A new Censys report showed that the use of ARTEX, an AI pentesting tool popular with threat actor, could be spreading far beyond initially reported campaigns

The CISA advisory follows a swathe of attacks in which hackers have tampered with the temperatures of internet-exposed supermarket refrigeration systems

BlackFog found a lack of visibility into data being shared with AI tools, even those approved for use in the enterprise

White House network addresses were used as exits by 28 residential proxy services

Zyxel’s June GS1900 patch did not block the exploit used against 996 switches, Binarly found

The Indian CERT said a new cyber malicious group tracked as ‘Crafty Flacon’ is using Chinese-made AI tools to attack fintech and crypto organizations

Trellix observed a 41.4% drop in China-nexus activity between April and September, which may reflect changing PRC strategic priorities

Bitdefender warns that unfixed GhostMap bug could force users to factory reset their device

Cyber Monitoring Centre report claims an IT failure at the UK’s NATS air traffic services provider cost over £30m

SlippyNunchucks used DNS hijacking to turn Sogou brand promotions into a malware channel

APT29 compromised Ukrainian analytics tracker Plerdy to serve n-day exploits to mobile users

A supplier of the French National Blood Service was hit by a cyber-attack in which hackers turned cold rooms hosting blood samples up to 110°C (230°F)

Bitdefender highlighted a unique human-AI approach during a September attack on a UK school estate, which resulted in financial data being exfiltrated

A German-led coalition of law enforcers has intensified efforts to strike at a €4m investment fraud scheme

Binance has revealed details of how North Korean hackers stole $6.4bn theft of crypto assets

Russia-aligned Gorbag has hit Ukrainian justice, local government and defense bodies since 2025

Attackers drained hot wallets on outdated BTCPay Server instances, with $1.63m traced so far

The incident has reportedly resulted in temperatures being changed on supermarket refrigerators, reminiscent of an attack that affected French retailers last month

The UK’s cyber chief has warned that AI-powered malware is highly likely to feature in ransomware attacks targeting British critical infrastructure by 2028

Google Mandiant has warned of the high cost of hijacked access to large language models, or LLMJacking