MostereRAT campaign: A newly seen phishing campaign relying on social engineering distributes a powerful RAT. Additional capabilities: It can also…
News
Salt Typhoon domains: Today, previously unreported Salt Typhoon-attributed domains registered between 2020 through early 2025 were disclosed. In numbers: Dozens…
Fake email: Several entities reported receiving an email impersonating China committee chair Representative John Moolenaar. The lure: An attachment purported…
Virtual Private Networks (VPNs) are widely marketed as tools that secure online activity, anonymize user data, and protect privacy. Yet,…
Server Expansion: IPVanish now expand 3100+ VPN servers across 145+ global locations. Security Upgrade: All servers are RAM-only, wiping data…
Tenable data breach: Tenable business contact information and data related to customer accounts and support cases have been exposed. How…
Sentencing: An Oklahoma man was sentenced to 78 months for consuming child abuse material. Undercover operation: Jason Gardner Davis shared…
XSS takedown: Studies suggest threat actors are taking interest in new dark web forum DamageLib following the XSS admin arrest.…
Grok AI abuse: A technique dubbed "Grokking" bypasses security filters for malware distribution via exploiting AI's trusted status. First step:…
OPSO breach: The US Orleans Parish Sheriff's Office was hit by a cyberattack, impacting over 12 computers. Attack containment: Sheriff’s…
Flaw exploited: Attackers are abusing a critical ViewState deserialization vulnerability that impacts several Sitecore deployments. How it works: Successful exploitation…
Bank attack: The West Virginia Bank of Romney was reportedly targeted by Akira Ransomware. What was stolen: The threat actor…
Infostealer surge: Security researchers have noticed a spike in Stealerium campaigns, which use a variety of lures. Potential sextortion: The…
Cybersecurity chief accused: Ukraine's Anti-Corruption Bureau accused the former SBU cybersec chief in an anti-corruption action. Illia Vitiuk charges: NABU…
Piracy crackdown: A comprehensive anti-piracy operation seized more than 80 domains involved in illegally distributing live sports events. Streameast takedown:…
AutoIt abuse: The first known instance of an obfuscated AutoIt loader being used to deliver NBMiner was observed. Legitimate tools:…
JLR shutdown: A Jaguar Land Rover cybersecurity incident was recently acknowledged as the source of an IT system shutdown. Official…
Illegal IPTV network: Systematic content theft operations are targeting legitimate streaming services worldwide via over 1,000 domains. How it works:…
Meta order: Singapore ordered Meta to up its anti-scam prevention measures on Facebook or face penalties. Facebook scams: Local authorities…
Expanding compromise: A Palo Alto Networks data breach has been confirmed in relation to the Salesforce security incident. What was…
Get expert insights on threats, breaches, scams, and security trends — delivered every Saturday.
Most Popular