FBI Arrests Executive at Ransomware Negotiation Firm
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested an executive at a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSecurity. The New York Times reported today that the FBI has arrested a Canadian man in Pennsylvania on suspicion of assisting ShinyHunters. READ MORE...
iRhythm Data Breach Impacts at Least 360,000 People
Medical equipment provider iRhythm is notifying more than 360,000 people that hackers stole their personal information. The data breach was identified on June 8 and involved third-party-hosted business applications that stored certain iRhythm information, the company says. During its investigation into the incident, iRhythm determined that hackers accessed and exfiltrated patient data from the affected applications between June 3 and June 8. READ MORE...
Canonical Websites Disrupted in Second DDoS Attack This Year
Canonical's websites were disrupted last week by a distributed denial-of-service (DDoS) attack, months after a larger attack hit the Ubuntu maker's infrastructure. The company confirmed the attack on October 8 in a post on the Ubuntu Discourse forum. "Canonical's websites are under a sustained distributed denial of service attack," the company said, adding that some services might not be reachable at times. READ MORE...
Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks
Hackers are abusing legitimate Bing search-result redirects as click URLs in Google search ads to direct users to fake Claude installers that deliver ClickFix attacks. The technique, dubbed "Adception" by security researchers at Push Security, appears designed to evade advertising security checks by using Bing's trusted domain as the ad destination, before redirecting victims through a compromised website to the malicious download page. READ MORE...
AI systems are fully capable of carrying out nightmare attacks against infrastructure and nobody's ready
Autonomous AI systems are fully capable of carrying out a nightmare cyberattack scenario - finding and attacking critical operational technology and industrial equipment, and shutting down access to water, power, and other daily life necessities. If this happens, defenders may only have minutes to detect and block it, according to a Booz Allen Hamilton report. The consulting firm's operational technology (OT) lab tested eight scenarios. READ MORE...
Windows PCs missing key updates could lose security fixes in 2027
Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The certificates expire on May 17 or June 19, depending on the Windows version. Devices without replacement certificates will lose access to Windows Update, including security fixes delivered through the service. Microsoft is distributing the replacements through a process known as certificate rotation. READ MORE...
Hidden implant in Ledger hardware wallets linked to $93M theft
Three days after customers in Southeast Asia began reporting drained wallets, Ledger says the damage is limited. In its 72-hour update on X on October 11, the Paris-based hardware wallet maker said "all confirmed cases related to the disclosed draining incident of Oct 9th, 2026, involve devices sold through the Southeast Asia reseller CryptoBilis." On-chain researchers put suspected losses at more than $93 million. Ledger said its own systems and direct sales channels were not compromised. READ MORE...
ASOS Breach Reveals the Risks in Customer-Facing SaaS
The hackers who breached ASOS this week unearthed a serious security gap around customer-facing marketing and notifications platforms. On Oct. 6, a threat actor identifying itself as "Xuanye Group" announced that it had breached the multibillion-dollar British retailer. The group claimed to have stolen a wealth of personally identifying information (PII) about ASOS customers, of which there are around 17 million, according to the company. READ MORE...
Your AI agent is only as safe as the packages it downloads
Strip away the model names and the headlines, and this year's AI agent incidents share a feature that has little to do with how capable the models are. Nearly all of them ran through the software supply chain. Start with the case that set off the summer's wave of disclosures. In July, two OpenAI models undergoing a cyber-capability evaluation escaped their sandbox. They got out through a zero-day vulnerability in a package registry proxy that sat inside the evaluation boundary. READ MORE...
- ...in 1810, the citizens of Munich, Germany hold the first Oktoberfest.
- ...in 1901, President Theodore Roosevelt officially renames the "Executive Mansion" to the White House.
- ...in 1968, actor Hugh Jackman ("X-Men", "The Prestige") is born in Sydney, Australia.
- ...in 1979, Douglas Adams' comedic science fiction novel "The Hitchhiker's Guide to the Galaxy" is published.
