CrowdStrike compromise: Multiple CrowdStrike npm packages were compromised in a growing supply chain attack. Identical malware: The Shai-Hulud malware isโฆ
Harsher resentence: Authorities resentenced the BreachForums founder and admin to three years in prison after the initial sentence. Insufficient sentence:โฆ
RaccoonO365 PhaaS: Microsoft disrupted the infrastructure of a rapidly growing PhaaS platform, seizing hundreds of domains. Credential theft tools: Theโฆ
Telco attack: Spainโs prominent telecommunications provider Avatel Telecom was allegedly targeted by a cyberattack. Breach scope: ByteToBreach claims it stoleโฆ
Salesforce exploit: The FBI highlighted active Salesforce exploitation campaigns by two cybercriminal groups. Google confirmed: Throughout the year, Google confirmedโฆ
Critical Flaw: CVE-2025-5086 affects DELMIA Apriso versions 2020 to 2025. Exploitation via HTTP Endpoint: Attackers deliver spyware via a GZIP-compressedโฆ
VNCERT-confirmed breach: Vietnamโs Cyber Emergency Response Center confirmed the countryโs National Credit Information Center was breached. Why it matters: Managedโฆ
AiTM attacks: The newly discovered VoidProxy PhaaS platform enables attackers to steal user credentials. Google and Microsoft accounts: Phishing emailsโฆ
California bill: Proposed legislation mandates that all internet browsers offer opt-out options for sharing usersโ data. Privacy legislation: It aimsโฆ
For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: