attackers

Bitcoin firms are requesting tools from AI laboratories. These desired tools reportedly possess capabilities that attackers currently utilize.

AI browsers are vulnerable to a 'PleaseFix' zero-click agent hijacking attack where malicious instructions in content can grant attackers control over agents. The vulnerability has no simple fix, posing a significant security risk.

Non-custodial Bitcoin swap provider Boltz suspended swaps indefinitely as attackers discovered vulnerabilities faster than the team could address them.

Attackers are targeting open-source AI as Big Tech companies increasingly adopt and support the technology.

An attack on a police post in Pakistan's northwestern Hangu district resulted in the deaths of 11 officers and 15 attackers during an hours-long raid.

Five soldiers were killed in an attack on a security checkpoint in Thailand. The attackers stole three AK-47 rifles, three bullet proof vests, and three mobile phones from the soldiers. A low-level conflict has persisted in Thailand's southern provinces for two decades.

Thai authorities are searching for attackers who killed five soldiers and injured six civilians in a bombing and shooting attack in Narathiwat province. About 10 attackers used firearms and pipe bombs at a security checkpoint before fleeing.

Chick-fil-A warned customers that their loyalty accounts were breached between June 17 and June 19. Attackers used stolen credentials to access Chick-fil-A One accounts, exposing names, partial card numbers, and rewards balances.

A teenage rape victim is described as 'overwhelmed by fear and retraumatised' as her attackers are sentenced to jail. The victim's family states they still do not know the duration of the attackers' prison sentences.

Chinese firms have released two new large language models (LLMs) that rival top US models. The advancement may widen the gap between cyber attackers and defenders, raising concerns for cybersecurity professionals.

Two police officers were injured when attackers set fire to a police station in Ekiti. Vehicles, a generator, and other equipment were destroyed, along with damage to windows, doors, and ceilings.

Twelve people were killed in a shooting spree at an illegal miners’ site near Johannesburg. The attack occurred in the impoverished Jumpers settlement, with police suspecting the motive is tied to illegal mining activities linked to organized crime.

Attackers are exploiting vulnerabilities faster than organizations can identify and patch them. SecAlerts explains that faster vulnerability alerts can help reduce exposure and improve response times.

Attackers are leveraging AI to significantly accelerate the creation of exploits for CVEs, as reported in new research. This advancement outpaces the ability of existing security scanners to detect these threats.

Microsoft has released an out-of-band security patch for SharePoint, emphasizing its critical role in system access. The patch addresses potential vulnerabilities highlighted by the importance of SharePoint in both attack and defense strategies.

MFA is being bypassed as attackers exploit user behavior by tricking them into surrendering their second authentication factor, undermining the security intended by MFA. This method, known as 'prompt bombing,' bypasses the need to steal the second factor directly.

Finbar Sullivan was fatally stabbed on Primrose Hill, and his attackers continued to assault him as he lay wounded. The incident is being heard in court.

Security firm Checkmarx has been targeted in multiple supply-chain attacks over 40 days, including a breach of the Trivy vulnerability scanner and a ransomware attack. Attackers compromised GitHub accounts to deliver malware to users, stealing credentials like repository tokens and SSH keys.

A malicious trading website has been distributing malware that allows attackers to take control of users' browsers. The threat, highlighted by cybersecurity firm Malwarebytes, poses a significant risk to online security.

Gunfire and explosions occurred in Mali's capital and other cities, according to residents. The attacks took place in 2025, with motorists observed near the Africa Tower in Bamako.

Glasswing has secured code, but vulnerabilities persist in other areas like shadow IT, SaaS, and emerging shadow AI. Attackers can exploit these without needing advanced AI models.

The Bitwarden CLI was compromised when attackers uploaded a malicious @bitwarden/cli package to npm, containing a credential-stealing payload designed to spread to other projects. The incident highlights vulnerabilities in package registries and the risks of supply chain attacks.

A Ghanaian footballer was killed when armed attackers opened fire on a team bus during a return trip from a match. The attackers, described as masked individuals wielding guns and assault rifles, targeted the team members. The incident highlights a violent security threat in the region.

The CPUID website was compromised for six hours, redirecting trusted download links to serve malware instead of the legitimate HWMonitor software. Attackers hijacked part of the backend, exposing users to credential stealers and other malicious payloads.