Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials....
Blog
16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
Ravie LakshmananOct 08, 2026Browser Security / Malware Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that...
U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks
Swati KhandelwalOct 08, 2026Cybercrime / Cyber Espionage The U.S. State Department is offering up to $10 million for information leading...
MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data
Ravie LakshmananOct 08, 2026Cybercrime / Ransomware The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S....
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
Ravie LakshmananOct 08, 2026Artificial Intelligence / Cloud Security The npm package known as "tensorlake," a TypeScript software development kit (SDK)...
NT government recovers from lengthy network outage
Key points A territory-wide outage knocked out access to telecommunications and digital systems across key NT government departments and agencies...
New US air-to-air missiles will finally overthrow China’s range advantage
With a clutch of new long-range air-to-air missiles (LRAAMs) with ranges of 300 km or more, US forces could dramatically...
SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances
SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances Pierluigi Paganini October 07, 2026 SonicWall patched a CVSS 10 pre-auth...
CISA’s 17 Common Active Directory Compromise Techniques: A Sophos MDR Perspective
Active Directory defenses must combine identity fundamentals, telemetry, and rapid response as attackers reach the environment’s first breach attempt within...
CrowdStrike says China-based suspect used AI tools in South Korean bank hacks
The suspect behind recent cyberattacks targeting South Korea's financial sector may be a 26-year-old based in China's Guangdong province who...
Attackers hijack ccTLDs to fake certs for Google
Key points Unknown attackers hijacked the ccTLD registries for Ghana, Sierra Leone and American Samoa to obtain unauthorised HTTPS certificates...
Critical Atlassian vulnerability affects Jira, Confluence and other products
Rapid7 has published an Emergent Threat Response (ETR) alert for a critical vulnerability, tracked as CVE-2026-21589, affecting eight Atlassian products...
New email attacks target both humans and AI in the same message
Recent phishing attacks analysed by Barracuda Research found attackers combining two sets of tactics in a single email: social engineering...
Australia is building green industries. Defence could make them strategic
Australia is spending billions to build green industries while Defence is trying to make the Australian Defence Force harder to...
Kiteworks and A-LIGN extend partnership to support IRAP-aligned assessments in Australia
Kiteworks and compliance assessment firm A-LIGN have extended their partnership to target Australian government agencies and regulated enterprises seeking IRAP-aligned...