DragonForce listed U.S. department store chain Belk as its latest victim. The attackers reportedly accessed and exfiltrated confidential information. Belk previously acknowledged unauthorized third-party access to internal files. The DragonForce…

A Google Gemini for Workspace prompt-injection vulnerability that allows for hidden prompts. Attackers use a known technique – zero font size and white text to hide content from users in…

Stormous Ransomware published samples from an alleged data breach targeting North Country HealthCare. The threat actor intends to sell 500,000 patient records and leak another 100,000. The stolen data reportedly…

Numerous industries are targeted in a KongTuke campaign that transitions to a FileFix variant. Attackers employ fake CAPTCHA verifications to deploy an enhanced version of the Interlock RAT. It utilizes…

Doxing of Immigration and Customs Enforcement (ICE) officers has surged, particularly in Portland. This is attributed to Antifa-affiliated groups like "Rose City Counter-Info" and "The Crustian Daily." These groups are…

The macOS.ZuRu malware resurfaced, hiding in the popular SSH client and server-management Termius app. The novel variant uses the open-source Khepri C2 framework with severe consequences. Infection can lead to…

Russian basketball player Daniil Kasatkin was detained in France at the request of the U.S. authorities. Kasatkin stands accused of being a ransom negotiator for a prominent threat actor, which…