BleepingComputer
COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft 2 August 2026 at 23:14

COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft

2 August 2026 at 23:14

A vulnerability in COLDCARD hardware wallet firmware allowed attackers to steal an estimated $88.6 million in Bitcoin from thousands of wallets whose seeds were generated using a flawed random number generator. [...]

BleepingComputer
Google Chrome may soon block New Tab hijacker extensions by default 2 August 2026 at 16:17

Google Chrome may soon block New Tab hijacker extensions by default

BleepingComputer

By: Mayank Parmar

2 August 2026 at 16:17

Google is preparing a new Chrome security feature that would block policy-installed extensions from hijacking the New Tab page or changing the default search engine. [...]

Data and computer security | The Guardian
UK’s state investments agency hit by data breach 2 August 2026 at 08:00

UK’s state investments agency hit by data breach

Data and computer security | The Guardian

By: Kalyeena Makortoff Banking correspondent

2 August 2026 at 08:00

Security lapse leaves sensitive information and contact details of 51 government officials exposed for 40 hours

The public body in charge of the UK’s state investments has been pushed to improve its internal security after a data breach left “high-level management information” publicly accessible for nearly two days.

UK Government Investments (UKGI), the agency that manages the taxpayers’ interest in a swathe of companies including Channel 4 and the Post Office, said the security failure also left more than 50 government officials’ personal details exposed for nearly 40 hours.

BleepingComputer
Rails patches critical Active Storage flaw with RCE potential 1 August 2026 at 16:20

Rails patches critical Active Storage flaw with RCE potential

BleepingComputer

By: Bill Toulas

1 August 2026 at 16:20

A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE). [...]

BleepingComputer
Amgen says cloud data breach exposed patient health, proprietary info 1 August 2026 at 00:16

Amgen says cloud data breach exposed patient health, proprietary info

BleepingComputer

By: Lawrence Abrams

1 August 2026 at 00:16

Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service providers. [...]

BleepingComputer
Arch Linux disables AUR package adoption to stop malware flood 31 July 2026 at 23:38

Arch Linux disables AUR package adoption to stop malware flood

BleepingComputer

By: Bill Toulas

31 July 2026 at 23:38

The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages. [...]

BleepingComputer
Online ad firm Adform’s script compromised to steal cryptocurrency 31 July 2026 at 23:09

Online ad firm Adform’s script compromised to steal cryptocurrency

BleepingComputer

By: Bill Toulas

31 July 2026 at 23:09

Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to visitors' clipboards with ones controlled by an attacker. [...]

BleepingComputer
Hacker uses DeepSeek AI to autonomously attack vulnerable servers 31 July 2026 at 19:35

Hacker uses DeepSeek AI to autonomously attack vulnerable servers

BleepingComputer

By: Lawrence Abrams

31 July 2026 at 19:35

A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement. [...]

BleepingComputer
CISA warns of cyberattacks disrupting U.S. water utilities 31 July 2026 at 18:49

CISA warns of cyberattacks disrupting U.S. water utilities

BleepingComputer

By: Bill Toulas

31 July 2026 at 18:49

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in the water and wastewater systems sector. [...]

BleepingComputer
ESET tracks rise in malicious AI skills and adaptable malware 31 July 2026 at 16:01

ESET tracks rise in malicious AI skills and adaptable malware

BleepingComputer

By: Sponsored by ESET

31 July 2026 at 16:01

Attackers are adapting established techniques to AI platforms, emerging technologies, and changing user behavior. ESET's new threat report examines the rise of malicious AI skills, AI-assisted malware, ClickFix attacks, record quishing activity, and ransomware tools designed to disable security software. [...]

BleepingComputer
Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests 31 July 2026 at 02:57

Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests

BleepingComputer

By: Ax Sharma

31 July 2026 at 02:57

One of Anthropic's Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where it ran on 15 real systems and stole credentials from a security vendor. It was one of three incidents affecting real companies. [...]

