data theft news
9 stories
FBI to ShinyHunters: 'We know how to find you'
The Federal Bureau of Investigation has issued a public warning to the ShinyHunters cybercrime group, urging remaining members to surrender following the arrest of an alleged leader in the Netherlands. Brett Leatherman, Assistant Director of the FBI's Cyber Division, stated in a video message that the bureau is confident in its ability to locate the group, emphasizing that past groups who…
Loyalty points fraud is funding hacker holidays (Lock and Code S07E18)
Cybercriminals are increasingly targeting loyalty points programs, converting stolen points into real-world value for fraudulent purchases, including funding vacations. This emerging form of digital fraud leverages the fact that many consumers do not monitor their loyalty accounts with the same scrutiny applied to bank accounts.
Australian Police Arrest Alleged TeamPCP Cybercrime Masterminds
Australian Federal Police (AFP), with assistance from the U.S. Federal Bureau of Investigation (FBI), have arrested two individuals in Perth, Australia, identified as alleged masterminds of the cybercrime group TeamPCP. The arrests took place on Wednesday, August 26, 2026.
Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection
A new attack technique, dubbed Cryptographic Context Injection, has been demonstrated to bypass artificial intelligence (AI) safety filters, potentially leading to the theft of user chat histories and other sensitive data. The technique, developed by Adversa AI researcher Rony Utevsky, involves embedding malicious instructions within AES-encrypted ciphertext and tricking AI models into…
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More
This week's cybersecurity reporting highlights a diverse array of threats and developments, including the exploitation of legitimate signed drivers for malicious kernel operations, a significant cyber espionage campaign attributed to an Iran-based threat actor targeting academic institutions, and the proliferation of malware leveraging DLL sideloading techniques. The landscape also includes…
Rogue ransomware affiliate poses as recovery firm to steal payments
A suspected ransomware affiliate is reportedly posing as a recovery service called "Ransom Busters," contacting victims of cyberattacks before the incidents become public. This group claims to possess decryption keys and the ability to delete stolen data for a fee, ranging from $20,000 to $60,000.
New Helix Group Targets SharePoint Data via Vishing and MFA Abuse
A new data extortion group, dubbed Helix, has emerged, employing voice phishing (vishing) and multi-factor authentication (MFA) abuse to compromise SharePoint environments and exfiltrate data. The group's primary objective is to extort victim organizations by threatening to publish stolen information or sell it to other cybercriminals.
Dialogflow CX 'Rogue Agent' Flaw Enabled AI Chatbot Data Theft
Security researchers at Varonis have disclosed a vulnerability in Google's Dialogflow CX platform that could have allowed attackers to steal sensitive data from AI-powered chatbots. The flaw, which Varonis has named the "Rogue Agent" flaw, has since been addressed by Google with a deployed fix.
Phishing Campaign Deploys JavaScript-Driven PureLogs Variant to Steal Sensitive Data
A recent phishing campaign is distributing a variant of the PureLogs malware, designed to steal sensitive data from compromised Windows systems. The campaign employs a multi-stage attack chain involving obfuscated JavaScript, PowerShell, and process hollowing techniques.