Sleepwalker malware reportedly disguises a Windows backdoor from firewalls
A newly reported Windows backdoor called Sleepwalker-Malware is described as evading firewall detection.
THE DOOMRADAR READING ROOM
Cyber & digital services
Cyber incidents, service outages and reported data exposure, explained through their concrete effects on users and organizations.
Earlier reports
Back to newestOrdered by reported development. Each article describes what was known at the time shown.
Mobile banking malware targets 1,243 apps across 34 malware families
Thirty-four malware families are targeting 1,243 mobile banking applications. The headline indicates a broad threat to mobile financial services.
OpenAI closes accounts linked to Russian propaganda activity
OpenAI shut down accounts reportedly associated with Russian propaganda using ChatGPT.
New Windows malware can remain dormant until remotely activated
A newly reported Windows malware strain remains inactive until triggered by a custom command.
France’s NIS2 compliance rules cover 15,000 companies
A report outlines obligations and sanctions under the NIS2 cybersecurity directive for 15,000 French companies. The headline does not describe a cyberattack or outage.
AI malware samples detected on real computers
Researchers examined 405 AI-malware samples and found 12 detections on real computers. The headline indicates malware activity beyond laboratory testing.
OpenAI shuts down Russia-linked accounts over covert influence campaign
OpenAI terminated Russia-linked ChatGPT accounts that it said were involved in a covert influence campaign.
CISA orders federal agencies to patch actively exploited Oracle vulnerability
CISA gave federal agencies 72 hours to patch an actively exploited Oracle software vulnerability.
AI prompt injection risks in the workplace examined
A podcast discusses practical policies addressing the risks of AI prompt injections in workplace systems. Prompt injection can manipulate AI tools through malicious instructions, according to the headline's subject.
Kylie Jenner's X account hacked to promote fake cryptocurrency
Kylie Jenner's official X account was reportedly compromised and used to trick fans into buying a fake crypto token.
Child-abuse investigation flags 7,700 accounts
A Chainalysis-led investigation has flagged 7,700 accounts in connection with child-abuse activity.
Mandatory labeling curbs fake calls
A report says mandatory labeling is reducing fraudulent or AI-generated calls. The headline does not identify a specific attack or incident.
State-backed hackers targeted EU officials on WhatsApp
A document says state-backed hackers targeted European Union officials through WhatsApp.
Germany faces concrete threats from hybrid attacks, Merz says
Friedrich Merz said Germany faces very concrete threats from hybrid attacks.
DDoS attacks on retailers reportedly increased ahead of the school season
StormWall reported that the average power of DDoS attacks targeting retailers increased 4.5-fold ahead of the school season.
Australia warns of active exploitation of TeamCity server flaw
Australia has warned that a vulnerability in TeamCity servers is being actively exploited. The headline does not specify the attackers or affected organizations.
Major leak reported in macOS 26.7 release candidate
A major leak has reportedly affected the macOS 26.7 release candidate, with speculation about whether it came from a developer or AI system.
Ukraine launches individual cyber audit programme
Ukraine is seeking applications for an individual cyber audit programme. The supplied headline does not specify the programme's scope or incidents involved.
State-sponsored threat actors are using AI in cyber operations
The headline reports that state-sponsored actors are using artificial intelligence as an ally in 2026. It does not specify particular actors or attacks.
VK seeks daily payments from Apple over removed apps
Russian technology company VK is seeking $696,000 per day from Apple until its apps return to the App Store.
Payment card data is being traded on the dark web
Personal data from payment cards is reportedly being sold on the dark web, with Israeli cybersecurity companies presenting related proposals.
Cyberattack targets critical infrastructure systems
A cyberattack has reportedly targeted essential infrastructure systems. The supplied headline does not identify the affected country or describe the extent of disruption.
Organizations urged to strengthen transaction security beyond checkbox compliance
The article argues that compliance-based approaches are insufficient to protect customer transactions.
India plans to end power-sector SCADA imports by 2030
The Indian government has announced a three-year roadmap to indigenize power-sector SCADA systems and stop imports by 2030.
Medical data leak in Poland described as irreversible
A Polish expert commented on a leak of medical data, describing its consequences as no longer reversible.
Vietnam discusses protecting classified defense data with businesses
Vietnam's military cyber command discussed protection of classified Ministry of Defense data and cooperation with companies.
Fortnite admin-panel codes and lobby hacks circulate
A report indicates codes and hacks targeting Fortnite administrative controls and lobbies. Such tools may enable unauthorized access or disruption within the game ecosystem.
Researchers say Chinese hackers are using DeepSeek in attacks
Researchers reported that hackers linked to China are using DeepSeek in cyberattacks.
Iranian hackers allegedly disrupt a UK power plant
The headline reports that Iranian hackers brought down a power plant in the United Kingdom.
CISA sets urgent patching deadline for critical Oracle vulnerability
CISA imposed a three-day patching deadline for an Oracle flaw rated 10.0 in severity.
US official says Israel evaded extradition of an alleged Ashkelon hacker
A US official alleges that Israel evaded extradition proceedings involving an alleged hacker from Ashkelon. The headline does not specify the cyber incident or legal outcome.
Japan to establish a division to counter disinformation
Japan's Defense Ministry plans to create a division focused on countering disinformation. The move reflects concern over information operations affecting national security.
USCYBERCOM awards $750 million cyber hunt production contract
SealingTech received a $750 million Joint Cyber Hunt Kit full-rate production award from USCYBERCOM.
Fake CAPTCHA scam steals victims’ bank funds
Cybercriminals are using fake CAPTCHA pages to trick people into actions that can empty their bank accounts.
Phishing campaign impersonates Germany’s pension insurance system
A new phishing scheme reportedly claims to collect data on behalf of Germany’s pension insurance system.
Cybercriminals target politicians, civil servants and celebrities
Cybercriminals are targeting public figures, including politicians, civil servants and celebrities.
Medical data is reportedly worth millions on the cybercrime black market
The headline reports that medical data is being traded on the cybercrime black market for millions of dollars. It indicates a significant ongoing risk to sensitive health information.
Indian authorities warn of WhatsApp finance-team impersonation scam
India's I4C warned CFOs and finance teams about a WhatsApp scam using fake Reserve Bank of India and Ministry of Corporate Affairs files.
Bulgaria’s defence minister says Iran carried out a hybrid operation
Bulgaria’s defence minister said Iran carried out an effective hybrid operation. The headline does not specify the operation’s methods or targets.
Attackers distribute Mac malware through fake OpenAI Codex advertisements
Crooks are reportedly using fake OpenAI Codex advertisements to distribute malware targeting Mac users.