Call center attack hits Nesine and 4 Race customer data, says KVKK
Two Turkish betting companies report that their call center provider's systems were encrypted in a cyberattack, potentially exposing call recordings and identity details.
Latest News — Page 2
Alleged Qilin ransomware member arrested in Japan, extradited to Germany
A 28-year-old Russian national described as a core Qilin member was detained in Osaka in May and handed over to German authorities on October 2.
PoeLLM botnet hides C2 in a poem, infects 3,400+ exposed AI servers
Lumen's Black Lotus Labs says the PoeLLM malware has compromised more than 3,400 servers, including LiteLLM and Ollama hosts, to mine cryptocurrency and spread further.
Georgia Power, Alabama Power customer portal breach hits about 400,000 accounts
Southern Company says an unauthorized party accessed limited account information of roughly 400,000 utility customers through its online customer portal.
Ransomware hits Yıldız Technical University, data of up to 144,500 people at risk
Turkey's data protection authority says a ransomware attack on Yıldız Technical University's virtualization infrastructure may affect about 140,000 students and 4,500 staff.
Attackers hijack .gh, .sl and .as registries to get certificates for Google domains
Google says attackers took over the operators of three country-code domains and obtained unauthorized HTTPS certificates for Google, YouTube and other organizations' domains.
Chrome 155 fixes 247 security flaws, including four critical use-after-free bugs
Google has released Chrome 155 with patches for 247 vulnerabilities, four of them rated critical. There is no evidence any of the flaws are exploited in the wild.
SonicWall patches maximum-severity pre-auth SSRF flaw in SMA 1000 gateways
SonicWall has released hotfixes for CVE-2026-102255, an unauthenticated server-side request forgery flaw in SMA 1000 appliances that could let attackers reach internal functions.
FBI and Secret Service warn FortiBleed is still hijacking Fortinet firewalls
A joint FBI and Secret Service advisory says the FortiBleed campaign, which harvested working credentials for more than 86,000 FortiGate devices, remains active and feeds ransomware gangs.
Long-running MALFEX npm campaign spreads RAT and stealer, reaches 40,000 downloads
Checkmarx says a single actor has used npm packages since August 2023 to deliver Overlord RAT and a Node.js stealer; three packages were still live on October 1.
Arizona court system breach exposes data of over 1.3 million people
Hackers stole court debt records, protection orders and foster care reports after an employee clicked a malicious link, Arizona's judiciary says.
ClickFix campaign hijacks 100+ Ukrainian websites to spread Lunex stealer
CERT-UA says a ClickFix campaign tracked as UAC-0277 compromised more than 100 Ukrainian websites to push Lunex, a stealer sold as malware-as-a-service.