اخبار امنیتی

Infosecurity Magazine ۴ روز پیش

Binance Hit by Record-Breaking $6.3bn Hack in Largest Cryptocurrency Heist in History

Leading cryptocurrency analysts have attributed the cyber-attack to a North Korean elite hacking unit

Graham Cluley ۴ روز پیش

Hackers leak personnel data of 41,000+ Homeland Security staff, including ICE and border agents

The US Department of Homeland Security has had the details of more than 41,000 staff, including ICE and CBP agents, published online. Not ideal for an organisation with "Security" in its name. Read more in my article on the Hot for Security blog.

The Register ۵ روز پیش

In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security

Binance freezes funny money after compromise of engineer’s laptop linked to $6.3 billion of unauthorized trades

The Register ۵ روز پیش

Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched

Embedded browsers are at the heart of the problem

The Register ۵ روز پیش

Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers

Snoops 'likely still' have access to US government-affiliated network

CVE-2026-109619CVE-2026-109618CVE-2026-46300

Graham Cluley ۵ روز پیش

BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center

Ambulances were diverted, surgeries cancelled, and medical students sent home from classes after a ransomware group attacked the University of New Mexico's Health Sciences Center (HSC) this week. Read more in my article on the Fortra blog.

Infosecurity Magazine ۵ روز پیش

NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries

NIK C2 malware can fall back on victims’ OpenAI API keys to run AI queries

The Register ۵ روز پیش

Belgium's tax agency confirms cyberattack, pulls services offline

Officials confirm this week’s tax deadlines extended to November as a result

Malwarebytes Labs ۵ روز پیش

Malicious Firefox extensions impersonate popular crypto wallets

Fake Firefox extensions posing as Phantom, Jupiter, and Bitget targeted users to steal crypto wallet recovery phrases and private keys.

Infosecurity Magazine ۵ روز پیش

CREST Urges Whole-Ecosystem Approach to Financial Cyber Resilience

CREST has published a framework for strengthening cyber resilience across financial services

The Register ۵ روز پیش

Shortlist of age checks for the UK's under-16 social media ban is out, 'some' adults will need verifying

Some adults may not need to prove it, but many will

The Register ۵ روز پیش

Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour

'The workflow automatically is triggered within a second, and if the workflow is indeed vulnerable, then the attack is executed successfully'

Infosecurity Magazine ۵ روز پیش

Online Scam Volumes Double to Overtake Phishing

Akamai research reveals that scam detections topped six million in Q2 2026

Malwarebytes Labs ۵ روز پیش

Have an older iPhone or iPad? Apple has a security update for you

Apple has fixed a flaw exploited in targeted attacks to the iPhone XS, XS Max and XR, and seventh-generation iPad.

CVE-2026-86950

Infosecurity Magazine ۵ روز پیش

ICO Reprimands Staffordshire Police After Domestic Abuse Breach

The UK’s privacy regulator has issued a reprimand to Staffordshire Police following a serious breach of personal information

Infosecurity Magazine ۵ روز پیش

NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines

The guidance sets out how federal agencies can prioritize PQC adoption for the most sensitive systems, to meet the 2031 transition deadline

Infosecurity Magazine ۵ روز پیش

MR ROBOT Malware-as-a-Service Targets Indian Bank Customers

MR ROBOT Android malware rents banking trojans that steal one-time passwords and card data

The Register ۵ روز پیش

Admin dropped the F-bomb in a password to show hackers who was really 1337

Cursing in login credentials can help keep the bad guys out, but not when the rest of your security is BS

WeLiveSecurity ۶ روز پیش

Amatera: How the prolific infostealer works and spreads

The malware that topped ESET’s infostealer detections in Latin America in the first half of 2026 is an example of how cybercrime has professionalized

Graham Cluley ۶ روز پیش

Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice

Dutch spies, Russian hackers and Jared Kushner’s iPhone. It sounds like the ingredients for a thriller, but according to claims in a new book the US President's son-in-law may have been hacked twice. Is any of it true, and what does it tell us about the phones in our pockets? Meanwhile, James Ball explains that of the internet’s most trusted security keys were protected by numbers so small that…