News & Map

Chinese man extradited for role in $36 million cryptocurrency scam

A Chinese national was arraigned in California after being extradited from the Netherlands for his alleged involvement i...

CISA publishes strategy with eye on the next four years

It includes a review of whether its existing capabilities will meet its three pillars: “defend, harden, prevail.” The po...

Claude bypassed paywall to access US election data without being asked, days before midterms

The incident is the latest in a string this year that has raised concerns over Big Tech’s ability to maintain control of...

PHP2Shell: What to know about two critical PHP flaws

Here's the lowdown on CVE-2026-109618 and CVE-2026-109619, as well as what website owners and IT teams should do to stay...

Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw

Microsoft’s updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not ful...

BREAKING NEWS: Cyberattack on Ymirlink exposes data on JR train reservation service users

BREAKING NEWS: Cyberattack on Ymirlink exposes data on JR train reservation service users Read full story here

KB Kookmin Bank finds 2,091 more people affected by data leak

KB Kookmin Bank said Monday an additional 2,091 people were found to have had their personal information compromised in ...

A US Pivot Toward Commercial Espionage?

However justified or inevitable it might be, this represents a major shift in how the U.S. has thought about intellectua...

Popular AI tool LiteLLM says unrevoked key allowed hackers to target users

LiteLLM, an open-source tool widely used by artificial intelligence developers, said a key accidentally exposed in May w...

Japanese company to compensate users hit by cyberattack

GMO Internet, a Japanese internet infrastructure company, will compensate customers for losses from unauthorised trading...

Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes

Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious Web...

BREAKING NEWS: Email service firm YmirLink says 51 mil. personal records possibly leaked

BREAKING NEWS: Email service firm YmirLink says 51 mil. personal records possibly leakedRead full story here

Australians should prepare for online services to go down unexpectedly as threats rise, cyber agency warns

Australian Signals Directorate chief says advanced AI tools are needed to defend against ‘AI-enabled attackers’Get our d...

Australians should prepare for online services to go down unexpectedly as threats rise, cyber agency warns

Australian Signals Directorate chief says advanced AI tools are needed to defend against ‘AI-enabled attackers’Get our d...

Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses

Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. ...

Anthropic’s Claude AI model accessed Georgia voter data in US

Latest example of unauthorised behaviour shows AI model bypassed paywall to access data as part of statistics project Bu...

Bias in Qwen3-Coder Model

Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: te...

Nigeria: Alleged Phone-Tapping - Court Rejects El-Rufai's No-Case Submission

[Vanguard] The Federal High Court in Abuja on Monday dismissed a no-case submission filed by former Gov. Nasir El-Rufai ...

Kali Linux 2026.3 released with 7 new tools, desktop updates

Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environmen...

Kali Linux 2026.3 released with 6 new tools, desktop updates

Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environmen...

Blue Initiative Offers Maritime Sector Dedicated Vulnerability Database

Blue Initiative launches a new vulnerability database for IT and OT CVEs relevant to the maritime industry

Deploying AI agents securely: how Kaspersky products mitigate AI threats

We look at best practices for deploying AI tools securely in corporate environments, with Kaspersky Security Center and ...

uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts

A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working...

URGENT: Japan to compile emergency package on cybersecurity by next week: Takaichi

Japanese Prime Minister Sanae Takaichi said Monday the government will compile by the end of next week an emergency pack...

Government holds urgent cybersecurity meeting in response to recent data breaches

The meeting on Monday evening discussed countermeasures following a request from GMO Internet Group for the government t...

PHP2Shell security flaws now sucessfully exploited in the wild

Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been suc...

PHP Publishes Mitigation Advice for New RCE Flaw

PHP warns of critical RCE vulnerability CVE-2026-115560, but says limited exploit conditions mean most deployments are u...

Russian ministry recommends underground data centers following Ukrainian drone strikes

Existing data centers should be protected by reducing their visibility from the air, and through layered defense systems...

Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations

Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-...

Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs

An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub...

Why did Tinder’s scam detection fail, and what should Indian users do?

U.S. lawmakers shared troubling statistics about how dating app users on Tinder and Hinge were matching with scammers, d...

Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware

A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a kno...

Chinese wind turbine maker builds European firewall from Beijing

Ming Yang says Octopus joint venture and separate legal entities will convince customers that China cannot access data

We need to know if AI agents are accessing British services

The recent hack of Australian health data is a reminder that this is the biggest cyber security threat facing the UK

Japan companies compensate users as cyberattacks buffet economy

One company said all customers would receive 5,000 yen (S$41) as “an initial gesture of good faith”.

Japan companies to compensate customers after major cyberattacks

Japanese companies are moving to pay compensation to ⁠users following waves ⁠of cyberattacks that have disrupted interne...

Security concerns flagged within Japan firm GMO before breach: CEO

GMO Internet Group Inc. CEO Masatoshi Kumagai admitted Sunday night that internal engineers had flagged security issues ...

Weapon or armour? The contentious debate over China’s open-weight AI

Are China’s increasingly powerful open-weight AI models a cybersecurity threat, or could restricting them ultimately mak...

India's cartoonists built an audience online - now their posts are being restricted

Indian cartoonists say online restrictions are making satire harder, but they aren't giving up.

Musk accuses Ukraine of violating Starlink’s terms