ICO Cautions Healthcare Worker After Princess of Wales Incident
Hospital insider escapes criminal prosecution after attempting to sell royal’s medical records
Aggregator
Hackers Abuse Claude.ai Shared Chat Feature to Host the ClickFix Social Engineering Instructions
2 weeks 2 days ago
Hackers are increasingly exploiting trusted AI platforms to deliver sophisticated social engineering attacks, with a recent campaign abusing Claude.ai’s shared chat feature to host malicious ClickFix instructions. According to TrendAI Research, attackers deployed 106 unique malicious hostnames across six campaign waves within seven weeks, continuously rotating infrastructure and testing different AI-themed lures to maximize effectiveness. […]
The post Hackers Abuse Claude.ai Shared Chat Feature to Host the ClickFix Social Engineering Instructions appeared first on Cyber Security News.
Abinaya
Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2
2 weeks 2 days ago
Microsoft has disclosed details of a Windows-based cryptocurrency clipper campaign codenamed CryptoBandits that has
targeted users since February 2026 with clipboard-intercepting malware with self-spreading capabilities and using the Tor anonymity network to hide communication.
"The clipper in this campaign relies on Windows Script Host and ActiveX-driven logic to launch a bundled Tor proxy and
The Hacker News
Critical Cisco ISE Vulnerability Allows Attacker to Execute Malicious Code Remotely
2 weeks 2 days ago
Cisco has disclosed critical security vulnerabilities in its Identity Services Engine (ISE) that could allow attackers to execute malicious code remotely and access sensitive data, posing a significant risk to enterprise networks. The vulnerabilities, tracked as CVE-2026-20181 and CVE-2026-20190, were published under advisory ID cisco-sa-ise-multi-G5WP8vv on June 17, 2026. With a CVSS score of 9.1, […]
The post Critical Cisco ISE Vulnerability Allows Attacker to Execute Malicious Code Remotely appeared first on Cyber Security News.
Abinaya
Akira
2 weeks 2 days ago
You must login to view this content
cohenido
Law enforcement hits SocGholish: 106 servers down, 15,000 sites cleaned
2 weeks 2 days ago
SocGholish, an operation that’s been delivering malware to users via fake software updates, has suffered a major blow: the international law enforcement coalition behind Operation Endgame has taken down 106 of its servers and domains, and cleaned up nearly 15,000 websites compromised to serve their malicious payloads. The result of this most recent multinational law enforcement action was announced today by the Dutch National Police and on the operation’s website. How SocGholish infects victims More … More →
The post Law enforcement hits SocGholish: 106 servers down, 15,000 sites cleaned appeared first on Help Net Security.
Zeljka Zorz
Australian sugar producer works to restore operations as ransomware group claims attack
2 weeks 2 days ago
Mackay Sugar said it was "working urgently" to verify claims that a highly active ransomware group was behind a cyberattack that shut down harvesting and milling operations.
Klue OAuth breach linked to 'Icarus' Salesforce data theft attacks
2 weeks 2 days ago
Market intelligence platform Klue suffered a OAuth breach that enabled the "Icarus" threat actors to steal Salesforce CRM data from multiple organizations in an ongoing extortion campaign. [...]
