Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution
A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least March...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTC
Ravie LakshmananSep 08, 2026Cryptocurrency / Vulnerability Whoever took nearly 4,000 bitcoin from the Liquid Network on Sunday, September 6, returned 3,400...
ChatGPT Flaw Let a Planted Prompt Send a Victim’s Gmail Data to Another Account
Check Point Research said in a report published today that a single instruction planted in a ChatGPT conversation could cause ChatGPT to...
Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours
Threat actors are continuing to leverage artificial intelligence (AI) to streamline their operations, with one financially motivated hacking group employing...
WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls
Swati KhandelwalSep 08, 2026Vulnerability / Mobile Security Researchers at the security firm Calif have built a worm that takes over...
This $30 Tool Helps You Spot Scams Before You Click
TL;DR: Be savvy about spam with this lifetime subscription to IsThisSpam Ultimate Personal Plan, which is on sale now for...
Meta Failed to Catch Hundreds of AI Child Abuse Ads. Some Included Images of Real Kids
Editor’s note: This article contains descriptions of imagery depicting child sexual abuse. Reader discretion is strongly advised.Early last month, Meta...
Massive Vietnam-Linked APIS Database Exposes Passport and Flight Data
Massive Vietnam-Linked APIS Database Exposes Passport and Flight Data Pierluigi Paganini September 08, 2026 An exposed Vietnam-linked APIS database contained...
North Korea-linked Hackers Hide a Backdoor Inside HAProxy
North Korea-linked Hackers Hide a Backdoor Inside HAProxy Pierluigi Paganini September 08, 2026 North Korea-linked hackers hid a backdoor inside...
IT Help Desk Impersonation Lets Hackers Bypass MFA
IT Help Desk Impersonation Lets Hackers Bypass MFA Pierluigi Paganini September 08, 2026 Attackers bypass endpoint security by posing as...
Stealing AI Reasoning Traces
Stealing AI Reasoning Traces Interesting research: “Stealing Reasoning Traces from Proprietary LLM APIs“: Abstract: Leading large language model providers now...
Apple after Cook: The Ternus age begins this week
While Cook was frequently criticized for not being a product guy, he presided over the launch of the Apple Watch,...
Judge spares Google’s ad-tech business from a breakup
The specific obligations Google will face are not yet public, because Brinkema’s explanatory opinion remains under seal. Earlier, Google had...
BigBear 2.0 phishing campaign hijacks Microsoft 365 sessions after MFA
He recommended disabling or containing the affected account, revoking Entra sign-in sessions and refresh tokens, and forcing reauthentication. Incident responders...
FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing...
