The Agenda ransomware group has enhanced its cyberattack toolkit by integrating two new components: the well-known SmokeLoader malware and a .NET-based loader dubbed NETXLOADER, according to research from Trend Micro. First spotted in campaigns launched in November 2024, the updated attack chain offers increased stealth and complexity, allowing the group to bypass detection mechanisms more […]
Hackers affiliated with the Anonymous collective have allegedly breached systems belonging to Global Crossing Airlines (GlobalX), a U.S.-based charter airline contracted for deportation flights. According to reports, the attackers claim to have stolen sensitive flight data, including logs and operational details linked to the airline’s services for U.S. immigration authorities. The cyber intrusion appears to […]
The European Union on Tuesday unveiled a centralized vulnerability database aimed at strengthening cybersecurity across the bloc. The platform will serve as an aggregated repository of information related to security flaws found in a wide range of digital products and services. By consolidating data on software and hardware vulnerabilities, the EU seeks to improve transparency […]
A newly uncovered ransomware campaign is targeting supporters of Elon Musk with a mix of technical sophistication and satirical messaging, according to researchers at KrakenLabs. Identified as a variant of the Fog ransomware family, the attack chain begins with phishing emails containing PDFs labeled “Pay Adjustment.” These lure victims to a Netlify-hosted ZIP file that […]
A critical vulnerability in the GNU C Library (glibc) is putting millions of Linux systems at risk of local privilege escalation and arbitrary code execution, according to a security advisory published May 16. Tracked as CVE-2025-4802, the flaw affects glibc versions 2.27 through 2.38 and stems from improper handling of the LD_LIBRARY_PATH environment variable in […]
A Brussels Court of Appeal ruled Wednesday that tracking-based online advertising practices violate European privacy laws, citing insufficient consent mechanisms. The decision targets the core of how digital advertisers operate across the EU, where user data is routinely collected and shared to serve personalized ads. The court found that current implementations of consent do not […]
Hackers are leveraging search engine optimization (SEO) poisoning to launch a new wave of payroll fraud attacks, security researchers at ReliaQuest report. By targeting employees on mobile devices, attackers create fake login pages that closely mimic legitimate corporate payroll portals. These spoofed sites appear prominently in search results when users look for company payroll platforms, […]
A widespread malware campaign using the Lumma infostealer compromised approximately 10 million systems globally before being disrupted, according to the FBI. The malicious software targeted a broad range of victims, including individuals, businesses, and major corporations such as those in the Fortune 500. Cybercriminals deployed the malware to extract sensitive data from infected machines, enabling […]
VMware has released a new batch of security patches addressing multiple software vulnerabilities that could expose users to serious cyber threats, including data leakage, unauthorized command execution, and denial-of-service (DoS) attacks. The most critical flaw among them has been flagged by NATO, underscoring its potential impact on security-sensitive environments. The company did not provide any […]
The Everest ransomware group has reportedly leaked sensitive employee data belonging to Coca-Cola, exposing internal records on the dark web. According to cybersecurity sources, the compromised information includes personal and professional details of the company’s staff. The leak was disclosed via the hackers’ data leak site, where samples of the stolen files were made publicly […]
Chinese authorities have accused a group allegedly connected to Taiwan’s ruling Democratic Progressive Party (DPP) of carrying out cyberattacks on a local technology company, according to police in Guangzhou. The group is suspected of targeting more than 1,000 critical networks across over 10 provinces in mainland China, officials said. The announcement comes amid heightened tensions […]
An Iranian national has pleaded guilty to two criminal counts tied to the deployment of the RobbinHood ransomware, which inflicted at least $19 million in damages, most notably targeting the city of Baltimore. The cyberattack disrupted municipal operations, crippling services and systems across the city. The defendant, identified as Sina Gholinejad, admitted to participating in […]