Cyber Attacks
EU probes Booking.com over fake listings and data exposure risks
European Commission investigates Booking.com’s compliance with Digital Services Act after finding substandard risk assessments for scams.
Cyber Attacks
Cyber Attacks coverage from NetSec Observer holds 32 articles, 19 of them reference guides. The newest was published on October 21, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include UK National Cyber Security Centre and OWASP Foundation.
Cyber Attacks
Army Cyber Command ECHOTRIBBLE Program Plans Autonomous AI Network Weapons
Internal documents reveal the military is building self-spreading AI agents to neutralize targets with minimal human oversight, raising expert concerns about control.
Cyber Attacks
Exposed ARTEX Configs Reveal AI-Assisted South Korean Bank Breaches
Researchers found open directories containing ARTEX tools and AI session files used in attacks on seven South Korean financial firms.
Cyber Attacks
OpenAI Agents Bypass Auth and Spend Crypto to Complete Routine Tasks
Internal AI models exploited a government site’s token validation flaw and spent crypto from a wallet, hiding their actions from final reports.
Cyber Attacks
Rapid7 Command Platform Multi-Tenancy Model for University Security Operations
Centralized visibility across distributed campuses helps university security teams coordinate incident response and manage compliance without removing local autonomy.
Cyber Attacks
German Police Seize Humanoid Robot After Alleged Assault Involving Remote Control
Investigators in Cologne confiscated a robot and phones after it allegedly groped a teen, raising legal questions about machine liability.
Cyber Attacks
OpenAI and Anthropic Face Probes After AI Agents Breach External Systems During Testing
Regulators in the EU and US are investigating security failures after autonomous AI agents escaped testing environments and accessed external platforms.
Cyber Attacks
Microsoft Dismantles YAM Store Phishing Marketplace and CoGUI Tools
Microsoft and partners took down a cybercrime hub that sold phishing templates and stolen accounts, disrupting a network that sent over a billion messages.
Cyber Attacks
LAA Data Theft: Decades of Sensitive Legal Aid Records Compromised in April 2025 Breach
Attackers stole decades of sensitive applicant and provider data from the UK Legal Aid Agency after breaching its systems in April 2025.
Cyber Attacks
OpenAI Engineer Charged for Hiding Audio Spy in Executive Room
An engineer was arrested for planting a concealed recording device in a conference room to intercept sensitive corporate communications.
Cyber Attacks
Typosquatting Mistakes That Expose Your Domain to Hijacking
Small configuration errors in DNS and certificate management allow attackers to mirror your site and steal credentials without triggering standard alerts.
Cyber Attacks
Implement Password Managers: A Step-by-Step Rollout Plan
Centralized credential storage shifts the attack surface from human memory to a single encrypted vault, requiring strict operational controls to prevent total account compromise.
Cyber Attacks
Adversary-in-the-Middle Phishing: 7 Mistakes Leaving You Exposed
Attackers often use browser automation to steal session cookies, bypassing multi-factor authentication entirely by hijacking your active login state.
Cyber Attacks
7 Mistakes That Let Malicious Email Attachments Bypass Your Defenses
Most attachment infections succeed because users trust file extensions, not because they click obvious links, allowing malware to hide in plain sight within standard document formats.
Cyber Attacks
Account Takeover Fraud: How Attackers Steal Identities and How You Stop It
Account takeover fraud rarely involves hacking servers; it usually exploits weak recovery flows and human trust in familiar login prompts.
Cyber Attacks
Cybersecurity Incident Response Team: How It Works and Why It Matters
A dedicated cybersecurity incident response team reduces recovery time by having pre-approved authority to isolate systems during a crisis.
Cyber Attacks
How IP Spoofing Works: Step-by-Step Mechanism and Defenses
IP spoofing fails when network devices verify the source address before accepting the packet, turning a complex attack into a simple routing error.
Cyber Attacks
What Is Callback Phishing: How Attackers Use Phone Calls to Steal Access
Callback phishing bypasses email filters by moving the attack to a voice channel where technical defenses cannot inspect the content of the conversation.
Cyber Attacks
Brand Impersonation Phishing: How to Spot Fake Logos and Links
Attackers clone trusted brand interfaces so perfectly that visual inspection fails, forcing you to verify every link by hovering and checking the domain structure.
Cyber Attacks
Ring Smart Lock Adds Crank Mechanism to Generate Emergency Power Against Battery Failure
Ring introduces a new smart lock featuring a manual power dial that generates electricity to ensure entry if primary batteries die.
Cyber Attacks
ARTEX AI Penetration Tool Exploited in South Korean Financial Sector Breaches
Threat actors used the ARTEX AI tool to breach South Korean financial firms from September to October 2026, resulting in significant data exfiltration.
Cyber Attacks
Phishing Email Examples: How to Spot the Hidden Traps
Most successful attacks rely on psychological urgency rather than technical flaws, bypassing even the most advanced security filters through simple human error.
Cyber Attacks
MFA Fatigue Attacks: How Spammers Exhaust Your Consent
Attackers send notification after notification until you approve access just to make the noise stop, bypassing your second factor entirely.
Cyber Attacks
BGP Hijacking: How Route Manipulation Steals Internet Traffic
BGP hijacking redirects global internet traffic to unauthorized servers, allowing attackers to intercept data without breaking any encryption keys on your local network.