Security & IT News

HiddenLayer reveals infostealer malware in a Hugging Face repository

Ontinue uncovers fake Claude Code installer pushing PowerShell stealer abusing Chrome's IElevator2

ShinyHunters has escalated its Canvas extortion campaign, defacing hundreds of school login pages and threatening to leak stolen data unless institutions negotiate

US sanctions target Cambodian scam networks tied to crypto fraud and trafficking

Itron confirmed a cyber incident but does not believe it is likely to have a material impact on the company

Dozens of browser extensions openly sell user data via privacy policy disclosures

A new report by global technology recruitment firm, Harvey Nash, found that three quarters of cybersecurity staff are pessimistic on pay and half are looking for a new job

Researchers uncover a new data theft and extortion group dubbed “BlackFile”

AI tools are not just creating new vulnerabilities, they are reviving old security failures, warned Jurgen Kutscher, VP of Mandiant Consulting

Google Cloud’s COO advocated for combining general-purpose frontier large language models with task-specific AI agents

Google Cloud will attribute a unique cryptographic ID every AI agent that will be tied to “traceable and auditable” authorization policies

Quorum Cyber report finds higher and further education institutions experienced 63% increase in attacks over a year

The UK’s NCSC has fully backed passkeys as consumers’ first choice for login, citing progress with FIDO and successful use across the NHS

macOS LOTL techniques bypass detection using native tools and metadata abuse

The UK’s cybersecurity agency said the devices will be available for purchase by organizations around the world

UK unveils £90m cybersecurity funding at CYBERUK to boost SME resilience, promote Cyber Essentials and a new Cyber Resilience Pledge, sparking industry debate

Null subject phishing campaigns bypass filters and target VIPs with QR code and RMM abuse

The convergence of global tensions and rapid technological change is driving a new era of cyber risk, the NCSC warns

Data exposure, operational disruption and financial losses among issues faced by businesses struggling with the rapid rise of AI agents, warns Cloud Security Alliance report

North Korea’s Lazarus Group is pegged for a $290m crypto theft at KelpDAO