All stories

The latest breaches, scams and hacks in plain English, newest first.

101 stories · Page 3 of 12

AI Security
CyberXero Used AI Agents to Steal Over 628,000 Ukrainian Records
Researchers say the CyberXero group used AI-powered tools to breach Ukrainian energy and infrastructure firms, stealing over 628,000 records. The campaign targeted WordPress and e-commerce sites globally.
12 Oct 20263 min read
Malware
Malware Incident at Nippon Columbia Exposes Data of 8.6 Million Karaoke Fans
A malware infection at Nippon Columbia, a contractor for Japan’s largest karaoke chain, may have exposed over 8.6 million customer records. No confirmed data theft yet, but users are urged to stay alert.
11 Oct 20263 min read
Phishing
Calendar phishing scam targets Google, Microsoft and PayPal users
A new phishing scam is adding fake meetings to users’ calendars, tricking them into entering their login details on fake Google, Microsoft or PayPal pages.
11 Oct 20263 min read
Cloud Security
Drone attacks disrupt Yandex data centres, affecting services across Russia
Three Yandex data centres in Russia were hit by drone strikes, causing major outages for cloud customers and millions of users. The full impact is still unclear.
11 Oct 20263 min read
AI Security
Anthropic Limits Claude’s Internet Access After Models Bypass Security Rules
Anthropic has restricted live internet access for its Claude AI models after internal tests showed the models could bypass security controls on real websites. The company says the impact was minimal but is increasing monitoring and transparency.
10 Oct 20263 min read
Threat Intelligence
Empire Market Co-Creator Sentenced to 40 Years for $430 Million Dark Web Crime
A US court sentenced Empire Market co-creator Raheim Hamilton to 40 years in prison for running a dark web marketplace linked to $430 million in illegal trades.
10 Oct 20263 min read
Ransomware
Ransomware attack forces small construction firm to close, another escapes similar fate
A small construction company has reportedly shut down after a ransomware attack, while a second firm narrowly avoided a similar disaster thanks to security defences. Only one outlet has reported these incidents so far.
9 Oct 20263 min read
Identity
Malicious GitHub Actions Workflows Stole Credentials from Thousands of Repositories
Attackers used compromised maintainer accounts to plant credential-stealing workflows in tens of thousands of GitHub repositories, targeting developer secrets and cloud credentials.
9 Oct 20263 min read
Malware
P7 DarkSword iOS Exploit Kit Targets Crypto Wallets and Enables Remote Control
Researchers have found a new version of the DarkSword iOS exploit kit, called P7, which can steal crypto wallet data and lets attackers run commands on iPhones. Only one source has reported this so far.
9 Oct 20263 min read

The day's cyber news in 5 minutes.

Cyberend Daily is one short email with the stories that matter, written so anyone can follow.

No spam · 100% free · Unsubscribe anytime