ISE authentication bypass under active attack just days after another Cisco zero-day sent admins scrambling to patch

Kaspersky experts have discovered a new MovieReaper campaign. The multi-stage Trojan spreads through movie torrents, such as "The Odyssey," and uses the Solana blockchain to hide its C2 infrastructure.

Attackers claiming responsibility for Revolut’s data breach say they want $3M in Monero, contradicting earlier claims of a 10,000-BTC ransom. The post Revolut faces $3M ransom demand after data breach, report appeared first on Protos.

A glaring loophole in digital music distribution makes it very easy to piggyback on the talent of real artists with AI generated music.

Cyberattacks on oil tankers show how connected ships can expose navigation and critical systems, threatening safety, ports and global trade. U.S. Coast Guard personnel and FBI agents boarded two Texas‑bound energy tankers last month after cyberattacks hit the vessels while they were underway, according to U.S. officials. One of the ships was the VL Prosperity, […]

Comments

Eve's dropping in on Alice and Bob

Newly unsealed court filings show Microsoft privately called OpenAI's data practices "theft" while both companies scraped paywalled Times content, built datasets from it, and warned internally it would gut publishers.

Group plans to be largely out of commission for several weeks.

Below are a few of the secrets that I've found so far. Flock cameras run on a modified version of Android. The specific build that this Flock camera was running at the point in time the firmware was extracted was from June 5, 2025.

Despite being a relatively recent build, the Flock camera was running Android 8.1. This version of Android was released in 2017, and officially stopped getting support from Google in 2021 (see the Android end-of-life page for more info). And despite Google publishing security fixes for Android 8.1 until 2021, the Android patch level is 2018-06-05. This camera is missing Android security updates for the last eight years.

If you own a Jaguar XJ220 or the rarer XJR-15, you’re probably not short on money or real estate. You may, however, be finding it hard to lay your hands …read more

Foreign Tankers Were Bound for Texas When Networks Were CompromisedThe Coast Guard and FBI boarded two foreign oil tankers bound toward Texas after signs their networks were compromised, inspecting IT and operational systems as authorities examined possible links to the broader U.S.-Iran conflict. "There are no reports of operational disruptions," the FBI said.

While people around the U.S. are tearing down Flock cameras, one group of hackers went a step further: extracting the camera's software too.

Hiscox highlighted the huge financial and operational costs of cyber-attacks, with the average cost of an incident at $52,000

Russian intelligence will offer you two hundred dollars to take some photographs of an address. Tens of thousands to kill a man. When the money fails, sabotage is asked. The numbers are public now because the Southern District of New York unsealed charges on 15 September against five members of a network run for the … Continue reading Russian “Simpler Job”: Sabotage Price Lists and the Dutch Rail Outage →

Data protection chiefs call for 'immediate review' of data protection models

Comments

A suspected compromise of an Italian government PEC account may have allowed threat actors to impersonate law enforcement and obtain sensitive data from hundreds of Revolut customers. The Revolut data exposure may be part of a much broader cyber incident involving compromised Italian government infrastructure. Revolut has confirmed that its systems were not breached. Instead, […]

Google has patched a high-severity zero-day in the Pixel cellular modem after finding evidence that the vulnerability was exploited in limited, targeted attacks. Google has released its September 2026 Pixel security update, addressing a large set of vulnerabilities, including a high-severity flaw, tracked as CVE-2026-58704 (CVSS score of 8.0), in the cellular modem that has […]

The agencies issued a joint statement saying the “joint security boardings” came in response to “indications that the networks of both vessels were compromised.” The post Coast Guard, FBI board US-bound foreign ships in order to probe for cyberattacks appeared first on CyberScoop.

Comments

Munsif Vengattil / Reuters: Police in Gujarat, India, to question Google after uncovering 500K+ Gmail IDs and passwords used to send hoax bomb threats to government offices since 2022  —  Indian police will question Google over a lack of safeguards after smashing a criminal network that set up and managed …

Many security teams ignore online gambling and casino domains, especially Chinese-language websites. Over the last decade there’s been massive growth in both gambling websites catering to Chinese audiences and similar casino sites targeting people all over the world. There’s also been growth in legal gambling and casino websites, but the scale of these compared to the malicious casinos is marginal.

Germany in WWI ran a sabotage campaign against American factories and shipping while America was still officially neutral. Franz von Papen infamously organized it out of the embassy from 1914. Wilson expelled him in December 1915 and leaked the Albert papers to the press that August, but he pointed the domestic investigative apparatus at labor … Continue reading Dutch Rail Sabotage Four Days After NATO Staged Trains for the Russian Front →

Introduction

Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the phishing simulation? Does this SIEM rule fire on this particular technique? And, in more mature organizations, this testing happens continuously rather than as a one-off exercise.

But no matter how much you validate against these