A recently identified Android banking trojan known as Crocodilus has surfaced in at least eight countries across Europe and South America, according to a report from cybersecurity firm ThreatFabric. The malware is being deployed in an increasing number of malicious campaigns and is designed to target both banking applications and cryptocurrency wallets on infected devices. […]
A newly identified information-stealing malware written in the Rust programming language is targeting Chromium- and Gecko-based browsers, according to researchers at cybersecurity firm Trellix. Dubbed Myth Stealer, the malware has been active since December 2024 and is distributed through fake gaming sites and Telegram channels. Initially offered as a free trial, it has shifted to […]
The Council of the European Union on Tuesday adopted a revised Blueprint aimed at enhancing cybersecurity crisis management across the bloc. The updated framework is designed to strengthen coordination among EU member states and institutions in the event of large-scale or cross-border cyber incidents. The new plan outlines a structured approach for preparedness and joint […]
Interpol has dismantled a major cybercrime operation targeting victims in Asia, taking down 20,000 IP addresses and arresting 32 individuals involved in distributing infostealer malware. The crackdown, conducted under the banner of Operation Secure, aimed to disrupt the infrastructure supporting these malicious campaigns. Infostealer malware is designed to harvest sensitive personal and financial data from […]
The UK government’s latest fiscal strategy emphasizes a strong commitment to technology, with the UK AI cybersecurity funding 2025 initiative forming a key part of the Spending Review 2025. The review outlines increased investment in artificial intelligence, cybersecurity, and modernization efforts across intelligence services and public sector infrastructure. Among the sectors receiving support, the National […]
Cybercriminals escalated their tactics last week, launching sophisticated attacks and exploiting critical software flaws across platforms. Hackers hijack AI naturally by jailbreaking large language models like Grok and Mixtral, bypassing safety protocols to generate phishing scripts and malware. Meanwhile, the largest DDoS attack on record hit 7.3 Tbps, while over 20 malicious apps on Google […]
Cybercriminals are exploiting jailbroken AI from xAI and Mistral to create uncensored versions of large language models, researchers have found. These modified tools are circulating on dark web forums, where threat actors advertise them as powerful assets for conducting illicit activities. The manipulated AI models remove built-in safety features, allowing users to generate harmful or […]
An Iranian hacker has pleaded guilty in the U.S. to involvement in a wide-ranging ransomware and extortion operation that inflicted $19 million in damages on the city of Baltimore. The defendant, identified as Sina Gholinejad, also known as Sina Ghaaf, 37, admitted to participating in a scheme that used Robbinhood ransomware to infiltrate and encrypt […]
Europol has identified and targeted over 2,000 online items linked to extremist groups that exploit minors in digital spaces. The coordinated action focused on content promoting radical ideologies while using children for propaganda or grooming purposes. According to a report from Hackread, the operation involved the identification and flagging of materials hosted on various platforms, […]
Google’s Threat Analysis Group has identified a zero-day vulnerability in the Chrome web browser that may have been exploited by commercial spyware vendors. The flaw, which was discovered recently, has raised concerns about the potential misuse of browser vulnerabilities by surveillance software developers. While technical details about the vulnerability have not been disclosed, the incident […]
A newly discovered variant of the Mirai botnet is exploiting a critical vulnerability, CVE-2024-3721, in TBK DVR-4104 and DVR-4216 digital video recorders, according to researchers from cybersecurity firm Kaspersky. The malware uses a direct infection method, bypassing architecture detection by deploying an ARM32 binary—tailored to the devices’ specifications—via a malicious POST request. Unlike earlier Mirai […]
A misconfigured database has exposed the personal information of approximately 3.6 million creators using Passion.io, a platform that helps users build custom mobile apps. The unsecured database, left accessible without authentication, reportedly contained sensitive user data, including names, email addresses, and other identifiable information. The breach was discovered by security researchers who found that the […]