Chinese hackers hijack auth flow, spy on isolated network for a decade
Chinese hackers took control of a target organization's authentication stack and maintained persistence for 10 years, with full visibility into the administrative activity. [...]
FBI disrupts massive AI-powered phishing service using a million URLs
In a coordinated effort, the FBI, working with Google and Black Lotus Labs, has dismantled a massive Chinese phishing-as-a-service operation called Outsider Enterprise with thousands of phishing websites used to steal credit card data and passwords. [...]
Rethinking MDR as Attackers and Defenders Embrace AI
For most of the past decade, managed detection and response was the answer to a real problem. Security teams couldn't staff around the clock, couldn't hire enough analysts, and needed someone else to handle the alert queue. MDR stepped in. It worked well enough. Until now. The threat landscape has c
Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code
Cybersecurity researchers have described what they say is a new class of attack that can trick artificial intelligence (AI) coding agents into running arbitrary code on developer machines. Called Agentjacking by Tenet Security, the attack can be triggered by means of a fake error report crafted usin
Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit
Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to harvest developer secrets. When it lands with root, it can also load an eBPF ro
Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even remote code execution. The vulnerability, tracked as CVE-2026-20253, is rated 9.8 on the CVSS scoring system. "In Splunk Enterpris
HDFC AMC data breach: Reset password, watch for SIM-swap – Mint
"We have reported the matter to the relevant authorities, including SEBI, CERT-In, the NSE and the BSE. We have also obtained an order from the ...
Anthropic Halts Fable 5, Mythos 5 AI Globally on US Order – Rediff Money
... CERT-In to counter emerging AI-linked threats. The high-level meeting was convened amid global concerns surrounding Anthropic's Claude Mythos ...
Rangers make approach to Hearts for Derek McInnes as new manager – Ibrox Noise
Nothing is ever a dead cert in life, but Derek McInnes is definitely a far better appointment for Rangers than a lot of the recent nonsense the club ...
Project Glasswing melts: US government suspends early access to Anthropic’s Fabl
Public-sector entities, including the Indian Computer Emergency Response Team (CERT-In), were also expected to receive access. Beyond the ...
The Convergence of AI and Cybersecurity Is Creating a New Talent Imperative – Th
Industry estimates suggest India's cybersecurity market is expected to grow at more than 18% CAGR through the decade, creating significant demand for ...
Cyber talent crunch widens as AI threats surge | The New Indian Express Chennai
... India Cybersecurity Talent Outlook 2026. The New Indian Express Chennai. Magzter Gold Title. This story is from the June 13, 2026 edition of The New ...
Hyderabad Attracts Global AI Security Investment – Urban Acres
... India's cybersecurity sector. Over the past decade, the city has attracted a growing cluster of cybersecurity firms, technology startups and ...
China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade
Instead of hiding on the laptops and servers defenders watch most closely, a China-nexus group spent close to a decade hidden inside the Linux login system itself. Sygnia, which tracks the group as Velvet Ant, says it backdoored the PAM and OpenSSH components that decide who is allowed to sign in, p
Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishing
Google on Friday said it's pursuing legal action against a Chinese cybercrime network, accusing it of using its Gemini artificial intelligence (AI) agent to send phishing text messages targeting Americans. The network is said to be behind the development and management of a phishing-as-a-service (Ph
400+ Arch Linux AUR Packages Hijacked to Install Rust Credential Stealer
Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to harvest developer secrets. When it lands with root, it can also load an eBPF ro
Build first, regulate later: Inside the 358 bn litre water crisis threatening In
Majority of data centres are built in water stressed zones. While data centres play an important role in supporting India's data protection, ...
Cybersecurity talent crunch fuels job hopping in India – News Karnataka
Cyber threats rising rapidly. The report highlights India's growing exposure to cyber risks. The Indian Computer Emergency Response Team (CERT-In) ...
Cyber Force not included in Senate defense policy roadmap
An amendment by Sen. Kirsten Gillibrand (D-NY) to the chamber’s fiscal 2027 national defense authorization bill that would have created the digital-focused service was defeated 14-13 when the Senate Armed Services Committee took up the nearly $1.2 trillion legislation behind closed doors this week.
The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm
A new analysis of The Gentlemen operation has revealed that the financially motivated threat group initially operated as an affiliate responsible for conducting double extortion attacks, while leveraging resources from various ransomware-as-a-service (RaaS) schemes like LockBit (aka Tenacious Mantis