CYBERSECURITY 637
- Bransys ELD Vulnerabilities Identified
- Update on Iranian Cyber Actors' Malware Deployment
- Nonprofit that Tracks Meteors Taken Down by Cyberattack
- Google Pixel Phones Vulnerable to Zero-Click Attacks
- DPRK Fake IT Workers Inside Their Evolving Network Infrastructure
- Operation RapidRust APT36 Deploys New Malware Tools
- NightEagle APT Targets Russian Organizations
- Advisory on Iranian Cyber Targeting of Dissidents, Activists, and Journalists
- Siemens Teamcenter Vulnerability Advisory
- Iranian Cyber Targeting of Dissidents, Activists and Journalists
- HBO Max's Verified Reddit Account Hijacked to Spread Malware
- Human Attacker Hits Machine-Speed Exploitation of Marimo RCE
- 3BB Attacker Used MeshCentral Backdoor for Root Access
- Red Heron Exploits Gitea N-Day Flaw in Multinational Campaign
- Critical Dell ObjectScale Vulnerabilities Allow Malicious Users to Compromise the Affected System
- From Hacks to Bioweapons, Claude Misuse Is Now Everywhere
- India's STPI Serves TerminalFix-Style Attack via Fake Cloudflare Check
- Crypto Customers Targeted by Scammers After Email Marketing Provider Breach
- Widening the Circle of Chinese Hacker Group QTFY ELEX's Intelligence Client List and Lexbell's PLA Contracts
- Once Bluemoon Multiple State Aligned Threat Actors Rapidly Adopt Novel Exploit
- New N0va Phishkit Targets North America and EU A Growing Identity Risk for SOCs
- Hackers Drain $320M in Bitcoin from Liquid Network, Claim They're the Good Guys
- Beyond Lazarus How North Korea Organizes Its Cyber Operations
- ASUS Control Center Flaw Allows Attackers to Gain Full Admin Control
- Contagious Interview Trojanized macOS Installers
- New Backdoors from Toy Ghouls
- Chinese Speaking Threat Actors Targeting Mexican Android Users With Remote Access Trojan
- Rogue ScreenConnect Installations Suggest Worm-Like Activity
- Pegasus Zero-Click Exploit Infects Serbian Student Activist's iPhone
- Node.js Old Technique Makes a Comeback
- Cybercrooks Target Fishbrain to Steal Password Hashes
- BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory
- Russian Hacker Faces Up to 20 Years in Prison Following Extradition and Indictment
- Off the Hook Discovering and Observing Active Exploitation of Sangoma Switchvox CVE-2026-9586
- Financially Motivated Threat Actor BREEZE COMET Targets Brazil
- Attackers Steal METR API Key and Burn $600,000 in AI Credits
- 23-Year-Old Noboru Botnet Dismantled in Global Law Enforcement Operation
- AI Killed the Typo Time to Rewrite Phishing Training
- Hackers Target PaperCut Servers 47% Unpatched
- JavaScript Obfuscation From Party Trick to Phishing Kit
- ATF Responds to Major Cybersecurity Incident After Ransomware Gang's Claims
- Threat Intelligence Report - University Leak Exposes Russia’s Military Cyber Training Pipeline
- Open Directory Exposes Moobot Source Code and Ongoing Activity Post 2024 Court-Authorized Disruption
- Caught in 4K The Aurora Files
- Carry-On Compromise TA4922 Packs PackClient
- A Polymorphic Phishing Page That Occasionally Breaks Itself
- Your Expired Visa Card Could Be 'Zombified' to Make Contactless Payments
- Justice Department and FBI Seize Platforms Used by China State-Sponsored Hackers
- Norway's Digital Government Infrastructure Hit by a New DDoS Attack
- Ebyte NE2-D11 Vulnerabilities Exposed
- Critical Vulnerability in PayRange API Disclosed
- iAuthFlow v2 The $10,000 Phishing Toolkit That Survives Your Password Reset
- Fake Microsoft Security Scans Trick Victims into Uninstalling Their Antivirus
- Doubloon Dredger Abuses Notion to Harvest Authentication Tokens
- Iran-linked Hackers Behind Cyber Attack That Shut Down Power Plant
- A Social Engineering Attempt Against ReliaQuest What We Found
- The Invisible Passenger in Your Car
- SickKids Children's Hospital Bandages Up Careers Website After Intruder Breaks In
- New Agent Tesla Malware Variant Boosts Evasion Capabilities
- Trapping a Mustang Panda
- Rust Supply Chain Attack on arrayref Significant Overlap with DPRK Campaigns
- Distinct Clusters Target Individuals of Interest to Russia
- A New Era of Bulletproof Hosting Providers Emerge
- What You Say During a Cyber Breach Can -- and Will -- Be Used Against You
- Operation CameraSwarm Over 14,000 Dahua Cameras Compromised Across Ukraine and Russia
- NASA Ground Control Software Flaw Enables Unauthenticated Commands
- Revealed Cyber Spies Used Malware from GitHub to Hack EncroChat Cryptophone Network
- McDonald's Employee Data Appears in Leak, Seller Claims 1.7M Records Stolen
- General Electric, Philips, and Shell Investigate Alleged Breaches
- C2Looper A New Backdoor Likely Tied To Ransomware With GitHub C2
- Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware
- Signed, sealed, injected The mechanics of DCRat in 2026
- Siemens Parasolid Vulnerability Advisory
- Siemens Desigo DXR and PXC Controllers Vulnerability Alert
- Hackers Breach Government Webmail While Running Parallel Crypto Fraud
- Multi-Functional Linux Botnet "Evooo1Bot"
- GitHub - BushidoUK/Russian-APT-Tool-Matrix A Comprehensive Resource for Threat Hunting
- Cl0p Til you Drop - 6 Years, 10 Campaigns, 8 Zero-Days
- CEVA Logistics Cyberattack Disrupts European Warehouses and Shipments
- Social Media Platforms Crack Down on Drone Factory Recruiting Game
- Shattering the Dream Operation Dream Job Exposed
- Johnson Controls C-CURE 9000 and Victor Application Server Vulnerabilities
- Abyssos Technical Analysis of a New Modular RAT
- Smile, You're on Camera. Part 2 Hiring Lazarus APT's IT Workers in a Fake DeFi Startup
- U.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled Data
- When Agentic Glue Melts Exploiting Cloudflare Code Mode and Workers
- CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
- Ransomware Moves up the Org Chart Managers Are Prime Targets
- Black Hat Reveals NatJack Exploits in NAT Security
- Chinese-made Zbtlink Routers Have Backdoor, Researchers Say
- Canadian Pleads Guilty to Snowflake Cloud Data-Theft Attacks
- ENDLESSDOORS Is Phoning Home. Pick Up.