BleepingComputer
South Korea fines telco giant KT $39 million for customer data breach 31 July 2026 at 00:28

South Korea fines telco giant KT $39 million for customer data breach

BleepingComputer

By: Bill Toulas

31 July 2026 at 00:28

South Korea's Personal Information Protection Commission (PIPC) has fined telecommunications giant KT Corporation KRW 53.979 billion ($39 million) over data protection violations. [...]

BleepingComputer
JetBrains warns of critical TeamCity remote code execution flaw 31 July 2026 at 00:01

JetBrains warns of critical TeamCity remote code execution flaw

BleepingComputer

By: Bill Toulas

31 July 2026 at 00:01

JetBrains is warning of a critical authentication bypass vulnerability affecting TeamCity On-Premises that could be exploited to achieve remote code execution. [...]

BleepingComputer
Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers 30 July 2026 at 20:13

Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers

BleepingComputer

By: Bill Toulas

30 July 2026 at 20:13

Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. [...]

Data and computer security | The Guardian
Hackers steal sensitive data from UK Department for Education and police 29 July 2026 at 21:10

Hackers steal sensitive data from UK Department for Education and police

Data and computer security | The Guardian

By: Dan Milmo and Vikram Dodd

29 July 2026 at 21:10

Details of parents and staff, including email addresses and phone numbers, are among data taken by cybercriminals

The Department for Education and a police database have been targeted by a cyber-attack, exposing more than 740,000 pieces of data.

Details of government officials, senior school leaders, university staff, police officers and members of the public have been taken by hackers.

Data and computer security | The Guardian
Personal and banking details among customer data stolen in Origin Energy hack 23 July 2026 at 11:55

Personal and banking details among customer data stolen in Origin Energy hack

Data and computer security | The Guardian

By: Luca Ittimani

23 July 2026 at 11:55

Hackers access Australian customers’ names, addresses, dates of birth, phone numbers and some bank account details, company says

Origin Energy customers’ addresses, phone numbers and partial bank account data have been accessed in a hack, the company has confirmed.

The firm has 4.8m customer accounts in Australia, providing electricity, fossil gas, LPG and internet services to homes and businesses.

‘Keys to the kingdom’: hackers who gained access to heart of London transport network jailed

Data and computer security | The Guardian

By: Dan Milmo and Joe Pinner

16 July 2026 at 14:01

Thalha Jubair, 20, and Owen Flowers, 19, sentenced to five and a half years each for cyber-attack that cost Transport for London £39m

The data of millions of commuters was stolen, Londoners were left out of pocket and 27,000 Transport for London staff were forced to reset their passwords.

Over four days in 2024 a pair of teenage hackers had London’s transport network at their mercy. Thalha Jubair and Owen Flowers had burrowed into the heart of Transport for London’s IT systems and held the “keys to the kingdom”.

Data and computer security | The Guardian
Australian patients’ medical records could be sold on dark web after clinics’ data breach 16 July 2026 at 07:46

Australian patients’ medical records could be sold on dark web after clinics’ data breach

Data and computer security | The Guardian

By: Kat Wong

16 July 2026 at 07:46

‘Malicious actor’ obtains sensitive data including Medicare numbers, treatment details and pathology results in cyber-attack on Partnered Health

Australians’ medical records and patient information could be sold on the hidden market, an expert has warned, after a cyber-attack at one of the nation’s biggest healthcare providers.

Partnered Health revealed 21 clinics across several cities including Sydney, Melbourne and Canberra were affected when a “malicious actor” accessed its data on 23 June.

AI models capable of devastating attacks on governments and business months away, rare Five Eyes statement warns

Data and computer security | The Guardian

By: Sarah Basford Canales

22 June 2026 at 15:00

Signal agencies in Australia, the US, the UK, New Zealand and Canada sound alarm after Trump blocks foreign nationals from Anthropic’s Fable AI model

Powerful AI models capable of devastating new cyber attacks on governments and businesses are mere months away, intelligence agencies for the Five Eyes have warned in a rare joint statement, urging leaders to “act now”.

The surprising public intervention by signals agencies for Australia, the US, the UK, New Zealand and Canada comes after the Trump administration earlier this month decided to block “foreign nationals” from using a much-hyped AI model built by tech company Anthropic, called Fable.

Normal view