An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite. A March 2021 firmware integration error routed seed generation to…
Feeding your vehicle’s symptoms or a mechanic’s quote to a bot can give deeper insights, but the automotive pros urge caution.
Balaji Srinivasan says he believes America is descending into anarchy. His solution: Build a new country from scratch.
A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE). […]
Microsoft says Russian hackers hijacked hotel Wi-Fi portals to spread malware and steal Microsoft 365 tokens from travelers. Microsoft Threat Intelligence disclosed CaptiveCrunch, a campaign it attributes to Storm-2945, an operational sub-cluster of Midnight Blizzard, the Russian SVR-linked group also known as APT29 and Cozy Bear. Since early May 2026, Storm-2945 has been manipulating DNS…
Adobe fixed a maximum severity vulnerability in Campaign Classic that could let attackers run code remotely without user interaction. Adobe has addressed a critical vulnerability, tracked as CVE-2026-48449 (CVSS score of 10.0), in Adobe Campaign Classic, the company’s enterprise marketing automation platform. The flaw is caused by incorrect authorization and could allow attackers to execute…
A three-part podcast series about how the rise of AI-generated content is warping our sense of what is real, and the dangers that presents.
Professional handcraft is the key to unlocking value from emerging technology and data, suggest Aston Martin Aramco F1 executives and partners.
KeySmart’s SmartCard (Gen 3) is perfect for Android and Apple users, and it’s 20% off with a ZDNET-exclusive code right now.
Investors are coming around to the idea that Big Tech spending on AI can make sense—as long as there is a cloud-computing business involved.
Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses. Adform detected the incident on July 27, 2026, removed the malicious code, notified affected clients, and reported it to authorities. Anyone who visited a site carrying the affected script on July 27 and…
These affordable gaming laptops were neck and neck in my testing, but one pulled ahead for me.
Most phishing campaigns rely on the fact that the victim is afraid to loose “something”: money, access to information, … Many brands have been impersonated by campaigns but I spotted some phishing emails that focus on AI services like ChatGPT. Yesterday, I found this email that was properly designed but also sent with a very…
Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-48449, carries a severity score of 10.0 on the CVSS scoring system. It has been described as a case of incorrect authorization that could…
A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, microphone audio, and keystrokes, Microsoft said in its latest report. Researchers track the operation as CaptiveCrunch and attribute it to Storm-2945. It assesses Storm-2945 to be an operational sub-cluster of…
Explore CISA’s latest SBOM guidance to see if it truly enhances software security or if it misses key risk management improvements.
Server DRAM contract prices jumped by around 90% in the March quarter, and TrendForcehttps://www.trendforce.com/presscenter/news/20260331-12995.html forecast another 58 to 63%…
iTWire TV interviews Neil Westhof, HP’s head of personal assistant category for Australia and New Zealand, about the launch of the HP Elite Board G1.
Finding it difficult to choose a suitable VPN service provider? Here’s a checklist for choosing VPN service. Virtual Private Networks, otherwise known as VPNs, are designated services used to spoof locations on the internet. They are mainly deployed to bypass geo-restrictions and access censored content on the web. There are numerous VPN service providers out…
Jacob Tsimerman won the biggest prize in math. Now he’s working on the most important problem of his career.
Bets on consumer chatbots and flashy side projects overshadowed AI coding opportunity, which rival Anthropic used to capture the lead.
OpenAI’s Hugging Face incident disclosure prompted Anthropic to review its own evaluations.
The attack chain begins with a spear-phishing email containing a link to an encrypted archive.
Bitsight researchers uncovered the operation by monitoring an expired domain used for factory backdoors and telemetry.
The Italian Senate’s EU Policies Committee approved a decree allowing the storage of facial biometric data from cameras in sensitive public areas for seven days.
The I-GRIP initiative connects law enforcement agencies across 196 countries with financial institutions to expedite the process of stopping fraudulent money transfers.
Researchers from four universities conducted a study pitting AI chatbots against human scammers in a simulation of “pig butchering” scams, a form of romance scam that escalates to fake cryptocurrency investments.
Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service providers. […]
The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages. […]
South Korea warned that nation-state actors are using phishing and compromised websites to silently infect citizens and businesses. South Korea agencies (The National Intelligence Service, the National Police Agency, the Korea Internet & Security Agency, and the Financial Security Institute) jointly published an advisory warning that a state-backed hacking group is actively targeting South Korean…
Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to visitors’ clipboards with ones controlled by an attacker. […]
Anthropic said its Claude-based security models gained unauthorized access to the sensitive production environments of three outside organizations during internal testing designed to measure the models’ offensive cyber capabilities. The events, which Anthropic revealed Thursday, are the second revelation in 10 days that AI models from the world’s wealthiest providers have trespassed into protected networks,…
AI is beginning to do more than find software vulnerabilities. Anthropic says its Claude Mythos Preview model has now contributed new techniques for analyzing the mathematics behind cryptographic systems. The model developed an improved attack against the post-quantum signature candidate HAWK and accelerated an existing line of attack against a seven-round version of AES-128, according…
President Donald Trump blamed Minnesota Friday for the cyberattacks its water systems have suffered in recent days, saying the state was “behind it.” Trump said the state being “incompetent” was the issue, but it wasn’t clear whom he thought actually conducted cyberattacks that U.S. investigators have attributed to Iran — if, perhaps, somehow Minnesota incompetently…
Apple’s iPhone and Mac businesses are generating record revenue, but worsening component constraints could limit shipments. Apple reported its strongest June quarter on record, with revenue rising 16% year over year to $109.4 billion and earnings per share reaching $2.02. The biggest drivers were the iPhone and Mac businesses, which both posted record June-quarter sales.…
AI-powered managed crowdsourced testing company Testlio announced Wednesday it has become the first and only crowdsourced testing platform currently listed on both the AWS Marketplace and Microsoft Marketplace, following a strong first half of 2026. The company reported 55% year-over-year bookings growth during the first six months of the year, driven by expansion in payments…
Artificial intelligence is changing ransomware at a pace many enterprises are struggling to match. While most cybersecurity conversations continue to center on preventing attacks, the growing sophistication and speed of AI-enabled ransomware is forcing organizations, and the channel partners that support them, to rethink cyber resilience from the standpoint of recovery. AI expands the ransomware…
Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access during cybersecurity evaluations.
Cybersecurity vendor Coro is expanding its EMEA partner footprint, adding distribution relationships and recruiting MSPs and VARs as European customers seek simpler security platforms, greater automation, and more control over where their data is stored. Ingo Schaefer, vice president of sales for EMEA at Coro, said persistent cybersecurity talent shortages and tighter budgets are pushing…
Identity systems sit at the center of enterprise security, but they are also one of the first places attackers look when launching ransomware and other disruptive cyberattacks. In this eSecurityPlanet video podcast, Marty Momdjian, Global Field CTO at Semperis, joins the conversation to discuss how attackers compromise Active Directory and Entra ID, what warning signs…
Identity systems sit at the center of enterprise security, but they are also one of the first places attackers look when launching ransomware and other disruptive cyberattacks. In this eSecurityPlanet video podcast, Marty Momdjian, General Manager, Ready1 & Strategic Initiatives at Semperis, joins the conversation to discuss how attackers compromise Active Directory and Entra ID,…
Today, we’re releasing the HIPAA Security Rule on AWS: Technical Safeguards Implementation and Readiness Guidance. This helps covered entities and business associates configure, implement, and evidence compliance with the HIPAA Security Rule Technical Safeguard requirements (45 CFR §164.312) when building healthcare workloads on AWS. The HIPAA Security Rule’s Technical Safeguards (§164.312) define five standards and…
Hims & Hers patients may have shared more than symptoms and treatment concerns when they sought care online. The Federal Trade Commission (FTC) has filed a lawsuit against Hims & Hers, alleging that the company allowed advertisers to collect and share sensitive patient information while telling customers their health information would remain confidential. The complaint,…
OpenAI says it has reduced the price of two GPT-5.6 models, cutting Luna’s API price by 80% and Terra’s by 20% as it works to make its models more efficient. […]
A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab Republic, since January 2025. These targeted organizations operate across several sectors, such as healthcare, research, government offices,
Google has used AI tools to detect and patch 1,072 vulnerabilities in versions 149 and 150 of its Chrome browser, the company announced in a blog post. That’s more vulnerabilities patched than in the previous 23 updates combined, according to Bleeping Computer. One vulnerability detected by AI had been present in Chrome for 13 years…
A couple-dozen changes to SBOM fields will make them more comprehensive, but some argue that the framework lacks real risk-management improvements.
Microsoft has quietly pushed out a new OneDrive Photos app to Windows 11 users. What’s it all about?
In the U.S., regulation can protect incumbents while discouraging entrepreneurs. China gives fast-moving startups room to grow before exerting state control.
What you’ll get back depends on how much you spent – but don’t expect much.
