Cyber CrimeDreamHost breach exposes FTP credentials
DreamHost says attackers accessed its File Manager for two months, stealing FTP/SFTP logins and webmail session data.
> Search
30 results for “theft”
Cyber Crime
SecuritycPGuard update channel breached
OpsShield says attackers used stolen credentials to push a backdoor through cPGuard's autoupdate, affecting nearly 3,000 servers.
AI & MLLLMJacking Bills Hit $1m at Some Firms
Google's Mandiant says criminals are reselling stolen LLM access through proxy gateways, running up fraudulent cloud bills fast.
Cyber CrimeNorthflank breach exposes AI key theft risk
Cloud platform Northflank told customers to rotate all secrets after a breach led to unauthorized use of AI API keys stored on its systems.
Cyber Crimen0n's AI habit cost $7K, leaked its playbook
A newcomer extortion crew used AI to script attacks on 23 organizations, then left its own server wide open for researchers to read.
Cyber CrimeGhostAction Returns, Hits 340+ Maintainer Repos
A credential-theft campaign has compromised two open-source maintainer accounts to push malicious GitHub Actions workflows into more than 340 repositories.
Cyber CrimeDarkSword Kit Grows a Wallet-Stealing Arm
A new P7 DarkSword variant trims its on-device footprint while adding keychain theft, crypto-wallet extraction, and two-way command control.
Cyber CrimeFBI Ties Chinese Firm to Email Theft Portal
A joint advisory says hackers linked to Integrity Technology Group stole email and ran a web app giving third parties access to it.
Cyber CrimeAI Agent SDK Hit by Worm's Latest Strike
Shai-Hulud worm compromised Tensorlake's npm SDK version 0.5.144, stolen credentials and cloud keys at risk for developers.
Cyber CrimeASOS breach traced to impersonation tactic
ASOS says an employee's stolen credentials, obtained through social engineering, exposed names and contact details held on third-party platforms.
Cyber CrimeFake Firefox Wallets Target Recovery Phrases
Sixteen malicious Firefox extensions cloned Rabby and OKX wallet interfaces to intercept recovery phrases and private keys, researchers say.
Cyber CrimeUS Puts $10M Bounty on Hafnium Hacker
The State Department is offering up to $10 million for information on Zhang Yu, accused of COVID-19 research theft and the Hafnium Exchange campaign.
CloudAWS Agent Flaws Expose Control Gap
Repeated AWS agent security fixes that later resurfaced show the tension between agent autonomy and isolation, researchers say.
Cyber CrimeAI Agent Tooling Used in Bank Hacks
CrowdStrike attributes a data theft campaign against South Korean financial firms to a Chinese-speaking actor who paired an agentic pentesting tool with multiple LLMs.
Cyber CrimeShinyHunters Suspect Tied to Boeing Unit Extortion
A detained Jordanian teen accused of leading ShinyHunters allegedly extorted a former Boeing unit before his arrest, sources say.
Cyber CrimeFortiBleed Credential Theft Still Active, FBI Says
The FBI and Secret Service say the FortiBleed campaign remains active, with 86,644 Fortinet device credentials amassed across 194 countries.
Cyber CrimeArizona Courts Breach Hits 1.3 Million
A phishing email led to the theft of personal data for 1.3 million people from Arizona's court system, officials say.
Cyber CrimeChina-Linked TA419 Hits US AI Policy Experts
Proofpoint attributes credential phishing targeting US AI policy experts to China-aligned TA419, which impersonated figures including an Anthropic employee.
Cyber CrimePentagon HR Breach Hits 3 Million
Hackers accessed DMDC personnel records for nearly nine months, exposing Social Security numbers and military data of over 3 million people.
Cyber CrimeZimbra Bug Exploited for Mailbox Theft
Microsoft says attackers chained a patched Zimbra command-injection flaw into web shells, credential theft and cloud exfiltration.
SecurityRogue MFA Provider Can Siphon Passwords
Researchers show how a compromised Entra admin account can turn a trusted external MFA provider into a credential-stealing prompt.
Cyber CrimeFake Twilio npm Probe Hid Credential Theft
Researchers say a package posing as an authorized Twilio bug-bounty probe went through 11 versions before trying to exfiltrate API credentials.
Cyber CrimeThird-Party App Key Opens Door to BigCommerce Data Theft
Attackers used a compromised credential from the Ribon app to pull customer data from hundreds of online stores, exposing a soft spot in e-commerce supply chains.
AI & MLAI malware cuts humans out of C2 loop
Cisco Talos says it has identified CLOSEDQUORUM, a proof-of-concept implant that uses an LLM panel to drive an attack without a live operator.
Cyber CrimeFBI breach claim tied to PeopleSoft 0day
ShinyHunters says it used an unpatched Oracle PeopleSoft flaw to hit FBI systems, steal terabytes of data, and demand a report retraction.
Cyber CrimeFake Job Interviews Fuel North Korea Crypto Theft
A joint advisory links WaterPlum's developer-targeting campaign to over $10.7m in stolen cryptocurrency and 30,000 infected devices worldwide.
Cyber CrimeAllies Map North Korea IT Worker Web
A four-nation advisory ties a fake-recruiter hacking crew to North Korea's IT worker scheme and details Japan's first laptop farm takedown.
Cyber CrimeSigned Driver, Dead AV: A Fake LastPass Trap
A counterfeit GitHub installer for LastPass Authenticator loads a Microsoft-signed kernel driver that kills security tools before stealing passwords.
Cyber CrimeRust Developers Hit by Fake Job Call Scam
Rust team members and crate owners are being targeted by attackers who pose as recruiters to hijack credentials and push malicious packages.
Cyber CrimeCrowdSec Ties Code Theft to TanStack Flaw
CrowdSec says about 300 repositories were hit and links the theft to a May 2026 TanStack supply chain attack.