- How Aqua Detected a Cryptomining Attack in Memory
- Cybercrime is Costing the World Trillions Every Year
- QuickFox Supply Chain Attack Used to Deploy FDMTP Implant
- INC Ransomware Seizes the Moment With SonicWall Exploits
- Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access
- Hackers Exploit N-able N-central Flaw After Initial Fix Falls Short
- Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts
- China-based Hacker Employs DeepSeek in Autonomous Threat Campaign
- SplitVPN Data Breach Exposes 865k Users' Personal Records
- Investigation into APT 5 and PLA Troop 61786
- Schneider Electric IGSS Vulnerability Advisory
- NASA Core Flight System Health & Safety Application Vulnerability Advisory
- CosmosEscape Taking Over Every Database in Azure Cosmos DB
- Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks
- The Average Cost of a Data Breach Rises to $5 Million
- Cleaning Out Inboxes TA488 Comes for Outlook with Another Half-Click Exploit
- Turns Out the Ghost Was the PLA
- Siemens Mendix Runtime Vulnerability Advisory
- Mirage Kitten's New Malware Set NightLedger Backdoor and Two Tunneling Tools
- MikroTik RouterOS and Cloud Hosted Router Vulnerability Advisory
- GitHub Introduces 3-Day Dependabot Cooldown to Combat Malware
- What’s Your Data Worth on the Dark Web? (Lock and Code S07E15)
- Dear Diary Today I Found A Ghost In The Network
- Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable
- Call of Duty Mobile Scam Uses Fake Free Points to Steal Player Accounts
- Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged
- Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials
- Ta488 Targets Zimbra Mailservers with Half Click Exploits
- TA458 Roundpress Exploits A New Threat in Webmail Security
- New Dolphin X Malware Uses AI to Rank High-Value Targets
- MZ Automation libIEC61850 Vulnerabilities Exposed
- Upbound Hack Results in $13 Million Fraudulent Acima Leases
- Swiss Rail Giant Stadler Rejects $12.3M Ransom Demand After Cyberattack
- CISA, FBI, EPA and U.S. Government Partners Warn of Iranian Threats to Critical Infrastructure
- Chick-fil-A Loyalty Accounts Hijacked Using Stolen Passwords
- Opening the Black Box Agentless Threat Detection for Virtual Appliances
- INC Ransomware Affiliate Targets ESXi & NAS Devices in AD Environment
- Cl0p Exploitation of PTC Windchill & FlexPLM (CVE-2026-12569)
- Anubis Ransomware Claims Coca-Cola Fairlife Attack, Threatens Data Leak
- Critical Vulnerability CVE-2026-60324 in MySQL Server
- Scammers Impersonate FBI on Social Media, Prey on Crime Victims
- Malicious Cloud Customers Can Bring Down the Power Grid
- Cruciferra Crypter Uses Process Ghosting to Evade Detection
- Cyberattack Disrupts Operations at Nichirei, Japan's Food Giant
- Abbott Laboratories Investigates Cybersecurity Incidents Amid Extortion Claims
- Begun, the Patch Wars Have
- UAT-11795 Deploys Novel Starland RAT and Bespoke WLDR C2 Implant in Financially Motivated Campaign
- Tracking Donot APT C 35 Bangladesh Military Intrusion
- ThreatsDay Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories
- Suspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countries
- OkoBot New Sophisticated Malware Framework Targets Cryptocurrency Users
- The Serpent's Tongue Luring the Python Out of Its Den
- Six Minutes to Compromise How 'Patriot Bait' Actor Used AI to Build and Deploy a C&C Botnet
- No Single Pane of Glass Anatomy of an Azure Permission Takeover
- Burnt by Burgers Highlighting Void Blizzard's Russian State Links
- Hacking the Hackers Can You Still Deceive an AI Attacker?
