Stolen UpdraftCentral keys to backdoor WordPress sites

Stolen UpdraftCentral keys to backdoor WordPress sites

A threat actor has breached the website of TeamUpdraft, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral’s connection keys, which can send commands to connected websites. TeamUpdraft discovered unauthorized access to its infrastructure over the weekend and believes the hacker accessed the customer database. The developer offers several WordPress tools for … Read more

Hackers are hijacking D-Link and Ubiquiti devices to resell their stolen bandwidth

Hackers are hijacking D-Link and Ubiquiti devices to resell their stolen bandwidth

A proxyjacking campaign impacted devices in 34 countries and monetized victims’ Internet connections through a commercial residential proxy network. The operator installed Pawns.app, a legitimate bandwidth sharing application that allows users to earn money by sharing their Internet connections across devices without the owners’ consent. Pawns.app account holders are rewarded for allowing other users’ traffic … Read more

NEAR Intents recovers the entire stolen $3.8M after giving the exploiter an ultimatum

NEAR Intents recovers the entire stolen .8M after giving the exploiter an ultimatum

Full refund to NEAR Intents after exploiter is identified and given 48 hours to respond. NEAR Intents said it recovered nearly $3.8 million stolen during Thursday’s security breach. Cointelegraph reported on Friday that NEAR Intents has identified the person behind the security breach and has given them 48 hours to return the funds under “responsible … Read more

Does THORChain face a criminal charge over stolen Bitgate funds?

Does THORChain face a criminal charge over stolen Bitgate funds?

After suspected North Korean hackers exploited crypto exchange BitJet for $387.5 million last week, investigators were able to quickly flag and identify recipient addresses. Bitgate CEO Gracie Chen then controversially claimed that the decentralized cross-chain swap platform THORchain “denies service to these addresses.” THORChain replied: “Thorchain is decentralized and permissionless like Bitcoin, Ethereum, and BNB … Read more

Over 80,000 organizations have had their AI logins stolen: from shadow AI to LLMjacking

Over 80,000 organizations have had their AI logins stolen: from shadow AI to LLMjacking

The summer of 2026 taught the security industry a new term: the stolen AI login. As BleepingComputer reported, in late August, Anthropic responded to Infostealer’s takeover of Claude sessions by logging out users, deleting saved payment methods, and refunding charges identified as unauthorized. This is the supply side. SOCRadar’s AI Identity Exposure Report it’s about … Read more

BigCommerce data stolen via Ribon Apps hack

BigCommerce data stolen via Ribon Apps hack

Enterprise e-commerce platform BigCommerce fell victim to a supply chain attack that resulted in the theft of customer data. BigCommerce is a SaaS provider that enables merchants to build and manage online stores. It hosts the stores, provides backend tools and takes care of server security. Late last week, the company began notifying retailers that … Read more

Microsoft’s official Xbox controller can be stolen

Microsoft’s official Xbox controller can be stolen

An official Xbox wireless controller rarely drops this low, and you can get one now for £20 off. The business is a The Xbox Wireless Controller is down to £39.99 from the usual £59.99, a saving of £20, which is a third off the recommended retail price of Microsoft’s current generation official pad.. The Xbox … Read more