How a Hijacked Analytics Script Turned Every Checkout on a Brazilian E-Commerce Platform Into a Card Skimmer
The online stores in this case did nothing wrong on their own websites. The card-stealing code reached their checkout pages...
Month: October 2026
A Ransomware Affiliate Who Worked for Both Nefilim and Hive Gets Nearly Six Years in U.S. Prison
A U.S. federal court has sentenced Artem Stryzhak, a Ukrainian national, to 70 months in prison for carrying out ransomware...
‘Unplug Your PC by Noon’: Inside GMO’s Week-Long Fight With the Hackers Behind Its Desktop Cloud Breach
It is not often that a hosting provider asks customers to physically pull the plug on their own computers. That...
Node2Shell Moves From Warning to Active Attacks as CISA Adds the Brotli Flaw to Its Exploited List
Last week, Node2Shell was a serious bug with patches on the way. As of Tuesday, it is a bug attackers...
A Flaw in Microsoft Authenticator for Android Let Rogue Apps Quietly Take Over Work Accounts
Here Is How Layered Defenses Keep One Bad App on One Phone From Handing Over Your Whole Work AccountMost people...
Hour by Hour: How a Cyberattack Sent Ambulances Away From New Mexico’s Only Level 1 Trauma Center
On Monday, October 26, New Mexico briefly had no emergency department able to treat the most serious injuries. A cybersecurity...
Your Security Camera Does Not Need to Be on the Internet to Be Hijacked: How Attackers Are Reaching Dahua Cameras Through the Cloud
Many small businesses assume a camera behind the office firewall is safe because nobody can reach it from outside. A...
Case File: A Former Penetration Tester, an AI Attack Framework, 90 Breached Organizations and 8.2 Million Stolen Records
Police in Seoul have put a face on one of the big worries about AI in cybercrime: that it lets...
Australia’s Cyber Agency Broke Into an Amadey Malware Operation and Cut Off 180,000 Infected Computers. Why That Is Not the End of the Story for Victims
Somewhere among roughly 180,000 computers around the world, a criminal’s malware went quiet. The Australian Signals Directorate (ASD), the country’s...
DreamHost Resets Email and FTP Passwords After an Unexplained Incident. If Your Business Hosts There, Here Is Your To-Do List
If your company’s website, email or file transfers run through DreamHost, someone on your team may already have been locked...