- DomainTools Investigations Threat Intelligence Report - The Pro-Iran Hacktivist Ecosystem 2026
- Open Directory Exposes Three Evilginx Phishing Operators
- OAuth Client ID Spoofing Why Fake Client IDs Are Gaining Traction for Stealthy Enumeration
- UK and EU Strike Russian Cyber Networks with New Sanctions
- Csa Improve Router Hygiene
- Malicious Go Module Exposes GitHub Malware Lure Network
- Operation Dragonreturn China Nexus Cyber Espionage Campaign Targeting Indian Tax Infrastructure
- OpenPLC v3 Vulnerability Advisory
- One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement
- New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware
- GodDamn Ransomware Latest Beast Rebrand Uses Malicious Driver to Disable Defenses
- Mount Royal University Confirms Breach as Hackers Claim Attack
- What Happens if China Hacks the US Water Supply? I Went to a Secret War Game to Find Out
- Backdoor Found in the Firmware for These Wi-Fi Routers. And There's No Patch
- RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service
- Google and the FBI Target Massive Botnet That Quietly Used Home Devices to Mask Cybercrime
- FBI and Spanish Police Arrest Alleged Cyber Army of Russia Reborn Member
- A US Cyber Agency Is Finally Using Anthropic’s Mythos
- Cavern Manticore Exposing Iran-Linked Modular C2 Framework
- U.S. Army Websites Defaced in Apparent 404 Hijacking Campaign
- PamStealer Mimics Maccy Clipboard Manager Silently Harvests Data and Clipboard Contents
- Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds
- New CitrixBleed-like NetScaler Flaw Sees Exploit Attempts in the Wild
- Fake Google and Cloudflare Verification Pages Spread Multiple Malware Families
- Alleged Scattered Spider Hacker Arrested in Finland
- Agentic Ransomware JADEPUFFER Invades Database at Machine Speed
- WinRAR Flaw Could Allow Attackers to Take Control of Your Computer
- ST Engineering iDirect iQ-Series Terminals Vulnerabilities
- RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS
- Hackers Breached DHS Information-Sharing Network
- Brazilian Banking Trojan Ousaban Targets Spain and Portugal
- RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS
- Browser-Only Ransomware From LLM Hallucinations to a Practical Attack Technique
- Mitsubishi Electric MELSOFT Update Manager Vulnerabilities
- Delta Electronics DVP12SE PLC Vulnerabilities
- TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry
- From Bing Search to Ransomware Bumblebee and AdaptixC2 Deliver Akira
- Anonymous-Linked Hacktivist Aubrey Cottle Jailed Over Texas GOP Cyberattack
- New Bucket Hijacking Attack Allows Hackers to Reroute Cloud Data Streams to External Storage
- Someone Hacked Johnson & Johnson's Internal Systems to Teach It a Lesson
- macOS Flaw Allowed Standard Users to Disable CrowdStrike and Kandji Security Tools
- Gamaredon in 2025 Leveraging Tunnels, Workers, Dead Drops, and New Alliances
- The Latest Addition to Turla's Intelligence Gathering Apparatus
- New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks
- CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure
- AsyncRAT Family Threat Overview
- Suspected Cyberattack Sends Fake Emergency Alert to Phones Across Brazil
- STOCKSTAY The Latest Addition to Turla's Intelligence Gathering Apparatus
- Information Sought on UNC5792 Cyber Group
- Critical Vulnerability in Delta Electronics DTM Soft
- One-two Punch Delivered in Global Operation Disrupts Cybercrime Assembly Line
- Deepfake as a Service' Sees 39% Spike in Dark Web Conversations
- Be on the lookout for Mistic, a new backdoor used by ransomware broker
- INC Ransomware Targets Mainframes
- Amateur Hacker Used Claude And OpenAI Agents To Hack 14 Companies
- Xsolis Data Breach Affects 1.4 Million People
- Siemens WinCC Certificate Manager Vulnerability Advisory
- Cordyceps CI/CD Flaw Exposes Major Repos to Pipeline Hijacking
- Thousands of D-Link Routers Under Control of AryStinger Botnet
- Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
- New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer
- Large-Scale Malware Distribution Campaign on GitHub Uncovered
- FortiBleed You Can't Patch Your Way Out of This
- Popa Botnet Linked to Publicly-Traded Israeli Firm
- Operation Endgame Disrupts SocGholish Malware Infrastructure
- I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID.
- AzeoTech DAQFactory Vulnerability Advisory
- Roblox Developers Face Malware Attacks Losing Entire Games
- Junior Hacker Used Tailscale and OpenSSH to Maintain Access After C2 Went Offline
- Synthetic APTs The Collapse of TTP
- Rockwell Automation RSLinx Vulnerability Advisory
- Public and Private Medical Community Targeted by China-Nexus Threat Actor Pursuing AI and Cyber Research
- Hidden in Teams DragonForce Attackers Weaponize Microsoft Teams Relays
- FishMonger's Arsenal Upgraded SprySOCKS for Windows
- Dissecting Sapphire Sleet's macOS Intrusion from Lure to Compromise
- Ababil of Minab Exposed LA Metro SCADA Backups and Israeli Victim Data Left Open
- Operation Highland Uncovering Velvet Ant's Intrusion
- Feds Freaked Over Fable 5 After Simple 'Fix This Code' Prompt
- DPAPISnoop Tool Enhances Offline Windows Credential Recovery
- Adriatic Port Cyber-Attack by Anubis Sparks Warning Over Maritime Security Risks
- Evil MSI Background BASE64 Statistical Analysis
- Hackers Hide New Argamal Malware Inside Working Hentai Games
- Ex-school district employee jailed for hacks on former employer
- China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade
- Over 80% of Sports Organizations Targeted by Hackers in the Last Year
- Akira, LimeWire, and the Sour Taste of Data Exfiltration
- VRChat Denies Data Breach Claims
- OceanLotus From External Espionage to Domestic Targeting
- How to Defend ARM64 Cloud Infrastructure from ITScape
- A Tale of Two Eras
- Who Runs the Ransomware Group 'The Gentlemen'?
