Real emails, hijacked payments: Two H1 2026 attack chains
Gen's H1 2026 Threat Report examines two separate attack chains. One used compromised business inboxes and browser manipulation in a banking-malware campaign, while the other used clipboard hijacking to redirect cryptocurrency payments.
๐๏ธ [Bleepingcomputer] https://link.is.it/PVODpu
Gen's H1 2026 Threat Report examines two separate attack chains. One used compromised business inboxes and browser manipulation in a banking-malware campaign, while the other used clipboard hijacking to redirect cryptocurrency payments.
๐๏ธ [Bleepingcomputer] https://link.is.it/PVODpu
Levi Strauss says hackers breached employee computers, accessed corporate data
Intruders exfiltrated certain corporate information after gaining access to three company-issued computers through a social engineering attack, Levi Strauss reported.
๐๏ธ [Therecord] https://link.is.it/grMKiB
Intruders exfiltrated certain corporate information after gaining access to three company-issued computers through a social engineering attack, Levi Strauss reported.
๐๏ธ [Therecord] https://link.is.it/grMKiB
Levi Strauss & Co. says hackers stole corporate data in cyberattack
Levi Strauss & Co. (Levi's) says that hackers used social engineering on three of its employees to gain access to and steal corporate data stored on their machines.
๐๏ธ [Bleepingcomputer] https://link.is.it/V7vjYc
Levi Strauss & Co. (Levi's) says that hackers used social engineering on three of its employees to gain access to and steal corporate data stored on their machines.
๐๏ธ [Bleepingcomputer] https://link.is.it/V7vjYc
Chinese AI model Kimi escaped its cybersecurity testing environment, researchers say
In the Kimi test, the sandbox designed to contain the experiment was not properly configured.
๐๏ธ [Techcrunch] https://link.is.it/SClbmc
In the Kimi test, the sandbox designed to contain the experiment was not properly configured.
๐๏ธ [Techcrunch] https://link.is.it/SClbmc
Irregular, firm behind AI hacking incidents, won't say if there were more
A spokesperson said Irregularโs investigation into what happened with Anthropic, OpenAI and Meta's AI models was ongoing and that they could not โgo into further details.โ
๐๏ธ [Therecord] https://link.is.it/NYIXeX
A spokesperson said Irregularโs investigation into what happened with Anthropic, OpenAI and Meta's AI models was ongoing and that they could not โgo into further details.โ
๐๏ธ [Therecord] https://link.is.it/NYIXeX
Sintesi riepilogativa delle campagne malevole nella settimana del 1 โ 7 agosto
In questa settimana, il CERT-AGID ha riscontrato ed analizzato, nello scenario italiano di suo riferimento un totale di 135 campagne malevole, di cui 97 con obiettivi italiani e 38 generiche che hanno comunque interessato lโItalia, mettendo a disposizione dei suoi enti accreditati i relativi 1264 indicatori di compromissione (IoC) individuati.
๐๏ธ [Cert-agid] https://link.is.it/6XJdaq
In questa settimana, il CERT-AGID ha riscontrato ed analizzato, nello scenario italiano di suo riferimento un totale di 135 campagne malevole, di cui 97 con obiettivi italiani e 38 generiche che hanno comunque interessato lโItalia, mettendo a disposizione dei suoi enti accreditati i relativi 1264 indicatori di compromissione (IoC) individuati.
๐๏ธ [Cert-agid] https://link.is.it/6XJdaq
Military device manufacturer discloses cyber incident to SEC
IEH Corporation โ which produces specialized products used in military satellites, missiles and fighter jets โ said it discovered a cyberattack on Tuesday and immediately tried to contain it.
๐๏ธ [Therecord] https://link.is.it/oqvhEW
IEH Corporation โ which produces specialized products used in military satellites, missiles and fighter jets โ said it discovered a cyberattack on Tuesday and immediately tried to contain it.
๐๏ธ [Therecord] https://link.is.it/oqvhEW
New Mexico judge orders Meta to pay $567 million in kids online safety case
The money will be used to create a fund to mitigate social media harms, including by carving out $420 million for treatment for New Mexico youth who have been hurt on the platforms.
๐๏ธ [Therecord] https://link.is.it/KLBMAN
The money will be used to create a fund to mitigate social media harms, including by carving out $420 million for treatment for New Mexico youth who have been hurt on the platforms.
๐๏ธ [Therecord] https://link.is.it/KLBMAN
Computer maker Framework notifies โall customersโ of a data breach
Framework told "all" of its customers that hackers accessed their names, email addresses, phone numbers, and physical addresses in a data breach.
