Category: Cyber Security News

This week’s ThreatsDay Bulletin highlights a wave of social engineering, trojanized apps, phishing frameworks, stealer malware, botnets, and exposed systems being abused across Windows, Android, IoT, and cloud environments. From ReliaQuest and Microsoft Purview to ShinyHunters, Aeternum, ToxNetV2, and PackClient, attackers keep using trust, urgency, and weak visibility to gain access…

FulcrumSec claimed responsibility for the Manchester Airports Group data breach and said it stole about 86 GB of information, including detailed customer, booking, and upcoming travel records. BleepingComputer’s review suggested the exposed data was broader than MAG first disclosed and could be used for convincing phishing or scam attempts against travelers. #FulcrumSec #ManchesterAirportsGroup #MAG

Multiple malicious Google Chrome and Microsoft Edge extensions were used to deliver a highly extensible malware framework that stole cryptocurrency, sensitive data, and browser history while also injecting ClickFix lures. Socket says the campaign may have been active since early 2024, with one extension, “Enable Right Click & Copy — Smart Unlock + OCR,” reaching at least 70,000 Chrome users before removal. #Chrome #MicrosoftEdge #Socket #EnableRightClickCopySmartUnlockOCR #Ledger #Trezor #Coinbase #Binance #Kraken #OKX #MEXC #KuCoin #Bybit #MetaMask

Microsoft has detailed TerminalFix, a new ClickFix variant that tricks victims into running malicious commands in Windows Terminal or PowerShell through fake Cloudflare CAPTCHA pages on compromised websites. The attack uses DLL sideloading, steganographic payload extraction, Active Directory reconnaissance, and a custom reverse-tunnel implant to maintain persistent access and move deeper…

Multiple critical flaws in WordPress plugins and themes including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP can enable authentication bypass, administrator account takeover, arbitrary file write, and remote code execution. Patchstack and Wordfence say the GiveWP issue chains unsafe unserialization with attacker-controlled data and a gadget chain to achieve command…

Brave browser 1.94 adds Email Aliases, letting users create disposable addresses that hide their real email while still forwarding messages to their inbox. The feature is designed to reduce spam, limit cross-site identity matching, and lower the risk of phishing after service breaches. #Brave #EmailAliases #OPAQUE

Hasbro is notifying employees and former employees that their personal information may have been exposed in a security incident involving its network earlier this year. The compromised data may include names, contact details, national ID numbers, and financial information, and Hasbro is offering identity protection services while its investigation continues. #Hasbro…

The Trump administration issued an executive order banning the acquisition of foreign-made bulk-power system technology to reduce risks of backdoors, remote access, and supply-chain disruption in U.S. critical infrastructure. The move comes amid rising attacks on water, power, and other essential sectors, with officials and experts warning that AI-enabled threats and…

PaperCut warned that vulnerabilities in PaperCut NG and PaperCut MF, tracked as CVE-2026-82078 and CVE-2026-81578, are being actively exploited and have already led to confirmed customer incidents. The company has issued emergency patches and urged organizations to remove servers from the public internet while restricting access to trusted IP addresses. #PaperCut…

Cosmos Labs said a critical balance-handling flaw in the Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026. The issue affected multiple Cosmos EVM versions, was patched in v0.6.2 and v0.7.2, and required coordinated network upgrades or chain halts to mitigate. #CosmosLabs…

Berlin’s state government says it is being extorted after the August compromise of its state administrative network and will not pay, while forensic work also found additional data exfiltration from the Senate Department for Mobility, Transport, Climate Protection and Environment. Manchester Airports Group also confirmed unauthorized access to customer data tied…