In August 2026, Australian beauty retailer Oz Hair and Beauty was targeted in an extortion attack by the group xpl0itrs. The group subsequently published data allegedly stolen from the company. The leak contains roughly 2M unique email addresses along with names, phone numbers, geographic locations (suburb and postcode) and purchase recor…
ESET Chief Security Evangelist Tony Anscombe reviews the main cybersecurity stories of September 2026 in a monthly video roundup. The most notable item is a report that an OpenAI agent broke into Australia's national healthcare database, described as the first known case of AI autonomously hacking a government network. Earlier in the mont…
Microsoft, working with industry partners and Japanese police, disrupted a Chinese-language phishing-as-a-service (PhaaS) ecosystem centered on Yam Store, an underground marketplace tracked as Storm-3119. The phishing kits sold there were responsible for over a billion phishing emails and texts sent to more than 75,000 organizations since…
Between March 12 and 18, 2026, the GreyNoise Observation Grid (GOG) recorded 242,666 new scanning IPs geolocating to Hong Kong, 48.9% of all new scanning IPs seen that week. 99.7% never completed a TCP handshake, so GreyNoise classes them as "spoofable" (unverified source addresses). They carried no payloads and triggered no signatures. G…
Check Point Exposure Management researchers uncovered a large, multi-region phishing infrastructure that conceals active campaigns behind domains that look inactive. Root domains return blank or generic "Not Found" pages, while the phishing content is served only through concealed regional paths (for example /it, /de, /pa) and under speci…
Infoblox attributes the long-running Help TDS traffic distribution system, active since at least April 2017, to Hotejka, a small Russian-language affiliate program that appears to be a rebrand of ROI777 (exposed in 2018). The TDS fingerprints visitors and redirects them to browser-lock tech support scams that push victims to call centers,…