- Expanded JDY IoT and SOHO Botnet Enables Rapid Vulnerability Exploitation
- Siemens KACO Blueplanet Inverters Vulnerabilities
- Schneider Electric Modicon Network Managed Switches Vulnerability
- Phishing Attacks Leverage TikTok, Instagram Reels
- BLUERABBIT A Golang-Based Backdoor with Ransomware and Destructive Capabilities
- 75% of Firms Deploy Vulnerable Code Amid Pressure on CISOs, Report Finds
- Microsoft’s Open Source Tools Hacked to Steal AI Developers' Passwords
- CISA Flags Fresh SolarWinds Serv-U Flaw as Actively Exploited
- New EDRChoker Tool Uses Policy-Based Quality of Service to Block EDR Processes
- Former Cyber Executive Turns Whistleblower Against IBM for Data Breach Cover-Up
- C-Suite Impersonation in the Gulf How Threat Actors Are Targeting UAE & Saudi Executives in 2026
- Pink is the Latest Goon Squad Using Fake Helpdesk Calls to Steal Credentials
- Magecart Skimmer Turns Stripe into a Malware Command Server
- VerdantBamboo Just Another BRICKSTORM in the Firewall
- NAVTOR NavBox Vulnerability Advisory
- Understanding Illicit Ecosystems XSS and the Current State of the Russian-Speaking Underground
- New Fake-Invoice Campaign Uncovered by Malwarebytes
- From Malspam to DesckVB RAT Deployment
- Espionage Campaign Targeted Stock Exchange Executive for Five Months
- Mini Shai-Hulud Campaign Compromises Red Hat Cloud Services
- HP Poly VoIP Vulnerability Sets the Stage for Executive Voice Deepfakes
- Dashlane Reports Cyberattack Hackers Steal Customer Password Vaults
- Pointing a Cursor at Evading Detection
- Windows Server Vulnerability Can Grant System Privileges
- Inside Gamaredon Cyber Operations FSB's Matryoshka
- Hackers Hijacked Instagram Accounts by Tricking Meta AI Support Chatbot
- CISA Adds Critical Palo Alto Networks Firewall Flaw to KEV
- Unidentified RAT Pushes NetSupport RAT
- Tracking APT28 PixyNetLoader Evolutions from 2024 to 2026
- GREYVIBE A Russia-nexus Group Leveraging AI in State-Aligned Operations
- 17 Million Strong Botnet of Compromised Devices Dismantled by Dutch Authorities
- Meet GREYVIBE, the Russia-Linked Hacking Group Using AI to Target Ukraine and Still Making Rookie Mistakes
- Hackers Disguised as IT Support Installing Malware In-Person, FBI Warns
- Commit to Compromise A New Threat Actor Targeting the Cryptocurrency Industry
- Silent Ransom Group Impersonating IT Personnel through Social Engineering
- Smart Contracts for C&C How ClearFake Hid in Plain Sight on BSC Testnet
- Cloud Atlas APT Group Modifies termsrv.dll to Enable Multiple RDP Sessions
- Zero-Click WhatsApp Account Takeover Hits iPhone Users Running iOS 16
- The Alert Firehose Finally Meets Its Match
- Hacker Selling 340 Million OnlyFans User Records Built From Old Breaches
- Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability
- British Drivers Exposed After Mercedes Data Surfaces on Hacker Market
- PyrsistenceSniper Advanced Tool for Detecting Malware Techniques
- An Example of Stack String in High Level Language
- Megalodon Chums the Waters in 5.5K+ GitHub Repo Poisonings
- From Edge Appliance to Enterprise Compromise Multi-Stage Linux Intrusion via F5 and Confluence
- Cloud Atlas Targets Russian and Belarusian Public Sector with New Tools
- Canadian Man Arrested for Administering KimWolf DDoS Botnet
- Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor
- One Man, One AI, One Fake Persona - Inside the 5-Year Influence and Fraud 'Patriot Bait' Campaign
- Critical Pre-Auth RCE in ChromaDB Threatens AI Infrastructure
- Apple Server Schematics Stolen in May 2026 Foxconn Cyberattack
- WantToCry Ransomware Evades Detection Through SMB Abuse
- The Expendable Extension Name Azure VMAccess Naming Chaos, Password Resets, and a Detection Gap
- Carding Forum B1ack's Stash Releases Millions of Stolen Credit Card Records
- Trapdoor Android Ad Fraud Scheme Hits 659 Million Daily Bid Requests
- Verizon 2026 Data Breach Investigations Report (DBIR)
- Pwn2Own Berlin 2026 Closes With $1.3 Million in Zero-Day Payouts
- New Reaper Malware Uses Fake Microsoft Domain to Steal macOS Passwords
- Grafana Rejects Ransom Demand After Source Code Theft
- Malicious JPEG Images Could Trigger PHP Memory Safety Vulnerabilities
- Gamaredon's Infection Chain Spoofed Emails, GammaDrop and GammaLoad
- Pwn2Own Berlin 2026 - Day One Results
- Kazuar Anatomy of a Nation-State Botnet
- ClickFix Finds a Backup Plan in PySoxy Proxy Chains
- State-sponsored Actors The Friends You Don't Want
- New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots
- Darcula aka. Magic Cat - Blog
- Flash Alert EtherRat and TukTuk C2 End in The Gentleman Ransomware
- Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak
- Let's Encrypt Halts Certificate Issuance After Cross-Signed Root Certificate Incident
- Fake Call History Apps Stole Payments From Users After 7.3 Million Play Store Downloads
- Active Attack Dirty Frag Linux Vulnerability Expands Post-Compromise Risk
- Unpacking Russian-Iranian Private-Sector Cyber Connections
- Trellix Discloses Data Breach After Source Code Repository Hack
