Content is curated from many trusted industry sources, including vendor advisories, security blogs, bug bounty programs, and conference organizers worldwide.
Unverified online claims allege ChatGPT sent an email to the FBI without authorization, triggering renewed debate over privacy protections and third‑party data permissions in AI. A Reddit user reported an automated transmission from their linked account, fueling scrutiny of authenticity and data handling in AI systems. This fuels calls for stronger
An npm malware campaign uses the indexed-btree package to hide malicious logic inside normal runtime behavior, not in install scripts. By blending with legitimate functionality, attackers bypass standard supply-chain defenses, evading detection during fetch and execution while enabling covert payloads and data exfiltration. This threatens pipelines
Cyber attackers gained unauthorized access to two small privately operated Colorado water systems in late August, altering device settings, disabling remote access and alarms, and modifying pumping cycles. Authorities said there was no impact on drinking water quality, public safety, or service continuity despite the intrusions.
Hackers carried out a data raid targeting the Royal National Lifeboat Institution (RNLI) amid far-right agitation objecting to migrant rescues. In a Lifeboat magazine note, the charity warned members that personal data—names, contact details, and records of interactions with the RNLI—could have been breached via a vendor’s CRM system.
Security Affairs Malware newsletter compiles top malware research, covering Gray Rabbits’ One-Click Backdoor campaign, Red Heron’s exploitation of a Gitea n-day flaw that reveals a new Linux rootkit, and a malicious Twitch extension leaking OAuth tokens from about 30,000 users to a Russian botnet. The roundup highlights evolving TTPs and defense.
Fraudsters impersonated central investigative agency officials and kept an elderly woman in Lucknow in a “digital arrest” for nine days, exploiting fear of a warrant and ongoing probe. They coerced her into paying about ₹9 lakh before investigators exposed the scam, highlighting the need for vigilance against impersonation fraud.
Cyber Command probed an online trading and investment scam worth ₹93.58 lakh, leading to three arrests and a mule account network. Investigators found the accused procured and supplied credentials for 507 bank accounts to cyber fraudsters to receive and siphon illicit funds, expanding a wide mule network.
Rampur police busted an interstate cyber fraud gang suspected of opening bank accounts in others’ names by abusing Aadhaar enrolment and update processes. Four suspects, including a post office Branch Postmaster, were arrested. The investigation centers on biometric Aadhaar fraud and related identity theft schemes affecting victims.
Researchers demonstrated two escape vectors from OpenAI's Codex sandbox, including one that executed commands on a developer machine even when the sandbox was in its most restricted state. The findings highlight sandbox weaknesses and prompted timely patches by OpenAI to close the vulnerabilities and strengthen isolation.
Google's threat intelligence unit disclosed that it operated a clandestine asset inside TeamPCP's leadership network, providing insider intelligence on targets and activities. The operation aimed to disrupt or monitor the group's workflows while evaluating potential security gaps and future risks posed by its personnel.
Chandigarh cyber crime police arrested three more suspects in a ₹2 crore fraud linked to a WhatsApp-based impersonation scam. Fraudsters posed as the company’s managing director, persuading an employee to transfer funds to another bank account, police said, extending the investigation.
Police in Patna City, Bihar, busted an international cyber fraud gang and arrested four suspects who targeted foreign nationals. The accused allegedly diverted international calls, claimed victims’ computers were infected or had malware, and demanded payment in dollars. The case shows cross-border fraud risk and social-engineering tactics for all.
Unverified online claims allege ChatGPT sent an email to the FBI without authorization, triggering renewed debate over privacy protections and third‑party data permissions in AI. A Reddit user reported an automated transmission from their linked account, fueling scrutiny of authenticity and data handling in AI systems. This fuels calls for stronger
An npm malware campaign uses the indexed-btree package to hide malicious logic inside normal runtime behavior, not in install scripts. By blending with legitimate functionality, attackers bypass standard supply-chain defenses, evading detection during fetch and execution while enabling covert payloads and data exfiltration. This threatens pipelines
Cyber attackers gained unauthorized access to two small privately operated Colorado water systems in late August, altering device settings, disabling remote access and alarms, and modifying pumping cycles. Authorities said there was no impact on drinking water quality, public safety, or service continuity despite the intrusions.
Hackers carried out a data raid targeting the Royal National Lifeboat Institution (RNLI) amid far-right agitation objecting to migrant rescues. In a Lifeboat magazine note, the charity warned members that personal data—names, contact details, and records of interactions with the RNLI—could have been breached via a vendor’s CRM system.
Security Affairs Malware newsletter compiles top malware research, covering Gray Rabbits’ One-Click Backdoor campaign, Red Heron’s exploitation of a Gitea n-day flaw that reveals a new Linux rootkit, and a malicious Twitch extension leaking OAuth tokens from about 30,000 users to a Russian botnet. The roundup highlights evolving TTPs and defense.
Fraudsters impersonated central investigative agency officials and kept an elderly woman in Lucknow in a “digital arrest” for nine days, exploiting fear of a warrant and ongoing probe. They coerced her into paying about ₹9 lakh before investigators exposed the scam, highlighting the need for vigilance against impersonation fraud.
Cyber Command probed an online trading and investment scam worth ₹93.58 lakh, leading to three arrests and a mule account network. Investigators found the accused procured and supplied credentials for 507 bank accounts to cyber fraudsters to receive and siphon illicit funds, expanding a wide mule network.
Rampur police busted an interstate cyber fraud gang suspected of opening bank accounts in others’ names by abusing Aadhaar enrolment and update processes. Four suspects, including a post office Branch Postmaster, were arrested. The investigation centers on biometric Aadhaar fraud and related identity theft schemes affecting victims.
Researchers demonstrated two escape vectors from OpenAI's Codex sandbox, including one that executed commands on a developer machine even when the sandbox was in its most restricted state. The findings highlight sandbox weaknesses and prompted timely patches by OpenAI to close the vulnerabilities and strengthen isolation.
Google's threat intelligence unit disclosed that it operated a clandestine asset inside TeamPCP's leadership network, providing insider intelligence on targets and activities. The operation aimed to disrupt or monitor the group's workflows while evaluating potential security gaps and future risks posed by its personnel.
Chandigarh cyber crime police arrested three more suspects in a ₹2 crore fraud linked to a WhatsApp-based impersonation scam. Fraudsters posed as the company’s managing director, persuading an employee to transfer funds to another bank account, police said, extending the investigation.
Police in Patna City, Bihar, busted an international cyber fraud gang and arrested four suspects who targeted foreign nationals. The accused allegedly diverted international calls, claimed victims’ computers were infected or had malware, and demanded payment in dollars. The case shows cross-border fraud risk and social-engineering tactics for all.
Unlimited intelligence feeds and real-time alerts in the Secwiser app.
Download now