Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365

New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks

A newly discovered cyber attack campaign has been observed delivering a previously undocumented malware family called SharkLoader that acts as a loader for deploying Cobalt Strike Beacon on compromised hosts. Kaspersky, which is tracking the activity under the moniker StrikeShark, said the campaign has targeted a diplomatic organization in Indonesia, government organizations in Taiwan,

Civilians behind international police probe into Russian cybercriminals

An international joint operation targeted SocGholish malware which exploited thousands of WordPress sites with the aim of gaining unauthorized access to computer systems.

US seizes 400 sites illegally streaming World Cup matches

​The United States Government has ​seized hundreds of internet domains that were engaged in the unauthorized streaming of matches in the ​2026 FIFA World Cup in violation of U.S. copyright law. ​The Department of Justice ​said the ​approximately 400 ​sites ​affected used their domains for profit, to disrupt the international networks that profit from the [] US seizes 400 sites illegally streaming World Cup matches

Fact check: Scam texts link to fake Freedom Mobile websites

Scammers are attempting to steal your financial information through fake texts, phone calls and websites impersonating Freedom Mobile.

Scammers Are 'Dangling the One Thing' PC Gamers Won't Get Anytime Soon: GTA 6

GTA 6 malware and scams are on the rise, and they’re targeting PC and Android users because Rockstar is skipping those platforms for the game’s launch.

American youth radicalized online, busted in suspected terror plots after hating country on social media

Federal authorities say online radicalization linked foiled UFC White House plot to broader pattern of internet-connected terror cases across the U.S.

“BioShocking” tricks AI browsers into leaking your passwords

Security researchers convinced six AI browsers they were playing a game. The browsers then handed over their users’ passwords and treated it as a win. The firm behind it, LayerX, calls the technique BioShocking, and says it worked on every agent it tried. The list reads like a roll-call of the new AI browser market: [] This story continues at The Next Web

Fake Job Offers Impersonate Netflix, OpenAI, and FIFA to Steal Google Credentials

A fake recruitment phishing campaign impersonates major brands and uses trusted HR platforms to steal Google account credentials. The post Fake Job Offers Impersonate Netflix, OpenAI, and FIFA to Steal Google Credentials appeared first on TechRepublic.

Hong Kong, mainland police smash HK$16.8 million cross-border phishing syndicate

Hong Kong police and mainland authorities have smashed a cross-border phishing syndicate that swindled victims out of HK16.8 million (US2.14 million) by impersonating the Water Supplies Department, resulting in 15 arrests between March and June. The joint enforcement action, code-named Operation Boldhawk, targeted a criminal chain that sent malicious text messages to residents in the city, Superintendent Hui Yee-wai of the police cyber security and technology crime bureau said on Friday. “This...

FACT CHECK: Registration links to P20,000 AICS, AKAP cash aid are fake

The links lead to unofficial websites that may expose users to potential phishing schemes

Why this fully agentic ransomware attack is giving researchers nightmares

JadePuffer could be the first reported case of a ransomware attack driven by AI from start to finish. How can businesses respond?

Anthropic Customer Sues US Government After AI Ban Cuts Off Access to Fable 5 and Mythos 5

A legal technology startup has launched a fresh challenge against the US government after losing access to Anthropic’s most advanced artificial intelligence models, escalating a growing dispute that now spans export controls, national security concerns, and the future of frontier AI development. Legion LegalTech Corp., a California-based company that builds AI-powered legal software, filed a lawsuit against federal officials after a June 12 directive forced Anthropic to restrict access to its flagship Fable 5 and Mythos 5 models. The order, issued by the Bureau of Industry and Security, required Anthropic to prevent foreign nationals from accessing the systems, triggering widespread

a16z-backed crypto firm rebrands, shifts focus to solving AI’s global copyright headache

a16z-backed crypto firm rebrands, shifts focus to solving AI’s global copyright headache

Seeking Stamina Boosters, Thousands Fall Into Cyber Extortion Trap

Operating through sophisticated call centers, the gang exploited personal vulnerabilities by selling fake stamina-enhancing medicines online and then extorted the buyers by posing as law enforcement...

EvilTokens device-code phishing kit totally more evil than we all thought

It's a 'complete BEC operations environment,' Talos researcher says

Lost access to your crypto wallet? Don’t Google your way out of it

A new scam is targeting cryptocurrency owners by disguising malware as wallet recovery software for forgotten seed phrases.

Hackers Breach Sensitive Government Network Used for World Cup and Major U.S. Event Security

The platform is unclassified. The information inside it may not be.

Egg producers will pay $3.3M and donate 53M eggs in settlement over price fixing claims

The U.S. Justice Department and 17 states have reached settlement agreements with three major egg producers over allegations that the companies illegally colluded in a multiyear scheme to raises prices. Subscribe: http://smarturl.it/AssociatedPress Read more: https://apnews.com​ This video may be available for archive licensing via https://newsroom.ap.org/home

An AI startup is suing the US government for taking away Anthropic’s new model

Anthropic’s Claude Code has become one of the most popular AI coding tools. Bloomberg/Getty Images AI startup Legion sued the government over losing access to Anthropic’s top AI models. Legion said the directive harmed its business. The lawsuit adds another layer to Anthropic’s clash with the Trump administration. One AI startup just sued the US []

Discord’s New Face-Scan Vendor Comes with a Familiar Promise

The service that once asked for nothing but a username now wants your face and your government ID. The post Discord’s New Face-Scan Vendor Comes with a Familiar Promise appeared first on Reclaim The Net: Free Speech, Privacy, Digital Rights.

Interpol's web finally snares Scattered Spider hacker [Followup]

[link] [1 comments]