Cyberattack Disrupts IT Systems Behind Phase Eight, Hobbs, and Whistles in the UK
South Africa's The Foschini Group has confirmed a cyberattack disrupted IT systems supporting its UK fashion brands Phase Eight, Hobbs, and Whistles, with some online functions impaired and...
Ahold Delhaize Pulls Systems Offline as Cybersecurity Incident Disrupts Albert Heijn and US Grocery Chains
Grocery giant Ahold Delhaize has taken parts of its IT infrastructure offline after detecting a security issue, disrupting the Albert Heijn app, delivery services, and several US retail...
Ledger Confirms Rogue Hardware Chip Hidden Inside Crypto Wallets Tied to Over $86 Million in Losses
Ledger has confirmed that at least one hardware wallet sold through Southeast Asian reseller CryptoBilis contained an unauthorized physical implant, following reports of crypto theft that investigators estimate...
Ubuntu Maker Canonical Knocked Offline by Second Major DDoS Attack This Year
Canonical's main websites and Ubuntu security advisory API went dark for more than four hours after a sustained DDoS attack on October 8, the company's second major outage...
REA Brings Agent-Guided Reverse Engineering to Ghidra, IDA Pro and Hopper
The open-source REA project connects AI coding agents with established reverse-engineering platforms and evidence from inspected programs. It can accelerate analysis across native binaries, JavaScript, .NET, Android, and...
GhostAction Hijacks 346 GitHub Repositories to Harvest CI/CD Secrets
The GhostAction campaign used compromised maintainer accounts to inject credential-stealing GitHub Actions workflows into 346 repositories. The malicious automation collected CI/CD secrets and searched full Git histories, creating...
FBI Seizes Seven Domains Supporting Flax Typhoon Scanning and Phishing Operations
U.S. authorities seized seven domains linked to scanning, phishing, malware delivery, and persistence tools allegedly operated by China-based Integrity Technology Group. The disruption affects infrastructure associated with Flax...
Attackers Hijack Three Country-Code Registries to Obtain Rogue HTTPS Certificates
Attackers compromised the .gh, .sl and .as domain registries and exploited DNS control to obtain unauthorized HTTPS certificates for Google and other organizations. Chrome blocked known certificates, but...