ISC Stormcast For Monday, August 31st, 2026 https://isc.sans.edu/podcastdetail/10074, (Mon, Aug 31st)

A Major Malvertising Campaign Spreads Across the Globe, Targeting Millions of Users A massive malvertising campaign has been uncovered, affecting millions of internet users worldwide. The campaign, which began in early August 2026, involves infected advertisements that exploit vulnerabilities in popular web browsers and operating systems. According to reports from the SANS Internet Storm Center … Read more

ISC Stormcast For Monday, August 31st, 2026 https://isc.sans.edu/podcastdetail/10074, (Mon, Aug 31st)

Cybersecurity experts at SANS Institute have identified a concerning trend in online attacks that’s leaving many organizations vulnerable to exploitation. In a recent surge of malicious activity, hackers are leveraging a previously unknown vulnerability in a popular web application framework to gain unauthorized access to sensitive systems. The affected frameworks, widely used by developers to … Read more

FulcrumSec claims Manchester Airports hack, theft of 86 GB of data

Manchester Airports Group Hit by Large-Scale Data Breach, Exposing Sensitive Customer Information A massive data breach has struck Manchester Airports Group (MAG), compromising approximately 86 GB of sensitive customer information. The attackers, claiming to be from the financially motivated extortion group FulcrumSec, have revealed that they stole detailed records related to car park bookings, in-airport … Read more

Chrome Web Store extensions caught stealing crypto, browser data

A massive malware campaign has been uncovered in Google’s Chrome Web Store, with multiple extensions stealing cryptocurrency, browser data, and sensitive information from unsuspecting users. The malicious software, which was delivered via automatic updates to five of the affected extensions, establishes an encrypted connection with command-and-control servers and injects malicious scripts into websites visited by … Read more

Anthropic warns infostealer malware is hijacking Claude sessions to drain usage

**Infostealer Malware Hijacks Claude Sessions, Draining Usage** In a disturbing development, users of Anthropic’s popular AI-powered chatbot Claude have reported having their login sessions hijacked by infostealer malware. The attackers are then using these stolen sessions to drain the victims’ usage limits, with some users even reporting unauthorized charges. According to an email sent out … Read more

FulcrumSec claims Manchester Airports hack, theft of 86 GB of data

Manchester Airports Group Hit by Massive Data Breach, Exposing Sensitive Customer Info A devastating data breach has struck Manchester Airports Group (MAG), compromising sensitive customer information and exposing over 86 gigabytes of data to potential misuse. The attack is claimed by extortion group FulcrumSec, which has a history of targeting organizations with significant financial resources. … Read more

Chrome Web Store extensions caught stealing crypto, browser data

A sophisticated malware campaign has been uncovered in the Google Chrome Web Store and Microsoft Edge add-ons marketplace, where malicious extensions have been stealing cryptocurrency, sensitive browser data, and even injecting fake browser updates. The operation, which may have started as early as 2024, involved at least 16 extensions that provided distinct functionalities, including draining … Read more

Anthropic warns infostealer malware is hijacking Claude sessions to drain usage

A widespread cyber threat has emerged, targeting users of the popular AI platform Claude. Infostealer malware, which typically infects computers through downloads or malicious apps, is hijacking active Claude sessions to drain usage limits and consume account resources. The affected accounts are being signed out, payment methods removed, and unauthorized charges refunded by the company. … Read more

TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor

A sophisticated cyber attack campaign, dubbed TerminalFix, has been unfolding in the shadows of the dark web, using a particularly insidious tactic to compromise unsuspecting websites. The attackers have managed to successfully deploy a reverse-tunnel backdoor on over 1,000 websites by disguising themselves as Cloudflare’s CAPTCHA service. This cunning ruse allows them to bypass traditional … Read more

YARA-X 1.20.0 Release, (Sun, Aug 30th)

The latest update to YARA-X, a powerful tool for hunting and analyzing malware, has brought significant improvements and bug fixes to the table. Released on August 30th, version 1.20.0 boasts 14 new features and a whopping 13 bug fixes, making it an essential update for anyone using this crucial cybersecurity resource. YARA-X is a command-line … Read more