Vanderbilt University disclosed Monday it is responding to an active cybersecurity incident affecting devices, systems, and cloud services, urging students, faculty and staff to shut down devices and disconnect from campus Wi-Fi. The BYOD ransomware group has claimed responsibility on its data leak site, alleging it encrypted Vanderbilt's databases and stole data belonging to students and employees. Vanderbilt has not confirmed the group's claims or detailed what data, if any, was stolen.
bleepingcomputer.com
· 2026-11-09
Security researchers have identified a scam in which attackers disguise malware installation prompts as ordinary CAPTCHA verification tests. Users who follow the fake instructions end up running malicious commands or software that can compromise their device and expose personal data, affecting both Mac and Windows users.
fastcompany.com
· 2026-11-07
The UK's Legal Aid Agency said further analysis of an April 2025 breach found that roughly 250,000 stolen records predate 2007, with the earliest verified record from 1978. Most stolen data covers applications, claims and payments from January 2007 to May 2025, but the agency confirmed a smaller, older trove was also taken. The agency had previously disclosed theft of applicant and provider data including contact details, national ID numbers, criminal history, financial information and portal credentials.
bleepingcomputer.com
· 2026-10-15
Dutch authorities have arrested a man identified as Van der Stap as part of an investigation into the Shiny Hunters hacking group, according to KrebsOnSecurity. Van der Stap had previously served prison time for data theft and extortion and had publicly rebranded himself as a reformed hacker working in offensive security.
yro.slashdot.org
· 2026-09-30
Hackers are actively exploiting two recently disclosed PaperCut NG and MF vulnerabilities, CVE-2026-81578 and CVE-2026-82078, to bypass authentication and steal data from print management servers. PaperCut issued emergency fixes last week, but researchers at Defused say attackers are using the bypass to hijack the software's user-lookup function and dump database tables rather than pursue remote code execution as earlier reports suggested. Over 800 PaperCut servers remain exposed online according to Shadowserver, and PaperCut has not yet attributed the attacks or detailed post-compromise activity.
bleepingcomputer.com
· 2026-09-01
Security researchers have identified GoCaracal, a previously undocumented modular malware framework used by the Dark Caracal cyber espionage group. The tool expands the group's ability to steal data from victims and maintain persistent access to compromised systems.
darkreading.com
· 2026-08-26
GoKawiil