Breaches · 17h ago
AI‑Driven Intrusion Campaign Hits South Korean Financial Firms, Data Stolen
South Korean financial institutions faced a coordinated breach in late September and early October 2026, when a…
Russian Cyber Group UAC-0099 Revamps MatchBoil Dropper for Stealthy Attacks on Ukraine
A Russian cyber‑espionage outfit identified as UAC-0099 has released a new version of its MatchBoil malware, incorporating a series of stealth enhancements that make the tool harder to spot in…
Latest feed
RSS →
Threats · 15h ago
Microsoft Teams to Integrate Third‑Party Deepfake Detection, Boosting Meeting Security
Microsoft announced that its collaboration platform, Teams, will soon allow users to add external deepfake detection…
CVE & Exploits · 8h ago
International Coalition Dismantles Cyber Tools Linked to China's Integrity Tech in Flax Typhoon Operation
The United States, together with several allied nations, announced this week that it had seized a suite of digital…
CVE & Exploits · 6h ago
FBI Seizes Domains Tied to Chinese Group Behind Critical Infrastructure Hacks
The Federal Bureau of Investigation announced Monday that it has taken control of seven internet domains linked to the…
Ransomware · 10h ago
Hunt.io Uncovers Ongoing BraZetsu Infrastructure Ahead of Public Disclosure
Cyber‑security firm Hunt.io announced that its monitoring teams identified active components of the BraZetsu access…
CVE & Exploits · 21h ago
Samsung Galaxy S26 Falls Again at Pwn2Own Ireland, Boosting Researchers’ Cash Haul
Security experts demonstrated yet another breach of Samsung's flagship device on the second day of Pwn2Own Ireland…
Malware
More →
Malware · 8h ago
Low‑Cost Android Handsets Found Pre‑Installed with Residential Proxy Malware
Security researchers have uncovered a widespread campaign, dubbed "Midnight Mimosa," that embeds malicious code…
Malware · 10h ago
FakeGit Resurfaces on GitHub with Over 17,000 Malicious Repositories Deploying SmartLoader Malware
The FakeGit operation has reemerged, this time populating more than 17,600 counterfeit repositories on GitHub with the…
Malware · 8h ago
FBI Adds Venezuelan Hacker to Ten Most Wanted After ATM Jackpotting Scheme Funded Gangs
The Federal Bureau of Investigation announced this week that a Venezuelan cybercriminal has become the first hacker to…
Ransomware
More →
Ransomware · 6h ago
North Carolina Man Who Led Online Child Sextortion Ring Pleads Guilty, Faces Up to 30 Years in Prison
Federal prosecutors announced Thursday that 21‑year‑old Prasan Nepal of North Carolina entered a guilty plea for his…
Ransomware · 10h ago
Hunt.io Uncovers Ongoing BraZetsu Infrastructure Ahead of Public Disclosure
Cyber‑security firm Hunt.io announced that its monitoring teams identified active components of the BraZetsu access…
Ransomware · 10h ago
DOJ Indicts Ransomware Recovery Firm CEO Over Secret Hacker Payments and Overbilling
The U.S. Department of Justice on Wednesday filed a wire‑fraud indictment against the chief executive of a firm that…
CVE & Exploits
More →
CVE & Exploits · 8h ago
International Coalition Dismantles Cyber Tools Linked to China's Integrity Tech in Flax Typhoon Operation
The United States, together with several allied nations, announced this week that it had seized a suite of digital…
CVE & Exploits · 6h ago
FBI Seizes Domains Tied to Chinese Group Behind Critical Infrastructure Hacks
The Federal Bureau of Investigation announced Monday that it has taken control of seven internet domains linked to the…
CVE & Exploits · 21h ago
Samsung Galaxy S26 Falls Again at Pwn2Own Ireland, Boosting Researchers’ Cash Haul
Security experts demonstrated yet another breach of Samsung's flagship device on the second day of Pwn2Own Ireland…
Phishing
More →
Phishing · 13h ago
Cybercriminals Breach Three Country‑Code Domains to Secure Illicit Google SSL Certificates
Security researchers have confirmed that attackers managed to infiltrate the registries responsible for the .gh, .sl…
Phishing · 9h ago
FBI Reveals China-Linked Hackers Operated Portal to Distribute Stolen Southeast Asian Emails
The Federal Bureau of Investigation announced on Oct. 8 that a group of hackers associated with a Chinese cybersecurity…
Phishing · 22h ago
Supply Chain Attack Hits Tensorlake SDK, Injects Credential-Stealing Worm
A malicious version of the popular Tensorlake TypeScript SDK, distributed through the npm registry, has been identified…