Sony Network Communications has confirmed a data breach affecting 2,585,481 customer records associated with its So-net and Plala internet service…
Banks are blocking AI agents from customer accounts
They cite security risks. But could keeping these tools out also protect banks’ profits?
Chinese National Extradited to Face Charges in $36.9 Million Cryptocurrency Fraud
A 44-year-old Chinese national has been brought to the United States from the Netherlands to answer federal charges tied to a cryptocurrency investment…
Syrian hacker who served Assad regime gets 42 months in US prison
Ahmad Umar Agha is best known for posting a fake Associated Press tweet claiming President Obama was injured in a White House bombing.
IDC MarketScape names Microsoft a Leader in the 2026 Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
IDC has named Microsoft a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises.
Chrome extensions with 13.4 million installs caught hijacking searches
A massive search-hijacking campaign involving 319 Chrome extensions with a combined 13.4 million reported installations redirected users’ searches through…
GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHub
The supply chain attack campaign’s shift toward developer endpoints and cloud access signals what could be next for the cybercrime outfit.
In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
Noteworthy stories that might have slipped under the radar: Iran eyed in military freezer hacks, Copenhagen University breach, AI-powered malware.
Binance’s $6.3bn heist: how one laptop opened the door to the biggest crypto theft in history
Binance, the world’s largest cryptocurrency exchange by trading volume, has confirmed that attackers stole an estimated $6.3 billion (around £4.7 billion)…
Your Ring Doorbell Could Miss Trick-or-Treaters — Check These Settings Before Halloween
Before trick-or-treaters arrive, check your Ring Doorbell motion zones to reduce unwanted alerts and make sure visitors are detected along your walkway.
Syrian Electronic Army hacker gets prison time for attacks on Western targets
Ahmad Umar Agha, known online as “Th3Pr0,” was sentenced Thursday in federal court in Virginia to 42 months behind bars for his role in a conspiracy that…
Top cybersecurity conferences to attend in 2027
AI, global conflict and supply chain security are likely to be top of mind at many of the year’s big events.
Politicians in U.S. and E.U. Say Targeted Ads Are a Security Risk
Politicians in Europe and the U.S. are speaking out against the use of advertising technology to infect targets with zero-click spyware.
Hackers Use Cursor and Claude AI to Automate Attacks in Aur0ra Ransomware Operations
The GOLD OGRE cybercrime group is using AI coding agents, including Cursor and Anthropic’s Claude, to automate intrusions for Aur0ra ransomware (Aurora).…
China-Linked Hackers Exploit PHP2Shell
Cybersecurity researchers have identified a campaign by China-linked threat actors who successfully compromised two servers at a US government-affiliated…
Genesys Hack Exposes Customer Data From Internal Systems
Genesys, a California-based provider of customer experience and call-center technology, has disclosed a cyberattack in which unauthorized actors accessed…
Tracking AI adoption in North Korean threat actor tradecraft
As Microsoft Threat Intelligence continues to track how threat actors operationalize AI to increase the speed and efficiency of attacks, we’ve identified…
Malicious Claude Code extension on Cursor planted SSH backdoors
A malicious version of Anthropic’s Claude Code VS Code extension was distributed through Cursor’s extension marketplace for approximately 11 hours on…
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data.
Warp Breach Exposes AI Agent Logs and Telemetry
Warp has disclosed a security incident involving a third party infrastructure vendor that exposed AI agent decision logs and user telemetry. Chief…
Ukrainian Hacker Sentenced for $100M Ransomware
A Ukrainian national has been sentenced to nearly six years in federal prison for his role in a global ransomware campaign that caused an estimated $100…
Moldova Probes Possible Foreign State Involvement in Major Cyberattack Exposing Government Data
The Moldovan authorities are looking into whether the large cyber attack, which caused sensitive personal data to be breached and dozens of state services…
Cisco open sources AI agent behavior detection tool
Cisco has open-sourced Project Quarry, a behavior detection engine designed to monitor AI agents and prevent security incidents by analyzing complete…
French Energy Giant ENGIE Hit by Data Breach, Customer Records Accessed Through Partner Platform
ENGIE, one of the world’s largest energy companies, has notified customers in France that an unauthorized third party accessed their personal data through…