Year-long Russian attacks infect users as soon as they look at an email.

New Dolphin X infostealer uses AI to identify high-value victims.

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs.

Europol flags 4,340 URLs for removal in 'The Com' crackdown.

Hackers use DNS poisoning on hotel Wi‑Fi to steal Microsoft 365 accounts.

Man gets six years for hacking 750 women's Snapchat accounts.

An Illinois man was sentenced on Tuesday to 76 months in prison and three years of supervised release for hacking the Snapchat accounts of over 750 women to steal nude photos, which he later traded or sold online.

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers.

In a newly released intelligence report, French authorities publicly identified the Russian organization they say has spent more than two decades conducting cyber espionage against French interests.

More unusually, they revealed where the operation is based, how it works and the specific military unit they believe is responsible.

Hackers Targeting US Water and Energy Control Systems.

Malicious sites use JavaScript to build malware in browser memory.

A large-scale cyberattack against IMCO, a supplier to the Israeli defense industry. Simultaneously, the group "Cyber Support Front" announced on LeakForum that it had gained access to 30 terabytes of data from the company and has released a portion of it.

According to the released information, the extracted data includes technical documents, production maps, contracts, internal correspondence, employee information, and data related to military projects and systems, including Iron Dome. A 5-gigabyte sample of this information has also been released as part of the data held by the group.

This leak also mentions access to information related to companies such as Rafael, Elbit, and Israel Aerospace Industries (IAI), as well as some military entities. The group has also claimed to have taken control of the IMCO company website and is publishing some of the information through it.

Nvidia, Microsoft, Meta, IBM, and several other major tech companies have issued a joint statement urging lawmakers to refrain from imposing premature restrictions on open-source AI models.

These companies believe that open-source models foster competition and innovation, and enable public scrutiny, vulnerability identification, and continuous security improvements.

The malware arrives in pieces. The victim’s browser puts it together.

SourTrade malvertising delivers a legitimate Bun runtime, malicious bytecode, and PE components separately, then uses the browser to build the final Windows executable with a different hash each session.

Australian energy provider Origin Energy disclosed a data breach impacting customer data.

A fake Microsoft Teams update deploys two legitimate RMM tools on the same Windows host.

Operation BlueDash installs Level RMM and ScreenConnect in parallel, apparently to retain remote access if one is removed.

Three previously unreported malware families were deployed in attacks targeting Middle East government entities.

TELESHIM hides C2 in Telegram traffic, while the final payload decrypts only on its intended machine.

Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack.

Nvidia and Tech Giants Launch AI Security Alliance.

Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware.