همهٔ اخبار

86,644 Firewalls in 194 Countries Breached With Stolen Passwords

هک حساب‌های پلی‌استیشن با فریب پشتیبانی سونی؛ وقتی مهندسی اجتماعی از رمز عبور قوی‌تر عمل می‌کند

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

Nikkei Discloses Two Employee Cloud Account Compromises

Fake ChatGPT and Gemini ad tools bait users with bogus login windows

Johnson Controls EasyIO FG

5th October – Threat Intelligence Report

Fake brand discounts on social media prey on shoppers’ fear of missing out

Apple iCloud Mail flaws allowed sender spoofing that passed security checks

China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing

In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats

SMTP is the key: BPFDoor and AVERAT hitting the network edge

Chinese spies impersonate White House, Anthropic figures to phish AI policy experts

Amazon Prime Big Deal Days 2026: As Shopping Activity Surges, So Do Cyber Threats

Researchers find Chinese hacking campaigns targeting AI firms, Asian governments

Suspected Chinese spies spoofed an Anthropic exec, ex-White House official in AI phishing

Ransomware Data Theft Surged 275% in 2026: Schools, Hospitals, and Government Agencies Had Some of the Largest Claims

AI policy circles targeted in China-linked phishing operation

Johnson Controls EasyIO Neo Series EC and CW Controllers

CISA Malcolm

View CSAF Summary The following versions of CISA Malcolm are affected: Malcolm <=v26.07.1 (CVE-2026-107336, CVE-2026-107361, CVE-2026-107337, CVE-2026-107335, CVE-2026-107334) Malcolm <=v26.08.0 (CVE-2026-107333, CVE-2026-107362) CVSS Vendor Equipment v3 8.1 CISA Malcolm 6 Vulnerabilities Authentication Bypass by Spoofing, Incorrect Authorization, Server-Side Request Forgery (SSRF), Authentication Bypass Using an Alt…

Armatura LLC Armatura One

ABB Protection and Control IED Manager PCM600

Hallucinating Credibility: China-Aligned TA419 Impersonates its Way into US AI Policy Circles

MSP360 RMM Abused in Phishing Campaigns to Deploy ScreenConnect

Many expect AI in the SOC to make entry jobs harder to get

Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks

Proton Mail spoofing flaw still unfixed 17 months after bounty

Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net

2CLoader: A New Malware Loader Delivering Vidar and Remus

Russian FSB-linked hackers scale up phishing attacks against Ukraine supporters