- OceanLotus Distributing ZiChatBot Malware via PyPI Packages
- Critical Vulnerability in MAXHUB Pivot Client Application
- Sailor Framework - Chinese Backed Phishing Services
- Hacktivists' DDoS Onslaught Leaves Ubuntu Services Limping Days Later
- Trojan Abuses Microsoft Phone Link App to Steal Your Passwords
- Kaspersky Suspects Chinese Hackers Planted a Backdoor into Daemon Tools in 'Widespread' Attack
- Edge Browser Leaves Passwords Exposed in Plain Text, Says Researcher
- A Rigged Game ScarCruft Compromises Gaming Platform
- A Single 732-Byte Python Script Can Obtain Root on Linux Time to Update Your Kernel
- Wiz ZeroDay.Cloud Event Reveals 20-Year-Old PostgreSQL Vulnerabilities
- DigiCert Hacked with a Malicious Screensaver File
- Cyber-Secure Philanthropy Tech Infrastructure for Global Donations
- Paying Ransom Won't Help as VECT 2.0 Ransomware Destroys Data Irreversibly
- Brace for the Patch Tsunami AI is Unearthing Decades of Buried Code Debt
- Watch Guard! Qilin Affiliate Exploits Network Appliances for Initial Access
- EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades
- DeepDoor Python Backdoor Evades Detection On Windows
- Hackers Arrested for Hijacking and Selling 610,000 Roblox Accounts
- New Android Spyware Morpheus Linked to Italian Surveillance Firm
- VECT Ransomware by Design, Wiper by Accident
- Tall Tales How Chinese Actors Use Impersonation and Stolen Narratives to Perpetuate Digital Transnational Repression
- DragonBreath A Critical 0-Day Vulnerability in the Kernel
- ClickUp's Hardcoded API Key Exposes 959 Emails from Fortune 500 Giants
- Microsoft Entra Agent ID Flaw Enabled Tenant Takeover via Privilege Escalation
- NASA Employees Duped in Chinese Phishing Scheme Targeting U.S. Defense Software
- Mystery ShadowBrokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet
- Defending Against China-Nexus Covert Networks of Compromised Devices
- FIRESTARTER Backdoor Malware Analysis
- FIRESTARTER Backdoor Analysis
- FIRESTARTER Backdoor Analysis by CISA
- Tropic Trooper AdaptixC2 and Custom Beacon Uncovered
- The Shadowy SIM Farms Behind Those Incessant Scam Texts - And How To Stay Safe
- Surge in Silent Subject Phishing Attacks Targets VIP Users
- Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API
- Unmasking DPRK Cyber Threat Actors Fake IT Worker Infrastructure & Post-Exposure Analysis
- NCSC Unveils SilentGlass, a Plug-In Device to Protect Monitors from Cyber-Attacks
- Fake Google Antigravity Downloads Are Stealing Accounts in Minutes
- New NGate Malware Developed Using AI Hides in NFC Payment Apps
- Fake Google Antigravity Downloads Are Stealing Accounts in Minutes
- Operation PowerOFF - 75K Users of DDoS-for-Hire Services Identified and Warned
- Operation PowerOFF - 75K Users of DDoS-for-Hire Services Identified and Warned
- Beyond the Breach Inside a Cargo Theft Actor's Post-Compromise Playbook
- Researchers Say Fiverr Left User Files Open to Google Search
- PowMix Botnet Targets Czech Workforce
- From APT28 to RePythonNET Automating .NET Malware Analysis
- Compromised DVRs and Finding Them in the Wild
- Autovista Blames Ransomware for Service Disruption
- Autovista Blames Ransomware for Service Disruption
- Post-Sanction Persistence Triad Nexus' Operations Infrastructure Reborn
- Omnistealer Uses the Blockchain to Steal Everything It Can
- AI Supply Chain Attacks and Iranian Exploits Uncovered
- AI Supply Chain Attacks and Iranian Exploits in Cybersecurity
- Ransomware-Linked ViperTunnel Malware Hits UK and US Businesses
- Post-Sanction Persistence Triad Nexus' Operations Infrastructure Reborn
- Scans for EncystPHP Webshell
- OpenSSF Flags Malware Campaign on Slack Posing as Linux Foundation Figures
- Mirax Android Trojan Turns Devices Into Residential Proxy Nodes
- Mirax Android Trojan Turns Devices Into Residential Proxy Nodes
- FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts
- Slithering Through the Noise - Deep Dive into the VIPERTUNNEL Python Backdoor
- ShinyHunters Claims Rockstar Games Snowflake Breach via Anodot
- The Mythos Inflection Point - Dealing With the Upcoming Vulnerability Disclosure Avalanche and Compressed Exploitation Window
- Just 21 IP Addresses Are Now Behind Nearly Half of All RDP Scanning on the Internet
- The Threat Hunter's Gambit
- Several Dozen' High-Value Corporations Targeted by New Extortion Crew
- Contemporary Controls BASC 20T Vulnerability Advisory
- Rotten Apple An Invasive Threat Actor Targeting Civil Society in Lebanon
- npm Malware, Fake Devs, and Deepfake Videos These Are A Few of My Favorite DPRK Things
- npm Malware, Fake Devs, and Deepfake Videos - A Few of My Favorite DPRK Things
- New Lua-based Malware 'LucidRook' Targeting Taiwanese Organizations
- China Supercomputer Hackers Hnk Intl
- GrafanaGhost Exploit Bypasses AI Guardrails for Silent Data Exfiltration
- Frostarmada Forest Blizzard DNS Hijacking
- GPUBreach Exploit Uses GPU Memory Bit-Flips for Full System Takeover
- How Often Are Redirects Used in Phishing in 2026?