A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement. […]
South Korea’s Personal Information Protection Commission (PIPC) has fined KT Corp. 53.9 billion won ($37.4 million) after finding that weak network access controls allowed hackers to expose the personal information of 16,647 mobile customers. The regulator said hackers accessed KT’s wireless network through an unauthorized femtocell, a small base station used to extend mobile coverage,…
OWASP NHI guidance highlights detection gaps as the biggest security challenge.
Brinks Home is investigating a cybersecurity incident that attackers claim began with a Microsoft Entra voice phishing campaign targeting employee identities. The company confirmed an attacker has threatened to publicly release information allegedly stolen from its systems. “The party responsible for this situation has threatened to release information it claims to have taken. We are…
Disclosure: This article was created in collaboration with Status Labs.
Apple’s outgoing CEO, Tim Cook, bade an emotional farewell to analysts and shareholders on Thursday as the company announced a record June quarter. His successor, John Ternus, takes over at the beginning of September with the company seemingly in solid shape. The results were impressive, though some worrying challenges were confirmed. Apple managed to set a new…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in the water and wastewater systems sector. […]
Worried about your personal AI chats being exposed? Here’s how to tighten your privacy across several of the major chatbots.
Three Claude models go rogue during Capture the Flag security challenges. Here’s the trail of damage each left behind.
Behind the rogue agent’s attack on Hugging Face was a particular sequence of human decisions. We all need to pay better attention – because threat actors are learning, too.
LinkedIn’s ‘Seems like AI slop’ button is coming to users, and its existence signals a changing perspective on AI infiltrating digital communities.
Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted archive, which holds a Windows Shortcut (LNK). Executing the file triggers a multi-stage chain that
Walking around Dubai, it’s hard to believe a war is still going on in neighboring countries. No missiles have struck the city, and it was clear during a recent visit that local residents are keeping to their routines. The biggest public worry, as it has been in many parts of the world, is the extreme…
Over at Best Buy, the 2024 Moto G Play dropped down to $100, making this Android one of the budget buys around.
Fortnite scam pages like the ones below appear by the dozen every day, recycled endlessly under different names and designs. One version promises $50 from a fake superhero collaboration. Another claims it can calculate what your locker is worth. Both lead to the same destination: a fake Epic Games login page designed to steal your…
As newspapers move online, the buildings that once housed their printing presses need new occupants. The Minnesota Star Tribune has just sold its old printing plant on the edge of Minneapolis to the aptly named property developer Legacy Investing, which plans to create a new data center there. has found the ideal way to bring…
It’s a sign of the times: Security conference DefCon has added smart glasses to its list of banned audio- or video-recording devices. The organizers have said that, with no consistent way to understand whether smart glasses are recording or not, they have taken the step to ban them in their entirety on the grounds that…
It’s a sign of the times: Security conference DefCon has added smart glasses to its list of banned audio- or video-recording devices. The organizers have said that, with no consistent way to understand whether smart glasses are recording or not, they have taken the step to ban them in their entirety on the grounds that…
Here’s why in a world where AI models can hack other companies, we have to outreason our adversaries.
Software supply chain attacks are evolving beyond compromised software packages into attacks targeting the people, identities, and workflows used to build and distribute software. Intel 471’s report, Poisoned Trust: How Supply Chain Attacks Weaponize Developer Ecosystems, found that threat actors are increasingly targeting developer accounts, CI/CD pipelines, repositories, IDEs, and publishing infrastructure. By compromising these…
We tested the best laptop cooling pads to keep your device running smooth with powerful cooling, RGB lights, high RPM and more.
ZDNET’s latest Data Byte highlights the Netgear Orbi 370’s performance in our lab testing. Here’s what the numbers say.
Discover how to apply Zero Trust principles to secure AI adoption, manage agentic risk, and mitigate the threats of frontier AI models.
A Chinese-speaking threat actor has been using DeepSeek’s AI models to orchestrate cyber-attacks targeting Asian organizations
Managed detection and response services give organizations access to 24/7 threat monitoring, investigation, and incident response without requiring them to build a complete security operations center. They combine security technology, automation, and human expertise to help organizations identify and contain threats more efficiently. We evaluated five leading MDR providers for 2026 based on threat coverage,…
Bitsight says some cheap Android TV boxes have shipped with apps that rewrite their hardware identity to mimic Samsung, Huawei, Xiaomi, or Vivo phones, then click ads on websites run by the same operators. Researchers named the operation Fuyao and attributed it to Zhejiang Fengwo IoT Technology Co., Ltd., a mainland China company founded in…
OpenAI models going rogue, the first documented agentic ransomware operation, and an emergent AI-driven supply chain threat made for a packed July roundup
Organizations are rapidly embedding artificial intelligence (AI) into enterprise resource planning (ERP) systems, but many cybersecurity leaders remain unconvinced that their organizations are prepared to secure these environments. According to the 2026 Onapsis State of AI, Security, and ERP report, AI adoption is accelerating across SAP, Oracle, and Salesforce environments even as concerns about security,…
This week’s cybersecurity landscape was defined by attacks against critical infrastructure, actively exploited enterprise flaws, rapidly expanding AI exposure, and major compromises involving healthcare, energy, financial, and retail data. At the same time, AI agents demonstrated how quickly vulnerabilities can be discovered and weaponized, reinforcing the need for faster patching, stronger identity controls, continuous asset…
Attackers are adapting established techniques to AI platforms, emerging technologies, and changing user behavior. ESET’s new threat report examines the rise of malicious AI skills, AI-assisted malware, ClickFix attacks, record quishing activity, and ransomware tools designed to disable security software. […]
The most valuable move any security team can make is building a certificate and key inventory.
