Attackers

A teenage rape victim is described as 'overwhelmed by fear and retraumatised' as her attackers are sentenced to jail. The victim's family states they still do not know the duration of the attackers' prison sentences.

Chinese firms have released two new large language models (LLMs) that rival top US models. The advancement may widen the gap between cyber attackers and defenders, raising concerns for cybersecurity professionals.

Two police officers were injured when attackers set fire to a police station in Ekiti. Vehicles, a generator, and other equipment were destroyed, along with damage to windows, doors, and ceilings.

Twelve people were killed in a shooting spree at an illegal miners’ site near Johannesburg. The attack occurred in the impoverished Jumpers settlement, with police suspecting the motive is tied to illegal mining activities linked to organized crime.

Attackers are exploiting vulnerabilities faster than organizations can identify and patch them. SecAlerts explains that faster vulnerability alerts can help reduce exposure and improve response times.

Attackers are leveraging AI to significantly accelerate the creation of exploits for CVEs, as reported in new research. This advancement outpaces the ability of existing security scanners to detect these threats.

Microsoft has released an out-of-band security patch for SharePoint, emphasizing its critical role in system access. The patch addresses potential vulnerabilities highlighted by the importance of SharePoint in both attack and defense strategies.

MFA is being bypassed as attackers exploit user behavior by tricking them into surrendering their second authentication factor, undermining the security intended by MFA. This method, known as 'prompt bombing,' bypasses the need to steal the second factor directly.

Finbar Sullivan was fatally stabbed on Primrose Hill, and his attackers continued to assault him as he lay wounded. The incident is being heard in court.

Security firm Checkmarx has been targeted in multiple supply-chain attacks over 40 days, including a breach of the Trivy vulnerability scanner and a ransomware attack. Attackers compromised GitHub accounts to deliver malware to users, stealing credentials like repository tokens and SSH keys.

A malicious trading website has been distributing malware that allows attackers to take control of users' browsers. The threat, highlighted by cybersecurity firm Malwarebytes, poses a significant risk to online security.

Gunfire and explosions occurred in Mali's capital and other cities, according to residents. The attacks took place in 2025, with motorists observed near the Africa Tower in Bamako.

Glasswing has secured code, but vulnerabilities persist in other areas like shadow IT, SaaS, and emerging shadow AI. Attackers can exploit these without needing advanced AI models.

The Bitwarden CLI was compromised when attackers uploaded a malicious @bitwarden/cli package to npm, containing a credential-stealing payload designed to spread to other projects. The incident highlights vulnerabilities in package registries and the risks of supply chain attacks.

A Ghanaian footballer was killed when armed attackers opened fire on a team bus during a return trip from a match. The attackers, described as masked individuals wielding guns and assault rifles, targeted the team members. The incident highlights a violent security threat in the region.

The CPUID website was compromised for six hours, redirecting trusted download links to serve malware instead of the legitimate HWMonitor software. Attackers hijacked part of the backend, exposing users to credential stealers and other malicious payloads.