Researchers at Barracuda discovered a new phishing tactic where attackers embed AI prompt injections within phishing emails. These emails are crafted to deceive not only human recipients but also AI systems that may process them. By manipulating AI assistants, attackers aim to bypass security measures and extract sensitive information or execute harmful actions without detection. This dual-targeting approach raises concerns about the effectiveness of current email security protocols, as it highlights vulnerabilities in both human and AI responses to phishing attempts. Organizations need to be vigilant and update their security practices to counteract these evolving threats.
Advantest, a major Japanese chip testing company, has revealed that hackers breached its systems during a ransomware attack in February 2026. The attackers accessed and stole personal information from the company's servers, raising concerns about the security of sensitive data. While specific details on the type of personal information compromised have not been disclosed, the incident underscores the risks that companies face from cybercriminals. This breach not only affects Advantest but also raises alarms for its clients and partners who rely on the company's services. Companies in the tech sector are reminded to bolster their cybersecurity measures to protect against similar attacks.
Recent findings indicate a significant shift in how cyber risks are perceived and managed within organizations. Over the past five years, factors like resilience, AI governance, and human risk have started to converge in the workflows where employees operate. This suggests that companies are now recognizing that cyber threats are not just external but can also arise from internal processes and human behavior. As organizations adapt to this reality, they face increasing scrutiny from boards and stakeholders, pushing them to improve their cybersecurity practices. This evolution in understanding is vital for protecting sensitive data and ensuring business continuity in an increasingly complex cyber environment.
A researcher from Group-IB has connected a Telegram account involved in sending unauthorized notifications to ASOS customers with prior activities in trading gaming items. This incident raises concerns about the potential misuse of customer data, as the rogue notifications could mislead customers into thinking they are receiving official communications from ASOS. The implications of this finding suggest that the account may be part of a larger scheme that exploits customer trust for malicious purposes. As online shopping continues to grow, incidents like this remind users to be cautious about unexpected notifications and to verify their authenticity. Companies like ASOS must strengthen their security measures to protect customer data and prevent similar occurrences in the future.
The FBI and the Secret Service have issued a warning regarding the ongoing FortiBleed credential harvesting campaign, which targets Fortinet's FortiGate firewalls and SSL VPN gateways. This campaign has reportedly collected over 86,000 credentials, exploiting weaknesses in reused or leaked passwords and outdated password storage methods. Organizations using Fortinet products need to be vigilant, as attackers can gain unauthorized access to sensitive systems. The persistence of this threat highlights the importance of using strong, unique passwords and implementing robust security measures. Companies are urged to review their security protocols to protect against this active exploitation.
SonicWall has issued urgent hotfixes to address a serious server-side request forgery (SSRF) vulnerability in its SMA1000 series appliances. This flaw, classified as maximum severity, could allow attackers to send unauthorized requests from the server, potentially exposing sensitive information or compromising internal systems. Users of the SMA1000 series should act quickly to apply these hotfixes to protect their networks. The vulnerability poses a significant risk, especially for organizations relying on these devices for secure remote access. Companies are advised to review their systems and ensure they are updated to mitigate any potential exploitation.
Advantest Corporation has confirmed that a ransomware attack earlier this year resulted in the theft of personal information belonging to some individuals. The company is reaching out to those affected to inform them about the breach and the types of data that were compromised. While specific details about the data stolen have not been disclosed, such incidents can lead to identity theft and other serious consequences for the victims. This attack serves as a reminder of the ongoing risks posed by ransomware and the importance of strong cybersecurity measures. Individuals who receive notifications from Advantest should monitor their financial accounts and consider taking steps to protect their personal information.
A recent survey by Yubico revealed that half of cybersecurity professionals still depend on traditional passwords for authentication, despite growing concerns about their security. The survey highlights a disconnect between the awareness of more secure authentication methods, such as two-factor authentication and hardware security keys, and their actual implementation in workplaces. Many organizations continue to rely on passwords, which can be easily compromised, putting sensitive data at risk. This trend raises questions about the effectiveness of current security practices and the need for companies to adopt stronger authentication measures to protect their systems. As cyber threats evolve, it becomes increasingly important for businesses to move beyond passwords to enhance their security posture.
ASOS has confirmed that it was targeted in a cyberattack that compromised a third-party communication platform. As a result, hackers were able to send unauthorized notifications to ASOS users. This incident raises concerns about the security of third-party services that companies rely on for communication, as they can become potential entry points for attackers. Users of ASOS may have received misleading messages, which could lead to confusion or even phishing attempts. The situation underscores the need for companies to closely monitor their third-party vendors and ensure robust security measures are in place to protect customer information.
Hackread – Cybersecurity News, Data Breaches, AI and More
Actively Exploited
Over 100 Ukrainian websites have been compromised by hackers who used fake Cloudflare checks to distribute a malware known as Lunex Stealer. This malware is designed to steal sensitive information, including browser passwords, authentication tokens, and cryptocurrency wallets from users. The attack targets individuals visiting these hacked sites, tricking them into downloading the malware under the guise of a security verification process. This incident is particularly concerning as it affects a wide range of users in Ukraine, potentially leading to significant financial losses and identity theft. The use of legitimate-looking fake checks makes it harder for users to recognize the threat, emphasizing the need for increased awareness and caution when browsing online.
At the Pwn2Own competition in Ireland, ethical hackers have discovered 32 zero-day vulnerabilities across various products on the first day. These vulnerabilities affect popular software and hardware, raising concerns for users and companies alike. Zero-day vulnerabilities are serious because they can be exploited by attackers before the developers have a chance to issue a fix. This situation emphasizes the need for ongoing security assessments and rapid response from vendors to protect users. As the event continues, more discoveries are expected, further highlighting the importance of cybersecurity.
Anthropic has announced that it is broadening access to its AI models for selected cybersecurity professionals. This move allows these vetted teams to conduct tests with fewer restrictions, aiming to enhance security measures. The company also reported significant findings from its Project Glasswing initiative, revealing at least 129,000 verified software vulnerabilities discovered between April and July 2026. This large number of vulnerabilities indicates a pressing need for companies to address security flaws in their software. The initiative underscores the ongoing challenges in securing software systems and the importance of proactive measures by cybersecurity teams.
The Computer Emergency Response Team of Ukraine (CERT-UA) has reported that over 100 websites have been compromised with malicious JavaScript code to distribute LunexStealer, an information-stealing malware. This activity was detected in September 2026 and is linked to a threat group identified as UAC-0277. The malware targets users by masquerading as legitimate Cloudflare checks, tricking them into downloading the malicious software. This incident raises concerns for both website owners and users, as it highlights the ongoing risks associated with compromised web environments. Users who visit these affected sites may unknowingly expose their personal information to cybercriminals, making it crucial for individuals to be vigilant about the websites they access.
In October 2026, Android released updates that patched 25 vulnerabilities, including a significant flaw in the System component that could allow attackers to escalate their privileges. This particular vulnerability is critical, meaning it poses a serious risk to device security. Users of Android devices should install the latest updates as soon as possible to protect their systems from potential exploitation. The updates address weaknesses across various Android versions, ensuring that devices remain secure against these threats. Keeping software up to date is essential for maintaining security and preventing unauthorized access.
Atlassian has released patches for a serious vulnerability affecting eight of its products. This flaw allows unauthenticated attackers to access specific files in the web application root directory, which could lead to unauthorized data exposure. The affected products include popular tools like Jira, Confluence, and Bitbucket. Companies using these applications need to act quickly to apply the updates and safeguard their sensitive information. Failure to patch this vulnerability could leave systems open to exploitation, potentially compromising user data and organizational security.