Cybersecurity News

Revolut customers received phishing texts only days after the digital bank acknowledged disclosing customer data to a government impostor.

The largest known celebrity deepfake seizure has taken 12 websites offline, disrupting access to videos depicting some 1,200 people.

A large phishing campaign is using fake T-Mobile rewards points and looming expiry dates to pressure recipients into clicking malicious links.

Ransomware incidents in Japan rose 4.7% year over year. The Gentlemen was the most active group, with leak-site listings more than doubling from January to July. Qilin ranked second and appeared to use AI, while SMEs with capital under JPY 1 billion represented 80% of victims.

ESET researchers document SparroWocky, the new flagship backdoor of the FamousSparrow APT group

A behind-the-scenes look at how Recorded Future earned its spot as a threat intelligence leader in the latest Forrester Wave.

Experts from Recorded Future and Mastercard explore how security organizations can shift to proactive, machine-speed defense by leveraging high-quality threat intelligence and adhering to evolving global security frameworks designed to help mitigate AI-enabled risks.

Google’s September Pixel update fixes 110 vulnerabilities, including a modem flaw being used in limited, targeted attacks.

Advances in AI technology will continue to identify vulnerabilities that in some circumstances are difficult, or effectively impossible, to patch. Appropriate network segmentation, rigorous visibility, and the deployment of NGFW/IPS combinations can provide a powerful compensatory layer.

As AI adoption expands the attack surface and adds to the security workload, businesses need automation backed by experts

A fake Avast renewal page shows how AI is helping scammers create more convincing traps with polished designs and fluent copy.

<p>Windows takes 718 fixes… but what if it was actually a slow month?</p>Categories: Threat ResearchTags: Patch Tuesday, x-ops, Threat Research

ChatGPT contractors are reviewing real users' conversations. Here’s how to stop AI companies using your chats for model training.

Cybercriminals used HBO Max’s verified Reddit account to run 108 malicious ads that tricked people into installing information stealers.

A mother says Meta AI pieced together names, birth details, photos, and location information about her young daughters from years of family posts.

Fake Bitrefill checkout pages are appearing in search results and tricking people into sending cryptocurrency directly to scammers.

Analyze Tajin Group's role in phishing and Chinese money laundering. Discover how this Telegram-based vendor exploits payment gateways and adapts its financial fraud operations.

Categories: Threat ResearchTags: advisory, vulnerability, Cisco

<p>This article was first published <a href="https://www.linkedin.com/pulse/messageboards-all-you-need-nash-borges-iav6c" target="_blank">on LinkedIn.</a></p>Categories: AI Research, Threat ResearchTags: AI, AI Cybersecurity, Threat Research

Google says its new opaque redirects tackle evolving abuse, but they also prevent users from checking a result’s destination by hovering over it.

The digital bank was tricked into releasing sensitive customer information, including IDs, to an attacker using a legitimate government email domain.

A list of topics we covered in the week of September 7 to September 13 of 2026

Uncensored refers to a lack of typical guardrails or ethical restrictions, lowering the technical barrier of entry into cybercrimeCategories: Threat ResearchTags: AI, Luciferus, underground

Move from reactive defense to a proactive security mindset. Learn how proactive threat intelligence identifies and neutralizes threats.

A breach at email marketing company Brevo exposed Trezor, CoinTracking, and BitBox customers to phishing emails, but others may also be at risk.

The Gigabud banking Trojan can clone a banking app into a separate work profile on an Android device to help hide fraudulent transactions.

Upgraded modular malware observed in attacks on Cisco Firewall Management Center (FMC) devicesCategories: Threat ResearchTags: Cyclops Blink, Cisco, Linux

In this week's Threat Source newsletter, Joe explores why the word "burnout" often fails to capture the true toll of working in the cybersecurity industry and why we need better language to address it.

Four different espionage groups used the same exploit kit to target recently fixed flaws, showing why “patch later” is a dangerous gamble.

AI researchers are warning that the technology could kill us all within the next decade, although they say the risk from current models is low.