An Iran-linked group has launched a sophisticated password-spraying campaign targeting over 300 Microsoft 365 environments in Israel and the UAE, intensifying cybersecurity challenges amid ongoing Middle Eastern conflicts. The campaign, attributed to a threat actor with connections to Iran, executed coordinated attacks in three distinct waves on March 3, March 13, and March 23, 2026. […]
Microsoft warns that a financially motivated threat group, Storm-1175, is exploiting zero-day flaws in internet-facing assets to launch Medusa ransomware attacks. These high-paced intrusions can incapacitate organizations within 24 hours, taking advantage of newly disclosed software vulnerabilities before they are patched. The group targets unpatched “N-day” vulnerabilities and also exploits zero-day flaws, highlighting a sophisticated […]
German police have identified key figures behind the notorious ransomware groups, REvil and GandCrab. The Federal Police in Germany (known as BKA) named two Russian nationals as masterminds behind these cybercrime operations active between 2019 and 2021. The identification marks a significant development in the global fight against cybercrime. These ransomware groups have been responsible […]
A critical ninja forms flaw in the WordPress plugin has exposed approximately 50,000 websites to potential takeover. This vulnerability, identified as CVE-2026-0740, has been assigned a severity score of 9.8, highlighting the urgent need for action from site administrators. Discovered by security researcher Sélim Lanouar, the flaw permits unauthorized file uploads, which can lead to […]