Lawrence Abrams
地球的海洋来自何处？
2 weeks 2 days ago
地球之水来自何处？科学家其实并不真正了解。水的来源有多种假说，其中最主流的是彗星说——撞击地球的彗星将水带到了地球；此外还有小行星说——撞击地球的小行星将水带到了地球，以及水由地球自身创造说。1986 年 Giotto 探测器对哈雷彗星的观测数据基本上否定了彗星假说，因为地球水的化学特性与彗星水完全不同。后续对 Hale-Bopp 彗星以及 Rosetta 探测器对 Churyumov-Gerasimenko 彗星的观测也都证实彗星之水与地球之水截然不同。那么地球之水是否可能来自小行星？科学家发现小行星上的惰性元素比例与地球也存在差异。那么地球上的海洋是否主要是由它自身形成的？早期地球的岩浆海洋富含氧气，而大气富含氢气，但氢气和氧气并不会自然结合。过去几年科学家做了一系列实验探索早期地球环境氢气和氧气是否能发生反应形成水。实验证实，地球上至少有一部分水能靠自身形成，但是否能形成今天覆盖整个地球的海洋，还无法下定论。
【资料】美国政府持续在此领域资助中国，显示该领域中美合作展现出较强韧性
2 weeks 2 days ago
尽管中美关系波动，但疾控合作展现出较强韧性——2016年签署长期MOU，2022年仍举行线上主任年会，2024年启动延续至2029年的新项目，显示双方仍将公共卫生安全视为共同利益领域。
INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023
2 weeks 2 days ago
Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to one of the most prolific cybercrime groups in 2026, claiming no less than 830 victims since August 2023.
"The disruption of LockBit and the shutdown of BlackCat created opportunities for INC to expand as affiliates migrated to alternative ransomware operations," Acronis
The Hacker News
F5 Patches Critical NGINX Vulnerabilities Enabling Unauthenticated Code Execution
2 weeks 2 days ago
F5 released emergency updates for critical NGINX flaws (CVE-2026-42530, CVE-2026-42055) that could enable unauthenticated code execution. F5 has issued out-of-band patches for multiple NGINX vulnerabilities, including two critical flaws, respectively tracked as CVE-2026-42530 and CVE-2026-42055 (CVSS 9.2). The bugs affect HTTP modules and can be exploited remotely without authentication to trigger memory corruption, potentially causing […]
Pierluigi Paganini
Никому не известный стартап грозится унизить чипы Nvidia сразу по двум фронтам: скорости и энергии
2 weeks 2 days ago
Tensordyne бросила вызов гиганту, заменив умножение на сложение — и пока никто не может проверить, врёт она или нет.
The Scripts on Your Checkout Page Are Now a PCI DSS Problem
2 weeks 2 days ago
An independent PCI assessor tested Reflectiz against the new PCI DSS rules. Here is the verdict: See the full QSA assessment here →
When a customer types their card number into your checkout, their browser is running far more than your code. Analytics tags, a tag manager, a support widget, a payment iframe: a modern checkout loads dozens of third-party scripts, and any one of them can be turned
The Hacker News
AL26-014 – FortiBleed leak of thousands of compromised credentials impacting Fortinet devices
2 weeks 2 days ago
Canadian Centre for Cyber Security
5 reasons Microsoft 365 backup isn’t enough for business data protection
2 weeks 2 days ago
Microsoft 365 helps keep services running, but protecting and recovering business data remains your responsibility. Acronis breaks down five gaps organizations should consider when evaluating Microsoft 365 data protection. [...]
Sponsored by Acronis
DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic
2 weeks 2 days ago
Threat actors associated with the DragonForce ransomware have been observed using a custom Go-based remote access trojan (RAT) called Backdoor.Turn to conceal command-and-control (C2) traffic inside Microsoft Teams relay infrastructure.
According to findings from Broadcom-owned Symantec and Carbon Black, the backdoor was deployed against a major U.S. services firm. The name of the company was
The Hacker News
Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp
2 weeks 2 days ago
International law enforcement agencies cleaned nearly 15,000 malware-infected WordPress websites and took down more than 100 servers linked to the SocGholish botnet and the Evil Corp Russian cybercrime group. [...]
Sergiu Gatlan
Как заставить 500 человек оплачивать твою жизнь. Лайфхак от светлогорского кибергения закончился уголовным делом
2 weeks 2 days ago
В Беларуси поймали хитрого криптопредпринимателя.
CVE-2026-27510
2 weeks 2 days ago
Currently trending CVE - Hype Score: 7 - Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used with the Unitree Go2 Android application (com.unitree.doggo2), are vulnerable to remote code execution due to missing integrity protection and validation of user-created programmes. The Android application stores ...