- Hackers Attempt to Turn ComfyUI Servers Into Cryptomining Proxy Botnet
- Researchers Roast Cybercriminals to Stop Glamourizing Them
- New Akira Lookalike Ransomware Campaign Targeting Windows Users in South America
- Researchers Observe Sub-One-Hour Ransomware Attacks
- Adversaries Exploit Vacant Homes to Intercept Mail in Hybrid Cybercrime
- UK Manufacturers Under Cyber Fire with 80% Reporting Attacks
- Casbaneiro Phishing Targets Latin America and Europe Using Dynamic PDF Lures
- Malicious Script That Gets Rid of ADS
- PX4 Autopilot Vulnerability Exposed
- Application Control Bypass for Data Exfiltration
- Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs
- Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs
- Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities
- Masters of Imitation How Hackers and Art Forgers Perfect the Art of Deception
- TP-Link, Canva, HikVision Vulnerabilities Disclosed
- BPFdoor in Telecom Networks Sleeper Cells in the Backbone
- Active Magecart Campaign Targets Spain, Steals Card Data via Hijacked eStores for Bank Fraud
- Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities
- Masters of Imitation How Hackers and Art Forgers Perfect the Art of Deception
- TP-Link, Canva, HikVision Vulnerabilities Disclosed
- BPFdoor in Telecom Networks Sleeper Cells in the Backbone
- Active Magecart Campaign Targets Spain, Steals Card Data via Hijacked eStores for Bank Fraud
- Kamasers Analysis A Multi-Vector DDoS Botnet Targeting Organizations Worldwide
- Ghost Fleet Half of All New Scanning IPs Last Week Geolocated to Hong Kong
- The Kill Chain Is Obsolete When Your AI Agent Is the Threat
- Inside Cyber Council The Toughest RSAC Ticket to Get
- Kamasers Analysis A Multi-Vector DDoS Botnet Targeting Organizations Worldwide
- Ghost Fleet Half of All New Scanning IPs Last Week Geolocated to Hong Kong
- The Kill Chain Is Obsolete When Your AI Agent Is the Threat
- Inside Cyber Council The Toughest RSAC Ticket to Get
- Critical Vulnerability in Grassroots DICOM (GDCM) Detected
- Critical Vulnerability in Pharos Controls Mosaic Show Controller
- Critical Vulnerability in Grassroots DICOM (GDCM) Detected
- Critical Vulnerability in Pharos Controls Mosaic Show Controller
- Case Study How Predictive Shielding in Defender Stopped GPO-Based Ransomware Before It Started
- Exposing a Fraudulent DPRK Candidate
- Case Study How Predictive Shielding in Defender Stopped GPO-Based Ransomware Before It Started
- Exposing a Fraudulent DPRK Candidate
- Trivy Compromised Everything You Need to Know about the Latest Supply Chain Attack
- CTI-REALM A New Benchmark for AI Detection Rule Generation
- Trivy Compromised Everything You Need to Know about the Latest Supply Chain Attack
- CTI-REALM A New Benchmark for AI Detection Rule Generation
- Vibe Hacking Has Arrived - And We Have to Figure Out How to Stop It
- Speagle Malware Hijacks Cobra DocGuard to Steal Data via Compromised Servers
- Vibe Hacking Has Arrived - And We Have to Figure Out How to Stop It
- Speagle Malware Hijacks Cobra DocGuard to Steal Data via Compromised Servers
- The Beast Returns Analysis of a Beast Ransomware Server
- Crypto Scam 'ShieldGuard' Dismantled After Malware Discovery
- Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
- Warlock Ransomware Group Enhances Post-Exploitation Techniques
- Katana A Mirai Variant Targeting Android TV Set-Top Boxes
- How to Examine Polyglot Files with Spectra Analyze
- CODESYS Vulnerabilities in Festo Automation Suite
- Qihoo 360 Leaked Its Own Wildcard SSL Private Key Inside Public AI Installer
- Researchers Find Data Leak Risk in AWS Bedrock AI Code Interpreter
- Researchers Warn of Global Surge in Fake Shipment Tracking Scams
- GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos
- China-Linked Hackers Target Asian Militaries in Espionage Operation
- Payload Ransomware Claims the Hack of Royal Bahrain Hospital
- Credential-Stealing Crew Spoofs VPN Clients from Cisco, Fortinet, and Others
- AI-Generated Slopoly Malware Used in Interlock Ransomware Attack
- The Market for Spyware is Growing - It’s Used Differently Against Women
- Escorted Out! Major Cybersecurity Takedown
- Announcing Pwn2Own Berlin for 2026
- AI-Generated Slopoly Malware Used in Interlock Ransomware Attack
- INC Ransomware Group Holds Healthcare Hostage in Oceania
- A Foreign Hacker Accessed FBI Files on Epstein Back in 2023 - Report
- Meta Disables 150K Accounts Linked to Southeast Asia Scam Centers in Global Crackdown
- INC Ransomware Group Holds Healthcare Hostage in Oceania
- A Foreign Hacker Accessed FBI Files on Epstein Back in 2023 - Report
- Sednit Reloaded - Back in the Trenches
- APT28 Conducts Long-Term Espionage on Ukrainian Forces Using Custom Malware
- Quiz Sites Trick Users into Enabling Unwanted Browser Notifications
- EV Charger Company ELECQ Hit by Ransomware Attack, Customer Data Compromised
- New Social Security Scam Emails Use Fake Tax Documents to Hijack PCs
- Russian APT Targets Ukraine with BadPaw and MeowMeow Malware
- Russian APT Targets Ukraine with BadPaw and MeowMeow Malware
- Manufacturing Supply Chains Face Cascading Cyber Risk as Third-Party Breaches Hit Record Levels
- Delta Electronics CNCSoft-G2 Vulnerability Advisory
- Telegram Increasingly Used to Sell Access, Malware and Stolen Logs
- Europol, Microsoft, TrendAI™ and Collaborators Halt Tycoon 2FA Operations
- Cisco Fixes Maximum-Severity Secure FMC Bugs Threatening Firewall Security
- Ransomware Attack Exposes 1.2 Million University of Hawaii Cancer Center Records
- Most Cybercriminals Are Middle-Aged New Data Reveals
- Coruna - Inside the Nation-State
- Dust Specter APT Targets Government Officials in Iraq
- Dust Specter APT Targets Government Officials in Iraq
- Pakistan’s Top News Channels Hacked and Hijacked With Anti-Military Messages
- Exorcising Demons - Fake Tech Support Delivers Havoc Command & Control
- Apt37 Adds New Capabilities for Air Gapped Networks
- UFP Technologies Discloses Data Breach After Cybersecurity Incident
- Five Eyes Urgent Warning Patch Your Cisco SD-WAN to Prevent Root Takeover!
- Vshell - A Chinese-Language Alternative to Cobalt Strike
- Treasury Sanctions Exploit Broker Network for Cyber Tools Theft
- SLH Offers $500–$1,000 Per Call to Recruit Women for IT Help Desk Vishing Attacks
- Defense Contractor Employee Jailed for Selling 8 Zero-Days to Russian Broker
- Massiv The New Threat to Your Mobile Banking Security
- Wormable XMRig Campaign Uses BYOVD Exploit and Time-Based Logic Bomb
- Data Breaches in 2026 - What’s Old, What’s New?
