Microsoft disrupts Chinese-language phishing kits behind 1bn scam messages | #cybercrime | #infosec

Microsoft and Health-ISAC have seized and redirected domains behind three Chinese-language cybercrime services, YAM Store, CoGUI and Iron Man, Microsoft said on Wednesday. Since January 2026, the three services enabled more than 1bn malicious messages targeting over 75,000 organisations worldwide. More than 750 million of those messages targeted Microsoft customers, the company said. They targeted […]

France investigates cyberattack that hacked retailers’ refrigeration systems : NPR | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker

France has opened an investigation into a cyberattack that hit hundreds of food retailers, causing refrigerators to malfunction across the country. Transcript STEVE INSKEEP, HOST: France’s cybersecurity agency is investigating a cyberattack on supermarket freezers. Millions of tons of food went bad. NPR’s Eleanor Beardsley reports from Paris.ELEANOR BEARDSLEY, BYLINE: Cyril Scheubel manages a large […]

Federal judges rule Georgia can enforce its new social media law | #childpredator | #kidsaftey | #childsaftey

Metro AtlantaAttorney General Chris Carr says the ruling is ‘a major win for Georgia families.’Georgia won an appeal Thursday in a case challenging parts of its new law requiring social media platforms to verify the age of account holders and restrict use by minors. A panel of federal judges ruled the state can enforce the […]

Massive Cyber Attack Threatens Release of Data from 38 Maritime Companies | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware

Cybersecurity firms are alerting the maritime community to what appears to be a massive data breach possibly exposing 38 organizations ranging from shipping lines to ports, terminal operators, and agencies. According to the information, a newly emerged, shadowy “data-theft extortion operation,” n0n Group, posted the names of the 38 organizations on October 12 and gave […]

China-nexus espionage actor targets BeyondTrust support tool in zero-day campaign | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware

A suspected China-nexus hacker has exploited a zero-day vulnerability in BeyondTrust Remote Support since late August as part of an espionage campaign, according to a report released Thursday by Google Threat Intelligence Group. The hacker, tracked under the name Armory Castle, has deployed custom backdoors and used the support tool’s administrative access to harvest credentials […]

AI in Cybercrime: What 16 Underground Forums Reveal | #cybercrime | #infosec

Public discussion of AI-enabled cybercrime tends to lean heavily on vendor marketing and speculation about future capabilities. We wanted to measure what criminal practitioners are actually discussing, what tools they prefer, and where their attention is shifting.To find out, the Bitsight Cyber Threat Intelligence (CTI) research team analyzed thousands of posts across 16 selected underground […]

Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker

ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. Reports of the malicious activity began emerging on Friday, with administrators observing unauthorized access to client data in Microsoft 365 tenants due to a potential “SkyKick/CW breach.” Later on the […]