France’s EFS Blood Service Hack Ran Through a Vendor’s Supplier
Hackers reset French plasma cold rooms to 110°C through refrigeration vendor Coolworld.
Hackers Hijack cPGuard Security Updates, Compromise 2,950 Servers
Attackers breached OPSSHIELD's billing system, stole an update key and pushed malicious software that harvested root credentials, SSH keys and database passwords.
T-Mobile Says Phishing Credential Compromises Fell More Than 99%
The carrier says attackers entered through a third-party wireline provider and posed as a trusted router at its network edge.
Attackers Exploit Critical Node-RED Flaw in Siemens Industrial Gateways
Automated attacks are abusing a Node-RED vulnerability to run commands and plant backdoors.
Supermarket Fridge Hacks Spread to Belgium, Sweden, Luxembourg and Estonia
Attackers pushed some freezers to 122°F, three weeks after a similar attack hit hundreds of French supermarkets. No one has named the equipment involved this time.
Attackers Hide Prompts From Humans, Aim Them at Inbox AI Agents
Sublime Security's Luke Wescott explains how fake-invoice scammers use invisible characters to dodge filters, and why AI agents with their own inboxes raise the stakes.
The AI Kill-Switch Problem Is That There Is No Kill Switch
Everyone has an AI kill switch, but the buttons are wired to different parts of the machine. SPB maps the emerging stack of runtime, identity, policy, network and infrastructure controls.
The PHP2Shell Checklist: You’re Not Safe Until You’re Safe
Installing the emergency patch is the first step, not the finish line. Here are the places PHP2Shell can outlive a “patched” status — and what it takes to prove it is gone.
A Hidden Flaw in the Web’s Plumbing Set Off a Global Scramble
Two newly discovered weaknesses in PHP, a programming language that runs a large share of the world's websites, could let strangers take over web servers. A patch is out, but experts say installing it is only the beginning.
Lazarus Turns Security Software Against Users, Adds AI and Post-Quantum Crypto
Researchers say Operation FlashHole uses mandatory South Korean security software as part of a stealthy infection chain, with AI-built lures and post-quantum cryptography protecting later malware stages.