Google is creating a new naming scheme for the bad actors behind cybersecurity threats, hoping that it will help to standardize the way that attacks are reported. Spoiler: It won’t. Security researchers use these naming schemes so that they can attribute attacks without necessarily knowing exactly who is behind them. Google had naming schemes in…
Google says AI found and helped fix 1,072 Chrome security bugs in two releases, dramatically accelerating vulnerability detection and patching Google’s Chrome Security team published a detailed account of how AI models have transformed their vulnerability management pipeline, and the headline figure is difficult to dismiss: in the last two Chrome releases alone, the team…
New York Attorney General Letitia James’s office said Kalshi’s prediction market meets the legal definition of gambling because users are betting on events outside of their control in a game of chance.
Broadcom has addresses five vulnerabilities in its VMware product range, three of which have been accorded a “critical” rating. The affected products are: VMware ESX, VMware vCenter, VMware Workstation, VMware Fusion, VMware Cloud Foundation, VMware vSphere Foundation, VMware Telco Cloud Platform, and VMware Telco Cloud Infrastructure CVE-206-59309 affects the VMware Directory Service. According to Broadcom,…
When a fraudulent transaction occurs, law enforcement agencies must work quickly to halt payments before cybercriminals cash out.
A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to WordPress sites.
Cybercrime has become a commercialized ecosystem where criminals can buy or rent nearly every capability needed to launch sophisticated attacks. These services provide anonymity, plausible deniability, and access to short-lived infrastructure that is difficult to detect, attribute, and disrupt, enabling low-skilled actors to operate at scale, according to the Infoblox 2026 Threat Landscape Report. “Cybercrime…
The organization behind Team USA’s Olympic/Paralympic fencing teams has automated identity verification to handle growing membership, cutting manual review time while ensuring athletes compete in the correct categories.
Microsoft has had a narrow escape from total embarrassment: A security company uncovered a critical vulnerability that could have compromised all Azure Cosmos DB databases — both those of customers and Microsoft’s own. Google subsidiary Wiz found a flaw in the database’s Gremlin API, usually used for storing and managing property graph data. If bad…
Google on Thursday announced that it fixed a whopping 1,072 security bugs in Chrome versions 149 and 150, surpassing the total number of flaws the company fixed across the prior 23 milestones combined. Both versions were released last month. In its latest patch for Chrome 151, released Wednesday, the tech giant resolved 370 flaws, out…
An AI-assisted audit found 29 flaws in GlobaLeaks, showing LLMs make large-scale code reviews faster, cheaper, and accessible. GlobaLeaks, a mature whistleblowing platform that had already undergone six independent professional audits over the past thirteen years, was subjected to an LLM-assisted security review that cost roughly USD 3,140 in API calls. The review identified 29…
A security investigation into inexpensive Android TV boxes led researchers to an ad fraud operation that had remained unnoticed for several years. Fuyao apps ecosystem (Source: Bitsight) According to Bitsight, the operation, named Fuyao, uses preinstalled Android apps, device identity spoofing, AI-generated websites, and residential proxy services to generate advertising revenue without device owners’ knowledge.…
XRP volatility drives faster crypto trading as AI tools gain traction, while phishing, exchange attacks and automation risks test digital asset safeguards.
An academic study has disclosed a “widespread class” of security vulnerabilities impacting 4G and 5G core networks that, if successfully exploited, could trigger denial-of-service (DoS) attacks and even session hijacking, allowing an attacker to seize control of a user’s network session. The findings have been released by a group of researchers from Singapore’s Nanyang Technological…
According to the newly-published study, phishing and social engineering are becoming more expensive to recover from, trickier to detect, and increasingly augmented by artificial intelligence. Read more in my article on the Fortra blog.
