Cybercriminals claim breach of Oracle PeopleSoft servers at 100-plus organizations

The ShinyHunters hacking gang claims to have compromised the Oracle PeopleSoft servers of more than 100 organizations, including many universities.

Experts warn hackers are hiding malware inside Google’s own ad systems — here’s what we know

Hackers routed a multi-stage malware campaign through Google’s ad infrastructure, using dynamic branding and in-memory execution to evade detection entirely.

CISA Tells US Agencies to Fix Security Bugs in as Little as 3 Days Thanks to AI Threats

“Defenders cannot afford to take weeks to patch,” one Cybersecurity and Infrastructure Security Agency official warned on Wednesday.

OpenAI says China-linked accounts used ChatGPT to fuel opposition to US data centres
OpenAI says China-linked accounts used ChatGPT to fuel opposition to US data centres

OpenAI said a cluster of ChatGPT accounts linked to China attempted to stir up local opposition to US data centres by posing as Americans and posting AI-generated content about rising electricity costs. The company nicknamed the campaign “Data Center B…

Trump Risks Key Surveillance Authority Over ‘Unqualified’ Spy-Chief Pick

US lawmakers are alarmed that Bill Pulte, a housing official with no intelligence experience, is poised to take charge of one of the government’s most powerful surveillance tools.

North Koreans behind nearly half of US tech industry hacks, says CrowdStrike

North Korean hackers posing as remote IT workers and recruiters remain a major threat to U.S., European, and Asian companies, accounting for about half of all attacks over the past 12 months.

This Microsoft Defender zero-day could give hackers unprecedented access to your system

Chaotic Eclipse strikes again, releasing their seventh zero-day in just two months.

Researchers tricked an OpenClaw AI agent into leaking AWS keys and customer data with a phishing email
Researchers tricked an OpenClaw AI agent into leaking AWS keys and customer data with a phishing email

Security researchers at Varonis built an OpenClaw email agent, connected it to a Gmail inbox with fake company data, and then phished it. The agent, dubbed Pinchy, handed over AWS credentials, database connection strings, and a customer export without …

A Chinese state-linked botnet has grown to 1,500 hacked routers and is mapping vulnerable targets within hours of disclosure
A Chinese state-linked botnet has grown to 1,500 hacked routers and is mapping vulnerable targets within hours of disclosure

A covert botnet linked to Chinese state-sponsored hackers has more than doubled in size and is now scanning for newly disclosed vulnerabilities within hours of publication. The JDY botnet comprises over 1,500 compromised small office and home office ro…