Vect has cemented its collaboration with BreachForums and TeamPCP, aiming to enhance its model for industrialized ransomware while expanding its Ransomware-as-a-Service (RaaS) operations. The alliance underscores a growing trend of cybercriminal entities seeking to professionalize and industrialize their illicit activities. This strategic move could significantly amplify the scale and impact of their ransomware attacks, posing […]
Bluesky, a decentralized, open-source microblogging platform akin to X (formerly Twitter), suffered a 24-hour service disruption due to a sophisticated DDoS attack that began on April 15. A pro-Iran hacker group named 313 Team claimed responsibility, amplifying concerns about cybersecurity threats against social media platforms. The attack resulted in interrupted feeds, notifications, threads, and search […]
Adaptavist breach sparks ransomware concerns as cyber attackers reportedly gain access to a significant cache of data. The group is already exploiting the breach by sending fraudulent emails, posing as Adaptavist associates. Recipients should exercise caution, as these emails may appear credible at first glance. The attackers, who have claimed responsibility, boast about the size […]
The NGate malware is hiding within a counterfeit version of HandyPay, a trusted mobile payment app, to target Android users. This fraudulent variant takes advantage of Near-Field Communication (NFC) technology to steal credit card information from unsuspecting users. The trojanized application appears legitimate, which helps it bypass many security protocols and evade immediate detection. Cybersecurity […]
A new cybersecurity threat, known as “Comment and Control,” has emerged as a critical vulnerability, jeopardizing systems through GitHub comments. This threat exploits AI coding agents such as Claude Code, Google’s Gemini CLI, and GitHub Copilot, showcasing severe security gaps. These vulnerabilities allow attackers to hijack AI agents directly within GitHub, executing harmful commands that […]
SideWinder, a notorious advanced persistent threat group, has intensified its operations in South Asia with a sophisticated phishing campaign. The group employs a fake Chrome PDF viewer and a replica of the Zimbra email portal to steal government webmail credentials—a tactic known as the SideWinder phish. This campaign has seen relentless targeting since February 2026, […]
Adobe has swiftly issued a critical security patch to address a zero-day vulnerability in Acrobat Reader that is being actively exploited in the wild. Identified as CVE-2026-34621, this flaw allows attackers to execute arbitrary code on compromised systems by exploiting the Prototype Pollution weakness. The vulnerability, highlighted under CWE-1321, arises from improper control over object […]
North Korean hacking group APT37 uses Facebook to execute a sophisticated social engineering campaign. This cyber espionage endeavor involved targeting unwary users by forming connections through friend requests on the social media platform. Threat actors leveraged these newly established relationships to deploy RokRAT, a remote access trojan that can exfiltrate sensitive data. APT37, also known […]
OpenAI has been hit by a major cybersecurity breach linked to North Korean actors, impacting its supply chain. The incident has raised alarms within the tech industry, prompting immediate actions from the artificial intelligence company. OpenAI discovered that a macOS code signing certificate, essential for validating software authenticity and security, may have been compromised as […]
The vipertunnel backdoor is a new threat infiltrating enterprise networks by hiding within a fake DLL file laced with multiple layers of obfuscation. This Python-based malware leverages a SOCKS5 proxy tunnel to connect with a remote command-and-control server, enabling attackers to maintain their hold on compromised systems persistently. The backdoor’s stealthy presence is facilitated by […]
Basic-Fit confirms data theft involving personal information of about a million gym members, marking a significant cybersecurity breach. Unauthorized access compromised names, addresses, dates of birth, and bank details, though passwords remain secure. This breach raises concerns about data safety protocols in widespread use in the fitness industry. The attack highlights vulnerabilities in standard data […]
A newly discovered Claude clone site poses a significant cybersecurity threat by distributing the PlugX remote access Trojan (RAT). This malicious operation cleverly mimics the legitimate Anthropic software installation. Hackers employ a technique known as DLL sideloading to deceive users and deploy the covert malware onto targeted systems. After installation, the malware efficiently cleans up […]