According to WordPress security company Patchstack, a critical vulnerability is being exploited in the Bricksforge WordPress plugin. The vulnerability is tracked as CVE-2026-85097 and has a CVSS score of 9.8. Unauthenticated attackers can exploit it to upload arbitrary files and execute malicious code. This allows threat actors to gain full control over the targeted WordPress … Read more
The Norwegian Data Protection Authority (Datatilsynet) has fined Xandr, an advertising company owned by Microsoft, $9.6 million (NOK 92 million) for unlawfully processing and sharing sensitive data of Grindr users in the country. The data protection authority said this was the largest fine it had ever imposed. “We imposed such a large fine in this … Read more
IonQ announced Monday that it has signed a definitive agreement to purchase Elisity in an all-stock transaction valued at up to $1.3 billion. Up to $150 million of this amount is earnout compensation, depending on Elisity’s business performance. IonQ expects to complete the acquisition in the fourth quarter of 2026. The number of IonQ shares … Read more
AI SPERA’s Criminal IP, a cyber threat intelligence platform that provides actionable intelligence and attack surface visibility to security teams worldwide, will attend GovWare 2026 in Singapore. As security operations increasingly focus beyond asset discovery to understanding, prioritizing and responding to threats, Criminal IP introduces AITEM (AI-Powered Threat Exposure Management), its vision for the next … Read more
There is a large global market for low-cost Android devices. Criminals are aware of this and are meeting the demand through devices based on MediaTek platforms – albeit with malware pre-installed in the device firmware. When the recipient of such an affected device turns it on, the malware is present, invisible and available to any … Read more
Daiichi Kosho, a major Japanese entertainment systems manufacturer, announced that a malware infection at its contractor Nippon Columbia exposed more than 8.7 million customer and employee records. The company is the largest karaoke manufacturer in Japan 521 karaoke venues nationwide, including the Big Echo chain, one of the most popular karaoke box chains in the … Read more
Hackers have exploited two unpatched vulnerabilities in the AhsayCBS remote code execution (RCE) backup solution, cybersecurity firm Huntress warns. AhsayCBS is a centralized cloud backup server management console developed by Ahsay Systems. It offers backup policies, storage and user management and is popular with MSPs and system integrators. Tracked as CVE-2026-105133 And CVE-2026-105134The exploited vulnerabilities … Read more
A Chinese-speaking hacker launched cyberattacks that rocked South Korea’s financial sector earlier this month using the ARTEX AI penetration testing suite and Claude agents. The perpetrator targeted several Korean banks, including Shinhan Bank, KB Kookmin Bank and Hana Bank, by exposing customers’ personal and credit card information and in some cases causing system failures. The … Read more
Google has announced that several of its domains were recently affected by a hijacking of third-party country-code top-level domains (ccTLDs). The incident occurred last week and affected the ccTLDs .gh (Ghana), .sl (Sierra Leone), and .as (American Samoa), putting all domains with these suffixes at risk. “During these hijackings, attackers changed key DNS records and … Read more
Canadian cybersecurity executive Edward Dubrovsky was arrested in Pennsylvania in connection with alleged extortion activities that multiple reports have linked to the FBI’s ongoing crackdown on the ShinyHunters hacking group. Dubrovsky, 54, has held senior positions at cybersecurity firms that help victims of data breaches and ransomware negotiate extortion payments with cybercriminals. Yesterday, FBI Director … Read more