A British citizen known online as IntelBroker has been charged by U.S. authorities for a series of cyberattacks that allegedly resulted in $25 million in damages. The individual reportedly stole and sold sensitive data from dozens of victims, targeting both private entities and public organizations. British hacker IntelBroker charged in connection with these breaches is […]
Cisco has issued an urgent warning regarding critical security flaws in its Identity Services Engine (ISE) platform, with vulnerabilities rated at the highest severity level. The company flagged the issues as part of its latest security advisory, stating that the flaws could allow remote attackers to execute arbitrary code on affected systems. Cisco flags 10.0 […]
Hackers twist ScreenConnect into a new cyber threat by manipulating the installer’s digital signature, turning the legitimate remote access tool into a vehicle for malware. According to recent findings, threat actors are exploiting the ConnectWise ScreenConnect client by altering concealed settings within its Authenticode signature. This technique allows them to create signed remote access malware […]
Citrix has disclosed a critical vulnerability affecting its NetScaler ADC and NetScaler Gateway products, warning users that the flaw is actively being exploited in the wild. The Citrix Zero Day Flaw, which surfaced just nine days after the company identified two separate defects in the same systems, poses a significant security risk to enterprise users […]
A newly identified cyber campaign, dubbed OneClik, targets the energy, oil and gas sectors using a blend of legitimate tools and custom malware. Hackers exploit Microsoft tools, specifically the ClickOnce deployment framework, to deliver malicious payloads with minimal detection. Researchers say the attackers rely on deceptive links to lure victims into launching the compromised applications. […]
A new wave of North Korea hacks devs through a deceptive campaign that uses fake job interviews and malicious npm packages. Security researchers have identified 35 compromised packages uploaded to the npm repository, which deliver infostealers and backdoors to developers’ systems. These tools collect sensitive information and open unauthorized access points. Labeled the “Contagious Interview” […]
Hackers are distributing a fake SonicWall VPN application to steal corporate login credentials from remote users. The malicious software mimics SonicWall’s legitimate NetExtender SSL VPN app, which allows employees to securely connect to internal networks. Dubbed “SilentRoute” by Microsoft Threat Intelligence, the trojanized version tricks users into installing it, giving attackers access to sensitive data. […]
Cybercrime now accounts for over 30% of all reported crimes in Western and Eastern Africa, according to INTERPOL’s 2025 Africa Cyberthreat Assessment Report. The report, titled “INTERPOL Warns Africa Cyber,” highlights a dramatic shift in the region’s threat landscape, with two-thirds of African nations reporting cyber-related offenses as a medium-to-high proportion of total criminal activity. […]
The European Digital Rights (EDRi) network voiced strong opposition last week to the European Commission’s proposed rules on data retention. In a joint response, EDRi blasts EU plans to expand the mandatory retention of user data by service providers, citing risks to privacy and civil liberties. The group raised concerns about the absence of proportional […]
Glasgow City Council reported a cyber incident that disrupted multiple online services and may have compromised customer data. The council confirmed the issue on its official channels, stating that the breach had affected operations and potentially led to unauthorized access to personal information. The Glasgow City Council data breach has raised concerns about the security […]
Cybersecurity firm Trellix has uncovered a sophisticated campaign using the OneClik malware, which targets organizations in the energy, oil and gas sectors. The campaign exploits Microsoft’s ClickOnce deployment technology to deliver malicious payloads and evade traditional detection methods. OneClik malware hits energy firms by embedding itself in cloud-hosted environments, enabling attackers to bypass endpoint defenses […]
SonicWall warns NetExtender tool users to be on alert after discovering a tampered version of the application embedding data-theft capabilities. The company identified that attackers modified the legitimate NetExtender VPN client, inserting malicious code designed to capture user information. This development raises concerns for enterprises relying on the tool for secure remote access. According to […]