Breaking News – Cyber Threats (last 6h)
Generated: 2026-07-30 03:00 PDT
- North Korea’s elite hackers turned on their own government – and got caught
Graham Cluley • 2026-07-30 02:17 • www.bitdefender.com
For years, North Korea’s state-trained hackers have been one of the world’s most prolific robbers of banks – stealing huge sums of money from foreign financial instituions, draining cryptocurrency exchanges of billions, and funnelling the proceeds into the country’s weapons programme.But now, in a remarkable twist, some of the same elite hackers appear to have decided to rob their own government instead. And, it doesn’t sound as if it has ended that well for them.
Read more in my article on the Hot for Security blog.
https://www.bitdefender.com/en-us/blog/hotforsecurity/north-korea-hackers-own-government - Toy Ghouls’ new toy: the GenieLocker ransomware
Securelist • 2026-07-30 01:00 • securelist.com
Kaspersky experts dissect GenieLocker: new custom ransomware variants for Windows, Linux, and ESXi systems. We found this family in attacks by Toy Ghouls, a financially motivated extortion group.
https://securelist.com/genielocker-ransomware-for-windows-linux-and-esxi/120843/ - Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
The Hacker News • 2026-07-30 00:40 • thehackernews.com
The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S. and European government entities, as well as the telecommunications, financial, hospitality, and aerospace sectors.The activity, which began on July 22, 2026, involves the
https://thehackernews.com/2026/07/russian-hackers-exploit-microsoft-owa.html - FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks
The Hacker News • 2026-07-30 00:28 • thehackernews.com
The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Covered List on July 28. The move generally prevents new models from receiving the equipment authorization required for import, marketing, or sale in the US.Previously authorized models can still be sold, and devices people already own are unaffected. Federal purchases and use
https://thehackernews.com/2026/07/fcc-blocks-new-foreign-produced-robots.html - Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet
The Hacker News • 2026-07-29 23:05 • thehackernews.com
Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto theft: a maintainer phished through a lookalike npm domain and a wallet-draining script pushed into at least 18 packages carrying more than 2 billion weekly downloads between them.The original Aikido and Wiz reports did not attribute the
https://thehackernews.com/2026/07/amazon-links-debug-and-chalk-npm-hijack.html - Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data
The Hacker News • 2026-07-29 22:08 • thehackernews.com
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation.The vulnerability, assigned CVE-2026-20316 (CVSS score: 5.3), could permit an unauthenticated, remote attacker to log
https://thehackernews.com/2026/07/cisco-fmc-zero-day-actively-exploited.html
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
