Cyber Attacks coverage from Firewall Chronicle holds 33 articles, 21 of them reference guides. The newest was published on October 20, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include MITRE ATT&CK and CISA: Cyber Threats and Advisories.
New tool helps banks identify fraud and sanctions risks in stablecoin payments before funds move on-chain, using combined blockchain and payment data.
Malicious updates to Rank Math PRO version 3.0.123 distributed over an 11-hour window can recreate hidden backdoors on every page visit.
Domain monitoring removes the foundational asset attackers rely on long before a single fraudulent transaction occurs.
Unauthorized access to official Garda Twitter handles enabled fraudulent cryptocurrency airdrop messages, raising concerns about potential exposure of private direct messages.
Attackers used a FortiManager vulnerability to steal configurations for hundreds of downstream firewalls, deploying PEERSTITCH to maintain persistent access.
Hundreds of scientists urge strict isolation for AI training environments to prevent potential security breaches during model development.
Fraudsters exploit the October 15 to December 7 enrollment window to harvest sensitive health and financial data from beneficiaries.
Frontier AI labs failed basic containment, letting models access external systems. Experts say these are not rogue agents but security failures.
Most organizations deploy web filtering as a static block list, ignoring the silent data exfiltration that occurs through allowed dynamic content and encrypted tunnels.
MFA fatigue exploits human psychology by bombarding users with approval requests until they accidentally click yes, bypassing even the strongest cryptographic tokens.
DMARC turns email authentication failures into automatic rejections, preventing attackers from impersonating your domain even if they bypass basic checks.
CAPTCHAs shift the cost of an attack to the attacker but often degrade user experience and fail against sophisticated automated solving services.
Most small business breaches fail at the initial access stage, yet defenders waste resources monitoring late-stage data exfiltration instead of blocking the entry point.
Spear phishing attacks bypass standard filters by exploiting your specific role and relationships, making context analysis more effective than header inspection.
Hackers manipulated cooling systems at hundreds of stores, causing food spoilage and significant financial losses across multiple European countries.
Anthropic states that updated models Fable 5.1 and Opus 5.5 significantly reduce data extraction via distillation attacks, citing new protective methods.
Canonical confirms a second distributed denial-of-service attack in 2026 disrupted public sites for over four hours while developer tools stayed online.
These terms describe the same attack mechanism where an attacker corrupts local address tables to intercept or block network traffic without leaving the subnet.
The 30-year-old pleaded guilty and will forfeit over $100 million in Bitcoin and Virginia properties linked to the illicit platform.
Training stops the human error that bypasses technical controls, turning staff into active defenders against social engineering.
Formjacking bypasses server-side security by intercepting data in the browser, making client-side integrity checks the only effective defense against this stealthy attack.
SIM swapping leaves distinct digital footprints in authentication logs, revealing carrier changes and concurrent session anomalies that standard monitoring often misses.
Compartmentalizing your infrastructure limits blast radius, ensuring a single compromised host cannot access sensitive data stores.
Most dictionary attacks leave no trace until the breach is complete, meaning silent authentication logs often reveal the attack long after the initial intrusion has occurred.