News & Map

Rogue AI agents broke into Indian firms’ live systems, government says

It is India’s first such official account after similar incidents of rogue AI behaviour worldwide.

China’s Tencent says AI agents showed unintended browsing behaviour

It appears to be the first incident of rogue agent actions acknowledged by a major Chinese company.

BAE Systems cyberattack disrupts US federal court operations

The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the no...

Korean banks plan security spending increases after data breaches

South Korea's biggest banks are preparing to boost security spending following a wave of data breaches, with Shinhan Ban...

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers

The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disc...

CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing

AI agents being tested online reached the live systems of Indian organizations and read business records, including pers...

BeyondTrust patches zero-day exploited in attacks since August

BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in ...

Cabinet approves bill to allow remote access to devices used by criminal groups

Authorities are seeking to counter encrypted messaging and prevent fraud, robbery and other offenses.

Japanese authorities target websites selling phishing tools used to mastermind scams

Authorities have shut down a number of sites selling phishing tools that have been enabling criminals to create highly b...

Vibe coding: Game-changer or risky business?

Vibe coding lets users build software with AI, but free alternatives to popular programmes raise security concerns.

Investigation: How scammers exploit Ukraine’s occupation to deceive foreign men

He believed his online date was trapped under Russian occupation. She may never have existed.

PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previous...

Trump’s AI Task Force to Commission Report on Technology’s Risks

President Donald Trump’s artificial intelligence task force in its first meeting agreed on Thursday to address risks rel...

China maps Israeli spoofing with flight data; new US press secretary: SCMP’s 7 highlights

We have selected seven stories from this week’s news across Hong Kong, mainland China, the wider Asia region and beyond ...

Japan govt green-lights Bill to allow police to remotely access crime ring phones

The proposed revision is aimed at countering groups that use encrypted apps to direct robberies and scams.

Group of US senators urges to investigate Starlink disruptions in Ukraine

The senators believe that the disruptions "put US diplomatic, military and security personnel in danger"

Israeli firm used online ads to run vast spy operation, researchers say

Order to limit Starshield for Ukraine came from White House, sources say

The move to temporarily restrict the vital communications system came as the U.S. president has pressured Kyiv to stop a...

AI agents on Tencent Cloud try to break into Alibaba’s Amap: researchers

A fleet of artificial intelligence agents operating on a Tencent Holdings cloud platform made thousands of attempts to c...

Israeli firm used ads to enable espionage, Canadian researchers say

An Israeli advertising agency has placed ads seen by millions of internet users that have left them open to spyware atta...

SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape

The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record atte...

F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud

Built from decades of threat intelligence research, the new resource explains scams from the victims' perspective and tr...

Israeli ‘ad’ firm helped infect spyware into Al Jazeera devices

An Israeli spyware disguised as a digital advertisement firm has targeted journalists’ devices at Al Jazeera.

US intel pause, Starlink outages leave Ukraine vulnerable to Russian attack

When U.S. warnings and Starlink support shut off this week, Ukraine was left exposed to Russian drones. Kyiv has few alt...

Federal bankruptcy courts dealing with outages after contractor cyberattack

The incident, which involved a government contractor, has halted all production of bankruptcy notices.

AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too

Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online ...

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host comp...

Android gets AI defenses against messaging scams, fake calls

Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling o...

Fake AI images of protester go viral after woman punched at Trump's Ohio rally

A protester who heckled Donald Trump at his midterm rally in Youngstown, Ohio, was physically assaulted and removed from...

The next election influence campaign will target your AI chatbot

Someone is seeding the internet with hyperlocal content about political races. Researchers say it’s designed to train AI...

Zero-click spyware infecting devices through online ads, researchers say

Powerful zero-click spyware is infected devices worldwide through targeted ads, new research shows — an alarming develop...

Meet the agency using AI to screen grant applicants for links to potential adversaries

The Transportation Department is deepening its background checks on people and organizations that apply for research gra...

ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More

Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And ...

Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth

A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commerc...

The Q3 Vulnerability Pulse: Discovery ≠ Exploitation

Is the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in the latest T...

Alleged Chinese spy posed as recruiter for 'retired Australian police'

A suspected Chinese spying network contacted Australians on LinkedIn using a fake security firm in an effort to encourag...

Family court dismissed concerns over India data breach a decade ago

A whistleblower who raised concerns about Australian court data being accessed in India more than a decade ago says the ...

Criminals stole $90mn of crypto by hiding password readers in USB-like devices

Ledger said theft from its secure wallets was ‘one of the most sophisticated attacks’ the industry has seen

Criminals stole $90mn of crypto by hiding password readers in USB-like devices

Ledger said theft from its secure wallets was ‘one of the most sophisticated attacks’ the industry has seen