๐๏ธ [Techcrunch] https://link.is.it/bw7FXs
Framework told "all" of its customers that hackers accessed their names, email addresses, phone numbers, and physical addresses in a data breach.
๐๏ธ [Techcrunch] https://link.is.it/bw7FXs
Info di servizio: accesso agli approfondimenti tecnici
Cari lettori / amici / sostenitori, oltre alla creazione di contenuti tecnici (video, articoli, newsletter) sto sempre di piรน curando anche la forma di quello che condivido oltre che la qualitร e qโฆ
๐๏ธ [Roccosicilia] https://link.is.it/XJm1jA
Cari lettori / amici / sostenitori, oltre alla creazione di contenuti tecnici (video, articoli, newsletter) sto sempre di piรน curando anche la forma di quello che condivido oltre che la qualitร e qโฆ
๐๏ธ [Roccosicilia] https://link.is.it/XJm1jA
US cyber ambassador nominee Cassady confirmed in Senate
NTIA official Adam Cassady becomes the second person confirmed to be the State Department's ambassador-at-large for cyber policy.
๐๏ธ [Therecord] https://link.is.it/j23m2x
NTIA official Adam Cassady becomes the second person confirmed to be the State Department's ambassador-at-large for cyber policy.
๐๏ธ [Therecord] https://link.is.it/j23m2x
Water utilities group partners with DEF CON offshoot for Water Watch Center
The National Rural Water Association and a group of cybersecurity experts have formed a program to help cash-strapped utilities face the increase in threats to their systems.
๐๏ธ [Therecord] https://link.is.it/n3DaEd
The National Rural Water Association and a group of cybersecurity experts have formed a program to help cash-strapped utilities face the increase in threats to their systems.
๐๏ธ [Therecord] https://link.is.it/n3DaEd
Upgrading How You Sign In to Your Sucuri Account
Get ready for the Sucuri login upgrade. Find out how the transition to a new authentication platform affects your login experience.
๐๏ธ [Sucuri] https://link.is.it/hx820w
Get ready for the Sucuri login upgrade. Find out how the transition to a new authentication platform affects your login experience.
๐๏ธ [Sucuri] https://link.is.it/hx820w
Metabase SQLi zero-day exploited in customer data-theft attacks
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally.
๐๏ธ [Bleepingcomputer] https://link.is.it/PSQoN3
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally.
๐๏ธ [Bleepingcomputer] https://link.is.it/PSQoN3
ื ืคืชืื ืื ื 3: ืกืคืจ ืืืืคืื ืื ืฉื ื ืคืชืื ืืืจืืืื ืืฆืืืขืช ืฉืืืืื ืืืื ืืืืจืืช ืฉืื ืืจืื ืืืืกืื ืงืืื ื ืืืืืช
ื ืคืชืื ืื ื 3: ืกืคืจ ืืืืคืื ืื ืฉื ื ืคืชืื ืืืจืืืื ืืฆืืืขืช ืฉืืืืื ืืืื ืืืืจืืช ืฉืื ืืจืื ืืืืกืื ืงืืื ื ืืืืืช ืืืื ืกืคืจ ืืืืคืื ืื ืฉื ื ืคืชืื ืื ื. ืืืืืื ืืืืื ื ืฉื ืฉืืืื ืืืืกืื ืื ืืืชื ืฉืืคืืช ืขืืื ืืกืฃ, ืืืืฆื ืืื ืืืื ืื ืืื ืืขื ืื ืืืฉืื. ืืื ืืกืืจืช ืื ืกืงืจืื ืืืืืคืื
๐๏ธ [Ednakarnaval] https://link.is.it/czaF2F
ื ืคืชืื ืื ื 3: ืกืคืจ ืืืืคืื ืื ืฉื ื ืคืชืื ืืืจืืืื ืืฆืืืขืช ืฉืืืืื ืืืื ืืืืจืืช ืฉืื ืืจืื ืืืืกืื ืงืืื ื ืืืืืช ืืืื ืกืคืจ ืืืืคืื ืื ืฉื ื ืคืชืื ืื ื. ืืืืืื ืืืืื ื ืฉื ืฉืืืื ืืืืกืื ืื ืืืชื ืฉืืคืืช ืขืืื ืืกืฃ, ืืืืฆื ืืื ืืืื ืื ืืื ืืขื ืื ืืืฉืื. ืืื ืืกืืจืช ืื ืกืงืจืื ืืืืืคืื
๐๏ธ [Ednakarnaval] https://link.is.it/czaF2F
Unlimited Technology Systems breach impacts 3.8 million people
Healthcare software company Unlimited Technology Systems reported that more than 3.8 million people were impacted by a data breach incident that occurred in October 2025.
