A financially motivated threat actor with little technical knowhow used generative AI (GenAI) to breach hundreds of FortiGate instances at scale. While this showcases how AI can scale workflows to ...

Catalin Dragomir admitted in a US court to selling access to an Oregon state government office’s network. A Romanian national pleaded guilty in a US court to selling unauthorized access to an Oregon ...

The Iranian hacking group known as MuddyWater (aka Earth Vetala, Mango Sandstorm, and MUDDYCOAST) has targeted several organizations and individuals mainly located across the Middle East and North ...

Article updated at the bottom with additional technical details about this campaign. Amazon is warning that a Russian-speaking hacker used multiple generative AI services as part of a campaign that ...

Last week, Discord users reported seeing prompts to submit personal information to Persona, a third-party age-verification service. As Discord commits to universal age-verification, the new measures ...

Los Angeles County filed a civil lawsuit against Roblox, alleging that the platform markets itself as a gaming experience for children but has created a "largely unsupervised online world" that allows ...

With all eyes on safeguarding U.S. infrastructure, the nation’s top cyber adversaries are increasingly targeting companies to pinch trade secrets, aiming to give their own industries a competitive ...

The FBI warned that hackers are successfully stealing millions from ATMs — and the attacks are becoming more frequent. The FBI warned that the increase in ATM jackpotting — which is exactly what it ...

In 2010, the famed security researcher Barn a by Jack spectacularly hacked into an ATM cash machine onstage at the Black Hat security conference, forcing it to spit out reams of bank notes in front of ...

The Fulu Foundation, a nonprofit that pays out bounties for removing user-hostile features, is hunting for a way to keep Ring cameras from sending data to Amazon—without breaking the hardware. The ad ...

In February 2025, the Microsoft Threat Intelligence Center warned that Russian hackers were targeting Microsoft 365 accounts using device code phishing. In December, ProofPoint reported similar ...

Cybersecurity researchers have disclosed multiple security vulnerabilities in four popular Microsoft Visual Studio Code (VS Code) extensions that, if successfully exploited, could allow threat actors ...