What happened: Attackers exploit Google Tag Manager in WordPress websites to redirect users to malicious domains. Why it matters: Malicious…
News
Flaw impact: A TeleMessage communication tool vulnerability permits unauthenticated endpoint access, exposing sensitive user details. Critical risks: This flaw critically…
What happened: Public GitHub repositories were leveraged to host the Emmenhtal loader, Amadey malware, and AsyncRAT. Multi-stage infection: The Emmenhtal…
What happened: A Special Forces headquarters email containing relocation details for Afghans was sent to the wrong recipient. People impacted:…
Trick Cloaking: The Hoax Tech and JS Click Cloaker intelligent cloaking solutions are used for shielding fraudulent websites. AI-powered tools:…
Russia plans fines for users searching extremist content, even when using VPN services. New law proposes penalties for advertising VPNs…
Prolonged access: Salt Typhoon gained extensive access to the National Guard’s internal network for nearly a year. Extended compromise: The…
Cryptocurrency theft: Octalyn Stealer aggressively targets cryptocurrency wallets like Bitcoin, Ethereum, Litecoin, and Monero. VPNs targeted: It captures VPN configuration…
Operation Eastwood: Global authorities have taken down over 100 servers used for DDoS attacks on various entities. Why it matters:…
EU’s 2030 roadmap proposes lawful access to encrypted data for law enforcement agencies. Experts concern for EU's plan shows how…
A Blocking First: Cloudflare is the first anti-piracy internet intermediary beyond ISPs to block pirate sites. Legal Reasons: A legal…
What Happened: Cameron John Wagenius pleaded guilty to extra charges in an ongoing lawsuit, including ransomware extortion. Fraud Conspiracy: DOJ…
What Happened: The Ukrainian BO Team claimed a successful Gaskar Group network and server infrastructure breach. Assets Impacted: The attackers…
An Australian-Russian national, Simeon Boikov, was sanctioned for disseminating false information on critical topics. The individual spread misinformation targeting the…
Phishing campaigns are leveraging a sophisticated method called SVG smuggling. Attackers exploit SVGs by disguising malicious JavaScript code as part…
Attackers utilize advanced phishing to exploit trust in software downloads from familiar-looking websites. Security researchers flagged over 600 domains linked…
A government employee with ties to DOGE was the source of another API key data breach. Marko Elez leaked a…
DragonForce listed U.S. department store chain Belk as its latest victim. The attackers reportedly accessed and exfiltrated confidential information. Belk…
A Google Gemini for Workspace prompt-injection vulnerability that allows for hidden prompts. Attackers use a known technique – zero font…
Stormous Ransomware published samples from an alleged data breach targeting North Country HealthCare. The threat actor intends to sell 500,000…
Get expert insights on threats, breaches, scams, and security trends — delivered every Saturday.
Most Popular
