CyberNews A Phishing Campaign Hits 347,000 Trezor Users After Brevo Hack Trezor, a leading provider of cold cryptocurrency storage solutions, has announced that approximately 347,000 of its customers received phishing emails after a third-party marketing platform it uses was hacked. The incident highlights the dangers of data breaches and the importance of secure practices for users. … Read more
A Critical GitLab Vulnerability is Being Exploited Just One Day After Disclosure Security firm WatchTowr has warned that threat actors are already targeting a newly patched vulnerability in GitLab, one day after the company announced fixes for the security weakness. The vulnerability, tracked as CVE-2026-85706, allows unauthenticated users to read arbitrary files from the GitLab … Read more
Trezor’s 347,000 Customers Targeted in Phishing Scam After Brevo Hack A recent breach of a third-party marketing platform used by cryptocurrency storage provider Trezor has put nearly 350,000 of its customers at risk. The attacker exploited how Brevo handles Single Sign-On (SSO) to access 138 accounts and sent phishing messages to the email addresses stored … Read more
Cybersecurity News Roundup: Attackers Evade Detection with Invisible Unicode Characters and Exploit Critical WordPress Flaw A recent wave of attacks has seen cybercriminals leveraging cutting-edge techniques to evade detection and compromise sensitive systems. One such tactic involves using invisible Unicode characters, which have been inserted into phishing lures to bypass filtering mechanisms. This campaign, tracked … Read more
GitLab Users Urged to Act Quickly After Critical Vulnerability Exploitation Spotted Just One Day After Patch Release A newly patched vulnerability in GitLab has been exploited by threat actors just 24 hours after it was publicly disclosed, according to a warning from attack surface management firm WatchTowr. The security weakness, known as CVE-2026-85706, is a … Read more
Cybersecurity experts have long relied on simulated phishing tests to gauge an organization’s vulnerability to these types of attacks. But new research from Pistachio, a company specializing in automated human risk management and employee security awareness training, is challenging conventional wisdom about what these tests can reveal. Pistachio sent over 2.47 million simulated phishing attempts … Read more
As tensions escalate in Yemen, a report from Anthropic has shed light on a worrying trend: users in Houthi-held territory are attempting to develop advanced military capabilities using artificial intelligence (AI) tools. Specifically, they’re trying to leverage AI to create sophisticated missiles and warheads that can be deployed on the battlefield. This development is particularly … Read more
Phishing Simulation Tests Reveal Alarming Truths About Employee Vulnerability A massive phishing simulation test conducted by security firm Pistachio has turned conventional wisdom on its head, revealing that employee vulnerability to phishing attacks is far more complex and nuanced than previously thought. The 12-month experiment sent over 2.4 million simulated phishing attempts to employees in … Read more
Advanced AI Technology Falls into Wrong Hands in Yemen Conflict A disturbing trend is emerging from the conflict-ridden region of northern Yemen, where Houthi rebels are attempting to harness the power of advanced artificial intelligence (AI) technology to develop sophisticated military capabilities. According to a report released by Anthropic, the developer behind the popular Claude … Read more
A Highly Coordinated AI Swarm Attack Highlights the Evolving Cyber Threat Landscape In a brazen and highly coordinated attack, hackers leveraged hundreds of artificial intelligence (AI) agents to compromise at least 440 instances of Papercut print management software, hosted by over 395 organizations in 48 countries. The assault, which occurred in late August, showcases the … Read more