Latest news as of 10/21/2026, 4:50:12 AM
The Hacker News
Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that's being used to distribute malware such as Legion Loader. According to Forescout Research - Vedere Labs, ROMULUS is akin to a malware delivery service that employs ClickFix-style lures on bogus landing pages to trick unsuspecting users into running malicious commands and infecting their own
Have I Been Pwned
In September 2024, the French national pension fund . The data included 70k unique email addresses along with names, dates of birth, physical addresses, phone numbers, income levels, marital statuses, French social security numbers (NIR) and contact details of relatives or other nominated contacts. In its disclosure notice, . Assurance Retraite suffered a data breach affecting approximately 370k assistance beneficiaries Assurance Retraite attributed the breach to a compromised partner account
The Register
Single sign-on to help address imminent threats to life, critical infrastructure, or kids
The Register
Order disallowing use of Chinese AI service is unhelpfully vague and broad
Bleeping Computer
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records. [...]
Bleeping Computer
Some downloads of the Rank Math PRO WordPress plugin from the vendor's official website carried malware that planted hidden backdoors in a supply-chain attack last week. [...]
Dark Reading
A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.
The Register
Second security snafu in two years
Dark Reading
Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.
Bleeping Computer
Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the attacks.a [...]