Browsing: Attackers

Cyber attackers breached thousands of children’s data through a test account with a “very weak” password, the data watchdog has revealed as a stark warning to others.

The China-nexus group behind Warlock ransomware is still breaking into organizations through Microsoft SharePoint vulnerabilities, a tactic that brought it to prominence a year ago. In the past two months, the group, which Symantec tracks as Longlegs (aka Storm-2603), attacked at least four organizations in Portuguese- and Spanish-speaking countries across Europe, Africa, and Latin America.…

Security teams used to have some breathing room after a vulnerability was disclosed. It was never enough, but there was at least a window between the publication of a CVE and the first exploits in the wild. That window has now moved into negative territory.

AI assistants, agent skills and open–chain targets for cybercriminals, according to new frontline research from Mandiant

Cisco Talos says three separate threat groups are exploiting two recently patched Secure Firewall Management Center (FMC) flaws. The main target is CVE-2026-20079, a critical authentication bypass that lets unauthenticated attackers remotely bypass security controls, run scripts and potentially gain root access. Attackers also exploit CVE-2026-20316 to access sensitive data through a low-privilege account. The…

Google has warned that cyber attackers are moving from simple AI prompting to more autonomous, agent-based operations, according to research from Google Threat Intelligence Group.

Mid-sized companies accounted for 73% of publicly disclosed ransomware and data-extortion incidents with known revenue in North America and Europe between January 2023 and June 2026

AI tools are being used by cyber attackers to write malicious code, build tools that harvest credentials, search compromised networks, identify valuable business information, manage technical infrastructure and generate commands during intrusions.