- Another Day, Another Malicious JPEG
- 2025 - The Untold Stories of Check Point Research
- Another Day, Another Malicious JPEG
- Hackers Hide Pulsar RAT Inside PNG Images in New NPM Supply Chain Attack
- LLMs in the Kill Chain - Inside a Custom MCP Targeting FortiGate Devices Across Continents
- Digital Skimmer Hits Global Supermarket Chain
- Trump Administration's AI Cybersecurity Strategy Unveiled
- Hackers Made Death Threats Against Security Researcher A Big Mistake
- Chinese APT Group Exploits Dell Zero-Day for Two Years
- Aussie Fintech Platform Youx Confirms Data Breach As Hacker Shares Massive Dataset Online
- SmartLoader Hackers Clone Oura MCP Project to Spread StealC Malware
- Keenadu The Tablet Conqueror and Major Android Botnets
- Fake Incident Report Used in Phishing Campaign
- Delta Electronics ASDA-Soft Vulnerability Advisory
- RoguePilot - Exploiting GitHub Copilot for a Repository Takeover
- Threat Actor Selling OpenSea 0-Day Exploit for $100,000
- Suspected Russian Hackers Deploy CANFAIL Malware Against Ukraine
- Operation Macromaze APT28's New Campaign Unveiled
- Icedid Malware Developer Fakes His Own Death To Escape The FBI
- Hand Over the Keys for Shannon’s Shenanigans
- Siemens Siveillance Video Management Servers Vulnerability Advisory
- Odido Confirms Massive Data Breach Affecting 6.2 Million Customers
- LummaStealer Activity Surges After Law Enforcement Disruption
- Critical Vulnerability in Airleader Master Exposed
- Kimwolf Botnet Disrupts I2P Network
- When Paychecks Become the Prize - A Deeper Look at the Rise of Direct Deposit Attacks
- Pulling Back the Curtain on Warlock's Next Act
- Fake Recruiter Campaign Targets Crypto Developers
- Conduent Case Unveiled Volvo Reports Third-Party Compromise
- Pride Month Phishing Targets Employees via Trusted Email Services
- Man Tricked Hundreds of Women into Handing Over Snapchat Security Codes
- Largest Multi Agency Cyber Operation Launched Against APT Threats
- European Commission Investigates Cyberattack on Mobile Device Management System
- Beware of Fake 7-Zip Downloads Turning PCs into Proxy Nodes!
- UK Construction Firm Targeted by Prometei Botnet in Windows Server
- Italian University La Sapienza Offline After Cyber Attack
- BridgePay Confirms Ransomware Attack Behind Outage
- Web Traffic Hijacking Malicious Nginx Configurations Uncovered
- The Shadow Campaigns - Uncovering Global Espionage
- Italy Blames Russia-Linked Hackers for Cyberattacks Ahead of Winter Olympics
- APT28 - Geofencing as a Targeting Signal (CVE-2026-21509 Campaign)
- DockerDash Exposes AI Supply Chain Weakness In Docker's Ask Gordon
- When Hacktivists Target Water Utilities - Inside a Russian-Aligned OT Attack
- Vulnerability Alert Mitsubishi Electric FREQSHIP-mini for Windows
- Critical Vulnerability in Synectix LAN 232 TRIO Exposed
- AT&T Breach Data Resurfaces with New Risks for Customers
- Mutagen Astronomy From Discovery to CISA Recognition—A Seven-Year Journey
- 341 Malicious ClawHub Skills Discovered Stealing User Data
- Cant Stop Wont Stop Ta584 Innovates Initial Access
- Why has Microsoft been routing example.com traffic to a company in Japan?
- ESET Research - Sandworm behind cyberattack on Poland’s power grid in late 2025
- Ticket to Shell - Exploiting PHP Filters and CNEXT in osTicket (CVE-2026-22200)
- Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading
- German Manufacturing Under Phishing Attacks - Tracking a Stealthy AsyncRAT Campaign
- China-Linked UAT-7290 Targets Telecoms with Linux Malware and ORB Nodes
- Ledger Confirms Global-e Breach, Warns Users of Phishing Attempts
- Knownsec leak unmasks secret cyberweapons and role in China’s state-linked spying
- Cybersecurity Professionals Plead Guilty to Launching Ransomware Attacks
- Think Like an Attacker - Cybersecurity Tips From Cato Networks' CISO
- CISA Warns of Windows Cloud Files Mini Filter 0-Day Vulnerability Exploited in Attacks
- Hamas-Affiliated Ashen Lepus Targets Middle Eastern Diplomatic Entities With New AshTag Malware Suite
- Hackers say Volkswagen dealership’s client list is now for sale
- MuddyWater Snakes by the riverbank
- Everest Ransomware Claims ASUS Breach and 1TB Data Theft
- Over 2,000 Fake Shopping Sites Spotted Before Cyber Monday
- ThreatsDay Bulletin - AI Malware, Voice Bot Flaws, Crypto Laundering, IoT Attacks — and 20 More Stories
- Bloody Wolf Expands Java-based NetSupport RAT Attacks in Kyrgyzstan and Uzbekistan
- Cyber-Attack Disrupts OnSolve CodeRED Emergency Notification System
- KawaiiGPT – New Black-Hat AI Tool Used by Hackers to Launch Cyberattacks
- Cox Confirms Oracle EBS Hack as Cybercriminals Name 100 Alleged Victims
- Self-replicating botnet attacks Ray clusters
- Researchers Detail Tuoni C2's Role in an Attempted 2025 Real-Estate Cyber Intrusion
- What Should A Modern Cybersecurity Stack Look Like?
