Content is curated from many trusted industry sources, including vendor advisories, security blogs, bug bounty programs, and conference organizers worldwide.
Attackers altered a JavaScript file from Adform, converting it into a browser script that rewrites cryptocurrency wallet addresses. Adform detected the compromise on July 27, 2026, removed the malicious code, alerted affected clients, and reported the incident to authorities. Visitors who loaded the affected script on July 27 and copied Bitcoin were exposed.
Anthropic disclosed that its Claude AI models accessed live computer systems of three organizations during cybersecurity testing. The incidents were caused by a configuration error in the testing environment, not intentional AI behavior. The company has temporarily suspended related activities and reviewed safeguards. Additional details to come. soon
Punjab's Tarn Taran District Consumer Disputes Redressal Commission ordered State Bank of India to refund ₹164,000 lost in an unauthorised online banking transaction, plus ₹15,000 compensation for mental harassment and ₹10,000 in litigation costs. The ruling underscores bank accountability in online fraud cases. The ruling underscores bank accountability in online fraud cases.
Future Crime Research Foundation will release a landmark White Paper, Future Policing & Advanced Cyber Forensics: A Strategic Framework for Digital Crime Investigation in the AI Era, at FutureCrime Summit 2026 in New Delhi on Aug 6–7. Developed with Algoritha Security Pvt. Ltd., it outlines advanced digital forensics and policing strategies for AI-era crime.
Adobe released security updates for Campaign Classic (ACC) to fix a maximum-severity flaw that could enable arbitrary code execution. Tracked as CVE-2026-48449, the vulnerability scores 10.0 CVSS and stems from incorrect authorization, potentially permitting unauthorized actions within the enterprise marketing platform. This poses immediate risk to ACC.
A fake browser update delivered via hijacked hotel Wi‑Fi distributes CornFlake, a RAT capable of capturing webcam images, microphone audio, and keystrokes, per Microsoft. The campaign is tracked as CaptiveCrunch and attributed to Storm‑2945, an operational sub‑cluster of Midnight Blizzard.
Amgen disclosed a cybersecurity breach in which unauthorized third parties accessed and exfiltrated sensitive corporate files and patient protected health information after a major incident. The breach originated within third-party cloud storage, according to an 8-K filing with the SEC, signaling vendor risk and data exfiltration concerns.
The Cyber Cell of Uttar Pradesh Police in Bareilly arrested a 42-year-old man for opening a fraudulent bank account with forged identity documents to facilitate a ₹62 lakh cyber fraud operation. The seized account reportedly functioned as a central repository for funds and illicit activity, reflecting a broader crackdown on digital financial crime.
Azamgarh's Cyber Cell, Uttar Pradesh Police, has arrested a seasoned fraudster behind a nationwide corporate impersonation scheme. The suspect allegedly posed as a senior executive of Larsen & Toubro to defraud business owners and commercial entities, highlighting cross-border digital financial crime risks and enforcement avenues. It signals risk.!
Navi Mumbai Cyber Police launched a crackdown on a suspected nationwide mule bank account network after tracing proceeds of cyber frauds across India. Based on money-trail analysis from I4C and Maharashtra Cyber, authorities identified several suspicious accounts used to launder funds and disrupt the fraud ecosystem This tightens cybercrime action
Delhi's South District Cyber Police busted an organized cyber fraud racket posing as credit card replacement, arresting a serving and a former private-bank employee. Investigators say the duo misused internal bank processes and customers' confidential data to issue replacements, enabling fraud. The case highlights insider risk and the need for stronger monitoring and data access controls.
During the ITR filing rush, cybercriminals launch dual phishing and malware campaigns impersonating the Income Tax Department, exploiting taxpayers' urgency. CloudSEK warns of cloned portals and credential theft as attackers target refunds and compliance disclosures, highlighting a rising risk to taxpayers nationwide. This heightens tax-season risk.
Attackers altered a JavaScript file from Adform, converting it into a browser script that rewrites cryptocurrency wallet addresses. Adform detected the compromise on July 27, 2026, removed the malicious code, alerted affected clients, and reported the incident to authorities. Visitors who loaded the affected script on July 27 and copied Bitcoin were exposed.
Anthropic disclosed that its Claude AI models accessed live computer systems of three organizations during cybersecurity testing. The incidents were caused by a configuration error in the testing environment, not intentional AI behavior. The company has temporarily suspended related activities and reviewed safeguards. Additional details to come. soon
Punjab's Tarn Taran District Consumer Disputes Redressal Commission ordered State Bank of India to refund ₹164,000 lost in an unauthorised online banking transaction, plus ₹15,000 compensation for mental harassment and ₹10,000 in litigation costs. The ruling underscores bank accountability in online fraud cases. The ruling underscores bank accountability in online fraud cases.
Future Crime Research Foundation will release a landmark White Paper, Future Policing & Advanced Cyber Forensics: A Strategic Framework for Digital Crime Investigation in the AI Era, at FutureCrime Summit 2026 in New Delhi on Aug 6–7. Developed with Algoritha Security Pvt. Ltd., it outlines advanced digital forensics and policing strategies for AI-era crime.
Adobe released security updates for Campaign Classic (ACC) to fix a maximum-severity flaw that could enable arbitrary code execution. Tracked as CVE-2026-48449, the vulnerability scores 10.0 CVSS and stems from incorrect authorization, potentially permitting unauthorized actions within the enterprise marketing platform. This poses immediate risk to ACC.
A fake browser update delivered via hijacked hotel Wi‑Fi distributes CornFlake, a RAT capable of capturing webcam images, microphone audio, and keystrokes, per Microsoft. The campaign is tracked as CaptiveCrunch and attributed to Storm‑2945, an operational sub‑cluster of Midnight Blizzard.
Amgen disclosed a cybersecurity breach in which unauthorized third parties accessed and exfiltrated sensitive corporate files and patient protected health information after a major incident. The breach originated within third-party cloud storage, according to an 8-K filing with the SEC, signaling vendor risk and data exfiltration concerns.
The Cyber Cell of Uttar Pradesh Police in Bareilly arrested a 42-year-old man for opening a fraudulent bank account with forged identity documents to facilitate a ₹62 lakh cyber fraud operation. The seized account reportedly functioned as a central repository for funds and illicit activity, reflecting a broader crackdown on digital financial crime.
Azamgarh's Cyber Cell, Uttar Pradesh Police, has arrested a seasoned fraudster behind a nationwide corporate impersonation scheme. The suspect allegedly posed as a senior executive of Larsen & Toubro to defraud business owners and commercial entities, highlighting cross-border digital financial crime risks and enforcement avenues. It signals risk.!
Navi Mumbai Cyber Police launched a crackdown on a suspected nationwide mule bank account network after tracing proceeds of cyber frauds across India. Based on money-trail analysis from I4C and Maharashtra Cyber, authorities identified several suspicious accounts used to launder funds and disrupt the fraud ecosystem This tightens cybercrime action
Delhi's South District Cyber Police busted an organized cyber fraud racket posing as credit card replacement, arresting a serving and a former private-bank employee. Investigators say the duo misused internal bank processes and customers' confidential data to issue replacements, enabling fraud. The case highlights insider risk and the need for stronger monitoring and data access controls.
During the ITR filing rush, cybercriminals launch dual phishing and malware campaigns impersonating the Income Tax Department, exploiting taxpayers' urgency. CloudSEK warns of cloned portals and credential theft as attackers target refunds and compliance disclosures, highlighting a rising risk to taxpayers nationwide. This heightens tax-season risk.
Unlimited intelligence feeds and real-time alerts in the Secwiser app.
Download now