2+ day, 23+ hour ago   (695+ words) Researchers have uncovered a fake-shopping network spanning more than 119,000 domains. German cybersecurity company Nebty identified the operation, dubbed DoppelCart, which imitates legitimate retailers by copying their branding, product catalogs, descriptions, and images. The fake checkout pages can capture card numbers,…...

4+ day, 1+ hour ago   (452+ words) Google says China-linked hackers are running AI inside compromised cloud environments, using victims’ computing power while reducing outside monitoring. Suspected China-linked hackers are running AI models inside cloud environments they have already breached. Google Threat Intelligence Group suspects UNC6508, a China-linked…...

5+ day, 1+ hour ago   (595+ words) Liquid Network hackers returned 3,400 BTC after draining $320 million from its federation wallet, but about $47 million in Bitcoin remains outstanding. Liquid Network just watched roughly $320 million in Bitcoin walk out of the wallet backing its network, and those behind the drain…...

5+ day, 7+ hour ago   (404+ words) Fake Minecraft sites continue distributing WeedHack malware through SEO poisoning and trusted hosting platforms despite disruption of its original C2 infrastructure. Disrupting WeedHack’s command-and-control infrastructure did not stop its distribution. Fake Minecraft client sites and trusted hosting services continued serving the…...

6+ day, 22+ min ago   (411+ words) IDScan faces four proposed class actions after a dark-web service claimed to hold more than 153 million U.S. and Canadian driver’s license records. At least four proposed class-action lawsuits have been filed against New Orleans-based IDScan.net in the U.S. District Court…...

1+ week, 2+ day ago   (587+ words) PaperCut pre-authentication RCE: A PaperCut remote code execution flaw is being exploited in the wild, with Huntress observing attacks against two customers. PaperCut considers all NG and MF versions potentially affected. Organizations should update PaperCut immediately, remove public access, preserve…...

1+ week, 3+ day ago   (739+ words) Five men pleaded guilty after targeting Kansas ATMs with jackpotting malware as the FBI warns of a nationwide rise in attacks and financial losses. With physical access and the right malware, criminals can command an ATM to dispense cash without…...

1+ week, 5+ day ago   (695+ words) China-linked Fire Ant hackers compromised Cisco IOS XR routers, management hosts, and authentication systems to create covert paths into other networks. Compromising a server can expose one machine. Compromising the right router can give attackers visibility into an entire network....

1+ week, 6+ day ago   (945+ words) Scammers are using fake Indeed interview apps to infect Android phones with spyware. Learn how the attack works and how job seekers can avoid it. Scammers are turning Indeed’s trusted name into a malware delivery vehicle, and the bait is…...

2+ week, 2+ day ago   (611+ words) Russian-speaking cybercriminals repeatedly told Cursor’s AI agent they were conducting legitimate security tests while using the tool during attacks on corporate networks, according to cybersecurity firm Gambit Security and data reviewed by Reuters. The campaign shows how commercial AI tools…...