Cybercriminals are increasingly leveraging residential proxy services to disguise malicious web traffic as ordinary online activity, making it harder for cybersecurity systems to detect and block harmful behavior. These services reroute traffic through real users’ internet connections, effectively masking the origin of the activity and giving it the appearance of legitimate browsing. By blending in […]
Microsoft has launched a new European Security Program in what it describes as a “proactive investment” in cybersecurity across the European Union. The move comes as the tech giant faces criticism over security vulnerabilities and as tensions between the EU and the U.S. continue to shift. The initiative aims to bolster Microsoft’s collaboration with European […]
Ukrainian authorities have arrested a 35-year-old hacker accused of breaching 5,000 accounts at an international hosting provider and using the compromised systems to mine cryptocurrency. The cyberattack caused an estimated $4.5 million in damages, according to a statement from the police. The suspect allegedly gained unauthorized access to servers belonging to the hosting company and […]
A critical vulnerability tracked as “DanaBleed” enabled investigators to infiltrate the DanaBot botnet, exposing its internal operations over a period of three years. The flaw allowed access to sensitive data, offering rare visibility into the infrastructure and tactics of one of the more persistent cybercriminal networks in recent years. DanaBot, which was recently disrupted, had […]
A new cybersecurity threat is targeting e-commerce websites by embedding itself into WordPress checkout pages. This sophisticated WordPress malware mimics Cloudflare’s interface to trick users into sharing sensitive payment details. By disguising itself as a legitimate security prompt, the malware captures card data during the checkout process without raising suspicion. The malicious script activates only […]
Cybercrime now accounts for over 30% of all reported crimes in Western and Eastern Africa, according to INTERPOL’s 2025 Africa Cyberthreat Assessment Report. The report, titled “INTERPOL Warns Africa Cyber,” highlights a dramatic shift in the region’s threat landscape, with two-thirds of African nations reporting cyber-related offenses as a medium-to-high proportion of total criminal activity. […]
Two newly discovered vulnerabilities in popular Linux distributions could allow local attackers to access sensitive data, including password hashes, security researchers have found. The flaws, tracked as CVE-2025-5054 and CVE-2025-4598, affect apport and systemd-coredump—core dump handling utilities used in Ubuntu, Red Hat Enterprise Linux (RHEL), and Fedora. According to the Qualys Threat Research Unit, both […]
Microsoft Corp. and CrowdStrike Holdings Inc. have launched a joint initiative to streamline cyber threat actor identification, aiming to eliminate confusion caused by inconsistent naming conventions across the cybersecurity industry. The collaboration, announced yesterday, introduces a cross-referenced mapping system that links varying threat actor names used by different vendors, without enforcing a unified standard. The […]
A newly observed campaign involving the Crocodilus malware is raising alarms among cybersecurity researchers, who warn that the Android-based threat is adopting deceptive tactics to facilitate banking fraud. The malware reportedly infiltrates victims’ devices and inserts fake entries into their contact lists, making it appear as though incoming messages or calls are coming from legitimate […]
More than 20 malicious applications found on the Google Play Store have been targeting cryptocurrency users by attempting to steal their seed phrases, according to cybersecurity researchers. These apps, disguised as legitimate crypto wallet tools, were designed to trick users into entering sensitive information that could grant attackers full access to their digital assets. The […]
Cisco has issued security updates to fix three vulnerabilities affecting its Identity Services Engine (ISE) and Customer Collaboration Platform (CCP), warning that public exploit code is already available for the flaws. The company released patches to mitigate the risks associated with these security weaknesses, which could potentially be used by threat actors to compromise affected […]
Cybercriminals are exploiting legitimate WordPress websites in a growing scheme tied to the VexTrio Viper Traffic Distribution Service (TDS). The operation, which security researchers describe as highly organized, uses WordPress hijacked to spread malicious software and scams across a global network. VexTrio appears to operate alongside other TDS platforms, including Help TDS and Disposable TDS. […]