t necessary to preserve those lessons. Source link
China’s Kimi K3 AI model escapes isolated sandbox during security test: researchers
China’s top open-weight AI model Kimi K3 broke out of its isolated test environment during a cybersecurity evaluation, according to US security researchers, following similar…
Python package security in 2026
AI and ML environments blend development, research, cloud infrastructure, data access, model publishing and automation inside the same workspace. A compromised Python package in a…
Give any website a WebMCP interface
Today we are launching a developer preview of WebMCP on Cloudflare. Switch it on and browser agents can start working with your site, with no…
Hedge fund cyberattacks tied to BlackFile-linked UNC6671 extortion group
Update: Added statement from Falcon extortion gang below. A recent wave of cyberattacks targeting hedge funds, private-equity firms, and other financial organizations has been linked…
UNC6671 Automates Microsoft 365 Data Theft After Hijacking Employee Sessions
UNC6671 is carrying out data theft campaigns that begin with a phone call. The group poses as an IT helpdesk, claiming an urgent security migration…
Enterprise Java Vulnerabilities Enable Pre-Auth RCE in Bonita BPM and Apache OFBiz
Security research presented at Black Hat 2026 has identified 12 vulnerabilities across four enterprise Java platforms, including two critical pre-authentication remote code execution (RCE) chains…
What the first year of EU AI Act transparency enforcement could look like
In this Help Net Security interview, Edwin Weijdema, Field CTO at Veeam, answers questions on Article 50 of the EU AI Act and what the…
TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign
Ravie LakshmananAug 07, 2026Cybercrime / Vulnerability A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene…
Updoc Data Breach Exposes Patient Details In Australia
The Updoc data breach has raised fresh concerns about cybersecurity in Australia’s healthcare sector after the telehealth provider confirmed that an unauthorized third party may have accessed customer contact information…