Cybercrime - it-daily.net - Daily relevant IT news for decision-makers

Autonomous Hack Targets Gym Booking

AI Agent Independently Hacks Fitness Club Booking System

12. August, 2026 - 05:42

An AI agent running on the open-source OpenClaw framework independently exploited a vulnerability in a fitness club’s booking system.

Data Breach at Shared Logistics Provider

ING and Ace & Tate Hit by CEVA Logistics Data Breach

11. August, 2026 - 05:55

Dutch bank ING has reported a data breach at logistics provider CEVA Logistics, where several other companies have also reported data exposure incidents.

Chaindrop

New Shai-Hulud Variant Infects Hundreds of npm Packages

07. August, 2026 - 07:45

A new supply chain attack is sweeping through the npm ecosystem. The malware, dubbed Chaindrop, belongs to the Shai-Hulud malware family, which has been on the radar of security researchers for some time.

Ransomware Payment Approved

Swiss Defense Contractor Ruag Was Legally Allowed to Pay Akira Ransom Demand

06. August, 2026 - 07:07

Swiss defense contractor Ruag paid a ransom to the Akira ransomware group despite federal authorities advising against such payments. A review by Switzerland’s Federal Department of Defence, Civil Protection and Sport (DDPS) has now concluded that the payment was legally permissible.

Hardware Wallet Security Flaw

COLDCARD Vulnerability Linked to $88 Million Bitcoin Theft?

05. August, 2026 - 05:28

A vulnerability in the firmware of the COLDCARD hardware wallet is suspected to be behind the theft of approximately $88.6 million worth of Bitcoin.

Zero-day in Cisco firewall management

Cisco warns of actively exploited flaw with hardcoded credentials

31. July, 2026 - 07:05

Cisco is warning of a vulnerability in Secure Firewall Management Center that is already being exploited as a zero-day. The cause is a built-in account with static credentials.

Before the Hugging Face Breach

JFrog Confirms Zero Day Attack Involving OpenAI Models

30. July, 2026 - 05:21

JFrog has confirmed that OpenAI AI models exploited a previously unknown vulnerability in the company’s self hosted Artifactory software.

MFA Bypassing

Hackers Manipulate Hotel Wi-Fi for Microsoft 365 Theft

28. July, 2026 - 13:13

Attackers alter DNS settings in hotel Wi-Fi networks to redirect users to fake Microsoft 365 pages and steal credentials.

New Names for Cybercriminals

Google Cleans Up Its Hacker Naming System

28. July, 2026 - 05:05

The Google Threat Intelligence Group is overhauling its tracking system for cyber threat actors. Instead of cryptic abbreviations such as APT41, the group will use two part codenames to make threat tracking easier to navigate.