Cybersecurity Hacking News

Rising social engineering hits Apple users and crypto holders:

• Philly rocker G. Love loses $424K BTC after fake Ledger app on new Mac prompts...

Weekly breaches spotlight ransomware and supply-chain threats:

• Die Linke hit by Qilin: German socialist party (123k members) confirms employee data...

Google's bold strike against session hijacking: Chrome 146 rolls out Device Bound Session Credentials (DBSC), cryptographically locking cookies to...

Solo attacker breached 9 Mexican agencies using Claude Code (75% commands) and GPT-4.1 from Dec 2025-Feb 2026.

• 1,088 prompts generated 5,317...

Timeline of Rockstar's supply-chain breach exposes gaming's SaaS vulnerabilities:

• ShinyHunters claims access via stolen Anodot tokens to Rockstar's...

CPUID suffered a breach distributing STX RAT via trojanized CPU-Z and HWMonitor downloads. A stark supply-chain compromise targeting popular hardware tools.

• Critical DoS threats: F5's February 2026 notification fixes medium/low vulns enabling remote denial-of-service in BIG-IP, NGINX, and container...

Real-world tactics reshaping warfare:

• DDoS Overload: Botnet floods crippled Estonia's parliament, banks, and media for 22 days in 2007.
• Site...

ShinyHunters ramps up data extortion targeting US companies via Salesforce breaches:

• Abrigo Inc.: Over 1.7M records with PII and corporate data...

Joint FBI-CISA-NSA advisory confirms Iranian actors exploiting internet-facing PLCs (Rockwell/Allen-Bradley) in water, energy, govt sectors, causing...

Device code phishing exploded as a major threat:

• 37.5x increase in detected pages by April 2026 (15x in March)
• Kits like EvilTokens, VENOM,...

International takedown scores big win against phishing-as-a-service.

• Joint Op Success: FBI Atlanta and Indonesian Police seize domains, detain...

Supply-chain wake-up: Compromised Axios in GitHub workflow briefly accessed OpenAI's macOS app-signing certificates.

• No breach confirmed: Zero user...

Protect against Apple phishing: Scammers rely on social engineering to steal your data.

• Trick you into sharing passwords, verification codes, or payment details
• Leads directly to account theft
  Stay vigilant—real Apple won't ask this way.

E2EE protects transit only—not devices or accounts, leaving billions of unpatched phones vulnerable.

• Malware delivery: WhatsApp messages spread it...

Emergency Patches

• 🔥 Adobe Acrobat Reader CVE-2026-34621: Adobe released emergency updates for Acrobat Reader and Acrobat DC fixing...

• Zero-day exploited for months in Adobe Reader, now patched
• Emergency security update released for Acrobat Reader: Patch now
• Multi-angle urgency: Long-term attacks demand immediate action to protect users

Okta SSO compromise via social engineering enabled ShinyHunters access to Zendesk, exposing customer names, emails, phones, addresses, and order...

Urgent patch needed for Acrobat Reader's zero-day CVE-2026-34621 (CVSS 8.6), exploited in the wild since Dec 2025 via prototype pollution enabling...

AI-driven fraud explodes stats: US cybercrime hits $20.87B losses – first over $20B – with 1M+ complaints up 17%.

• Investment scams lead: $8.6B...