Attack on BAE-managed system disrupts US bankruptcy courts

The US’ bankruptcy courts are currently down owing to what officials are calling a “cybersecurity incident.” The Administrative Office of the US Courts said the websites and systems that support the Bankruptcy Noticing Center (BNC), which manages electronic comms related Read More …

Eiliko robot companion exposes private chats and can be hijacked

The Verge reports that Eiliko, a small AI robot companion made by Energize Lab, has serious security flaws that expose private conversations and let an attacker remotely change what the toy says. According to The Verge, researcher Sammy Azdoufal could Read More …

AI-Powered Espionage Campaign Targets Government Linux Infrastructure

Unit 42 identified a campaign targeting government entities and state-affiliated infrastructure, with observed activity spanning from October 2025–April 2026. We track this activity as CL-UNK-1211. In the operations we witnessed, the attackers relied on AI-generated payloads. Multiple artifacts deployed throughout Read More …

Bank of America had to hire 1,000 contractors to patch software flaws spotted by Anthropic Mythos

Bank of America, one of the largest financial institutions in the United States, was forced to hire a thousand people on contractor roles, and spend north of a $100 million dollars to fix all of the bugs found by the Read More …

Governments are hacking people with ‘zero-click’ spyware by showing them online ads

Security researchers at digital rights unit The Citizen Lab say government spyware makers are abusing global advertising networks to target and hack devices by serving malicious online adverts. A new report published Thursday by the University of Toronto lab, which Read More …

The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime

Over the past year, Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators, developers, and an illicit marketplace selling tools and infrastructure for large-scale phishing, enabling cybercriminal operations worldwide. Threat actors purchased and used these tools Read More …

Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant

Unit 42 investigated a multi-stage network intrusion against a telecommunications organization that occurred in September 2024, which we are tracking as cluster CL-STA-0954 (aka UNC5820). The attackers behind CL-STA-0954 achieved an initial compromise by exploiting CVE-2024-47575 against a centralized FortiManager Read More …

FBI arrests OpenAI employee accused of planting hidden recording device in conference room

OpenAI said it has alerted the FBI after discovering that an employee allegedly planted a hidden recording device in one of the AI maker’s office executive conference rooms. The employee, named by federal prosecutors as Saudi national Abdulrahman Alfozan, was Read More …

Hobbs and Whistles owner investigates hack that may have exposed customer data

The owner of Phase Eight, Hobbs and Whistles has said its websites and IT systems have been hit by a cyber-attack that may have compromised customers’ personal data. The South-African listed TFG London said it identified the “cybersecurity incident” at Read More …

Hundreds of French supermarkets hit by cyberattack on refrigeration systems

Several supermarkets were forced to discard fresh and frozen food, Intermarché said, and have yet to estimate the losses. The Paris prosecutor has opened an investigation. Hundreds of French supermarkets belonging to the Intermarché and Coopérative U chains have fallen Read More …