34 casos · pág. 2/2
The UK government has disclosed that the April 2025 breach of the Legal Aid Agency (LAA) was larger than first reported. Around 250,000 stolen records predate 2007, with the oldest dating to 1978. The LAA had initially said the stolen data covered applications, claims and payments from 2007 onward. The Ministry of Justice (MoJ) also found…
X said it removed more than 13,000 accounts involved in three suspected foreign influence operations targeting US political debate ahead of the 3 November 2026 US midterm elections. The platform linked the operations to Iran, Russia and China. It said the networks used inauthentic accounts to post and amplify political content aimed at ca…
Citizen Lab reported the first publicly confirmed zero-click mercenary spyware attack delivered through targeted online ads, a technique it calls "AdFection". The Israel-based adtech firm Discover-Tech allegedly acts as a front and middleman between the advertising ecosystem and spyware vendors. Citizen Lab traced attacks on at least 45 A…
Bank of America hired 1,000 extra contractors in Q2 to patch the volume of vulnerabilities surfaced by Anthropic's Mythos AI model, CEO Brian Moynihan said on the Q3 earnings call. The contractors supplement about 3,000 existing technical staff and are still on site. Moynihan put remediation costs at "a couple of hundred million plus", a …
Signals Corps sampled 217 million HTTP page responses from Common Crawl and found almost 8,000 sites communicating with AI agents through HTTP headers. Most of these headers were navigational pointers, but 30 sites attempted indirect prompt injection. Of those, 22 were little more than pranks, while others could plausibly affect a visitin…
Unknown attackers compromised thousands of internet-exposed refrigeration controllers late on Sunday, raising temperatures to as high as 122°F (50°C), spoiling food and causing fires at nearly 700 French supermarkets. France's ANSSI warned of widespread compromises of Danfoss controllers and a day later added Copeland and its Dixell brand…
A vehicle belonging to school photography firm Pret-a-Portrait was broken into overnight on 6-7 October, and a camera bag containing SD memory cards was stolen. The cards may hold photographs taken at Priory School in Lewes, UK, plus images of QR code cards showing pupils' names and class names. The same equipment was used for three furth…
A Register "On Call" column recounts a reader's account (pseudonym Daniel) of joining a UK school in 2020, after the school's network had been taken offline for three months by ransomware. Recovery relied on external contractors and a months-old backup. His audit found a password policy of six letters with no complexity or expiry, and use…
The October 2026 Windows security update changes the default handling of NTLMv1-derived credentials for Single Sign-On. Before the update, Windows allowed them and logged warning events. Now they are blocked. Wi-Fi, Ethernet and VPN authentication may fail in environments that still depend on the legacy protocol. Microsoft states this is …
The Administrative Office of the US Courts reported a "cybersecurity incident" affecting the Bankruptcy Noticing Center (BNC), which is operated by BAE Systems, Inc. for the Federal Judiciary. The BNC systems and websites were taken offline, halting the production and distribution of electronic and paper bankruptcy notices for federal ban…
A still-unknown actor hacked thousands of remote-controlled refrigeration systems across hundreds of French grocery stores, spiking temperatures, spoiling food and sparking fires. The incident fits a broader trend of extortionists and other attackers going after physical systems to maximise real-world pressure on victims. Earlier examples…
ConnectWise disclosed on October 16 that on October 15 it detected unauthorized access to application identities in its Cloud Backup (formerly SkyKick) environment. It suspended Cloud Backup, plus the integrated SaaS Security and Cloud Management services, as a precaution. As of 16:00 UTC on October 18 the services were still down, so end…
AI pen-testing startup Terra Security reports a sharp rise in security fixes later found to be bypassed or incomplete. The share of GitHub security fixes needing a follow-up advisory for a failed patch within 90 days held near 0.2% from 2019 to 2025 but jumped to 2.3% in 2026. Terra links the trend to the 2026 explosion in AI-driven vulne…
Ahold Delhaize, the Dutch grocery group behind Food Lion, Giant Food, Stop & Shop, Hannaford, Martin's and Albert Heijn, confirmed that a cyberattack caused by "malicious actions of others" forced it to proactively take IT systems offline, including websites and apps. The incident was first disclosed on October 12 and affected most of the…
