Online ad giant Adform was hacked, proving once again why ad blockers are needed

3 hours ago

Adform, a major online ad provider, was hacked on July 27, serving ads with malicious code that could steal cryptocurrency from victims.
The malicious code altered crypto wallet addresses in victims' clipboards every three seconds, replacing them with hacker-controlled addresses.
Security researcher Kevin Beaumont disclosed the incident; Adform has not revealed how the breach occurred or the number of affected users.
The incident highlights the importance of ad blockers as a security measure to prevent malware and tracking from ad networks.

A hacker breached Romania's cadastre agency, wiping the entire land registry database after a failed extortion attempt, halting the real-estate market.
Hugging Face was hacked using an autonomous AI agent, stealing internal datasets and cloud credentials, while guardrails hindered their response analysis.
A critical WordPress vulnerability (CVE-2026-63030, wp2shell) allows remote unauthenticated attackers to execute code, affecting versions since last December.

Hugging Face disclosed a hack compromising internal datasets and service credentials.
Attackers exploited a vulnerability via a malicious dataset to escalate permissions and access internal systems.
Stolen credentials have been revoked and rotated; users advised to review their accounts.

TripleX ransomware group breached Bank of Baroda via a compromised employee email account, exfiltrating 1 TB of sensitive data.
The leaked data includes customer PII (Aadhaar, PAN, photos), financial records, audit reports, and loan documents, posing identity theft risks.
The attack likely involved phishing, MFA bypass (e.g., AiTM phishing), OAuth abuse, or endpoint compromise, exploiting excessive permissions.

A fake Tronscan blockchain explorer appeared as the #1 search result on DuckDuckGo, prompting users to connect their wallet and leading to a drainer.
Attackers exploit SEO on Bing and DuckDuckGo to rank phishing sites high, using gateway domains that silently redirect to rotating phishing pages.
The drainer scans victims' wallets after connection, requesting approval for unlimited TRC-20 tokens and claiming TRX via smart contracts.

Volt Typhoon hackers from China are believed to be pre-positioning within U.S. critical infrastructure, posing a disruptive threat.
ICE's Office of Professional Responsibility is investigating over 100 cases of online critics for 'doxing and threats' against employees.
EU's 'Chat Control' bill allows tech companies to scan personal messages to curb child abuse material, despite opposition from lawmakers.

A hacker breached Romania's cadastre agency, wiping the entire land registry database after a failed extortion attempt, halting the real-estate market.
Hugging Face was hacked using an autonomous AI agent, stealing internal datasets and cloud credentials, while guardrails hindered their response analysis.
A critical WordPress vulnerability (CVE-2026-63030, wp2shell) allows remote unauthenticated attackers to execute code, affecting versions since last December.

Hugging Face disclosed a hack compromising internal datasets and service credentials.
Attackers exploited a vulnerability via a malicious dataset to escalate permissions and access internal systems.
Stolen credentials have been revoked and rotated; users advised to review their accounts.

TripleX ransomware group breached Bank of Baroda via a compromised employee email account, exfiltrating 1 TB of sensitive data.
The leaked data includes customer PII (Aadhaar, PAN, photos), financial records, audit reports, and loan documents, posing identity theft risks.
The attack likely involved phishing, MFA bypass (e.g., AiTM phishing), OAuth abuse, or endpoint compromise, exploiting excessive permissions.

A fake Tronscan blockchain explorer appeared as the #1 search result on DuckDuckGo, prompting users to connect their wallet and leading to a drainer.
Attackers exploit SEO on Bing and DuckDuckGo to rank phishing sites high, using gateway domains that silently redirect to rotating phishing pages.
The drainer scans victims' wallets after connection, requesting approval for unlimited TRC-20 tokens and claiming TRX via smart contracts.

Volt Typhoon hackers from China are believed to be pre-positioning within U.S. critical infrastructure, posing a disruptive threat.
ICE's Office of Professional Responsibility is investigating over 100 cases of online critics for 'doxing and threats' against employees.
EU's 'Chat Control' bill allows tech companies to scan personal messages to curb child abuse material, despite opposition from lawmakers.

Hasty Briefsbeta