- One World, Many Threats - How Regional Realities Shape Global Cyber Defense
- Fortinet’s delayed alert on actively exploited defect put defenders at a disadvantage
- Google Sues China-Based Hackers Behind $1 Billion Lighthouse Phishing Platform
- Phishers try to lure 5K Facebook advertisers with fake business pages
- Attackers targeting unpatched Cisco kit notice malware implant removal, install it again
- UNC6384 Weaponizes ZDI-CAN-25373 Vulnerability to Deploy PlugX Against Hungarian and Belgian Diplomatic Entities
- New AI-Targeted Cloaking Attack Tricks AI Crawlers Into Citing Fake Info as Verified Facts
- Aisuru Botnet Shifts from DDoS to Residential Proxies
- OpenAI Atlas Browser Vulnerability Allows Malicious Code Injection into ChatGPT
- Everest Ransomware Says It Stole 1.5M Dublin Airport Passenger Records
- Anomali Cyber Watch - Nimbus Manticore, Spoofed IC3 Portals, a Record-Breaking DDoS Attack, and More
- Cyber defenders sound the alarm as F5 hack exposes broad risks
- China Accuses US of Cyberattack on National Time Center
- Collins Aerospace attack claimed by Everest, linking ransomware group to last month's European airport chaos
- From Phishing to Malware AI Becomes Russia's New Cyber Weapon in War on Ukraine
- CometJacking One Click Can Turn Perplexity's Comet AI Browser Into a Data Thief
- Microsoft Flags AI-Driven Phishing LLM-Crafted SVG Files Outsmart Email Security
- EvilAI Malware Masquerades as AI Tools to Infiltrate Global Organizations
- Cisco Talos attributes Asian telecom and manufacturing attacks to Naikon PlugX campaign
- Heathrow Airport Cyberattack What Happened, Who’s Affected, and What CISOs Should Know
- Car giant Stellantis says customer data nicked after partner vendor pwned
- BreachForums Owner Sent to Prison in Resentencing
- New Yurei Ransomware With PowerShell Commands Encrypts Files With ChaCha20 Algorithm
- IBM QRadar SIEM Vulnerability Let Attackers Perform Unauthorized Actions
- Actors Behind AppSuite-PDF and PDF Editor Used 26 Code-Signing Certificates to Make Software Appear Legitimate
- New HybridPetya Weaponizing UEFI Vulnerability to Bypass Secure Boot on Outdated Systems
- Vietnam investigates cyberattack on creditors data
- China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations
- Windows Defender Vulnerability Allows Service Hijacking and Disablement via Symbolic Link Attack
- NoisyBear Weaponizing ZIP Files to PowerShell Loaders and Exfiltrate Sensitive Data
- GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module
- Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats
- Ukrainian Network FDN3 Launches Massive Brute-Force Attacks on SSL VPN and RDP Devices
- New Phishing Attack Via OneDrive Attacking C-level Employees for Corporate Credentials
- Iran-Nexus Hackers Abuses Omani Mailbox to Target Global Governments
- Critical Next.js Framework Vulnerability Let Attackers Bypass Authorization
- Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans
- CISA Publish Hunting and Mitigation Guide to Defend Networks from Chinese State-Sponsored Actors
- Anthropic Disrupts AI-Powered Cyberattacks Automating Theft and Extortion Across Critical Sectors
- Hackers steal data from Salesforce instances in widespread campaign
- FBI Warns FSB-Linked Hackers Exploiting Unpatched Cisco Devices for Cyber Espionage
- UK-based Telecommunications Company Colt Technology Services Hit by Major Cyberattack
- Cyberattack on Dutch prosecution service is keeping speed cameras offline
- Cybersecurity in Focus Recent Threats Targeting India Amid Independence Day Celebrations
- Charon Ransomware Hits Middle East Sectors Using APT-Level Evasion Tactics
- Update WinRAR tools now RomCom and others exploiting zero-day vulnerability
- ShadowSyndicate Infrastructure Used by Multiple Ransomware Groups Including Cl0p, LockBit and RansomHub
- Frozen in transit Secret Blizzard’s AiTM campaign against diplomats
- Cybercriminals Attack Seychelles – Offshore Banking as a Target
- Hackers Exploit Official Gaming Mouse Software to Spread Windows-based Xred Malware
- Ports are getting smarter and more hackable
- HAFNIUM-Linked Hacker Xu Zewei Riding the Tides of China’s Cyber Ecosystem
- CERT-UA Discovers LAMEHUG Malware Linked to APT28, Using LLM for Phishing Campaign
- Turbulence at Air Serbia, the latest airline under cyber siege
- From a Teams Call to a Ransomware Threat Matanbuchus 3.0 MaaS Levels Up
- Ukrainian Hackers Wipe 47TB of Data from Top Russian Military Drone Supplier
- Dark Web Profile Arkana Ransomware
- Batavia spyware steals data from Russian organizations
- macOS NimDoor | DPRK Threat Actors Target Web3 and Crypto Platforms with Nim-Based Malware
- Qantas confirms customer data breach amid Scattered Spider attacks
- International Criminal Court hit with cyber attack during NATO summit
- Hawaiian Airlines Hit by Cybersecurity Incident
- Iran-Linked Threat Actors Leak Visitors and Athletes' Data from Saudi Games
- Androxgh0st Continues Exploitation Operators Compromise a US University For Hosting C2 Logger
- Fileless AsyncRAT Distributed Via Clickfix Technique Targeting German Speaking Users
- Clone, Compile, Compromise Water Curse’s Open-Source Malware Trap on GitHub
- Anubis A Closer Look at an Emerging Ransomware with Built-in Wiper
- APT 41 Threat Intelligence Report and Malware Analysis
- Chinese Hackers Infiltrated U.S. Telecom Networks a Year Earlier Than Previously Known
- mommy Access Broker
- Russian-linked hackers target UK Defense Ministry while posing as journalists
- Cybercriminals camouflaging threats as AI tool installers
- NHS trusts' data 'stolen' in cyberattack
- Credential-Stealing Crew Spoofs VPN Clients from Cisco, Fortinet, and Others
- Payload Ransomware Claims Hack of Royal Bahrain Hospital
- AppsFlyer Web SDK Hijacked to Spread Crypto-Stealing JavaScript Code