๐๏ธ [Bleepingcomputer] https://link.is.it/yPrZRQ
Healthcare software company Unlimited Technology Systems reported that more than 3.8 million people were impacted by a data breach incident that occurred in October 2025.
๐๏ธ [Bleepingcomputer] https://link.is.it/yPrZRQ
XSS2Shell: nuova vulnerabilitร nel core di WordPress puรฒ portare allโesecuzione di codice remoto
La compromissione completa non avviene attraverso la sola XSS. La catena dimostrata richiede che un amministratore WordPress giร autenticato interagisca con una pagina predisposta dall'attaccante. In tale scenario, l'attaccante puรฒ sfruttare la sessione dell'amministratore fino ad ottenere una Application Password e, successivamente, utilizzarne i privilegi per arrivare al caricamento di codice PHP sul sistema.
Il CERT-AGID invita le PA a verificare la versione effettivamente installata e ad applicare tempestivamente gli aggiornamenti di sicurezza disponibili.
๐๏ธ [Cert-agid] https://link.is.it/i80ZRF
La compromissione completa non avviene attraverso la sola XSS. La catena dimostrata richiede che un amministratore WordPress giร autenticato interagisca con una pagina predisposta dall'attaccante. In tale scenario, l'attaccante puรฒ sfruttare la sessione dell'amministratore fino ad ottenere una Application Password e, successivamente, utilizzarne i privilegi per arrivare al caricamento di codice PHP sul sistema.
Il CERT-AGID invita le PA a verificare la versione effettivamente installata e ad applicare tempestivamente gli aggiornamenti di sicurezza disponibili.
๐๏ธ [Cert-agid] https://link.is.it/i80ZRF
Brinks Home - 732,162 breached accounts
In July 2026, Brinks Home was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from the company, including 732k unique email addresses and other personal information relating to leads, customers and Brinks staff such as name, phone numbers and physical addresses. The data also included purchases from Brinks along with partial credit card data (last 4 digits, card type and expiry). In Brinks' disclosure notice, they acknowledged the incident and risk of disclosure, and advised that they would notify impacted parties "consistent with applicable law".
๐๏ธ [Haveibeenpwned] https://link.is.it/ypKZVD
In July 2026, Brinks Home was targeted in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data they alleged was taken from the company, including 732k unique email addresses and other personal information relating to leads, customers and Brinks staff such as name, phone numbers and physical addresses. The data also included purchases from Brinks along with partial credit card data (last 4 digits, card type and expiry). In Brinks' disclosure notice, they acknowledged the incident and risk of disclosure, and advised that they would notify impacted parties "consistent with applicable law".
๐๏ธ [Haveibeenpwned] https://link.is.it/ypKZVD
Hackers breach TrueConf to trojanize client installers with backdoors
The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace client installers with malicious versions that deliver backdoors.
๐๏ธ [Bleepingcomputer] https://link.is.it/xyiG7a
The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace client installers with malicious versions that deliver backdoors.
๐๏ธ [Bleepingcomputer] https://link.is.it/xyiG7a
Googleโs top hacker hunter explains why hacking groups get codenames
Google recently changed how it refers and assigns names to hacking groups. TechCrunch spoke with one of the worldโs foremost experts on tracking hackers to understand why companies give hackers codenames.
๐๏ธ [Techcrunch] https://link.is.it/jEjNvY
Google recently changed how it refers and assigns names to hacking groups. TechCrunch spoke with one of the worldโs foremost experts on tracking hackers to understand why companies give hackers codenames.
๐๏ธ [Techcrunch] https://link.is.it/jEjNvY
Alcon - 218,395 breached accounts
In August 2026, the Alcon eye care company was named in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly sourced from Alcon containing 218k unique email addresses along with other largely corporate B2B contact fields, including name, phone number and physical address.
๐๏ธ [Haveibeenpwned] https://link.is.it/Gr2r2Z
In August 2026, the Alcon eye care company was named in a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data allegedly sourced from Alcon containing 218k unique email addresses along with other largely corporate B2B contact fields, including name, phone number and physical address.
๐๏ธ [Haveibeenpwned] https://link.is.it/Gr2r2Z