The new ‘Storm’ infostealer hijacks sessions by bypassing local decryption, opting instead to send browser data directly to attacker-controlled servers. This method enables server-side decryption, effectively allowing hackers to intercept and hijack user sessions without needing to crack passwords or bypass multi-factor authentication. Cybersecurity firm Varonis highlights the risk posed by such tactics, which exploit […]
North Korea’s APT37 uses Facebook as a strategic tool in a recent cyber campaign, according to cybersecurity researchers. Known as ScarCruft, this group engages in social engineering by friending targets on Facebook. They exploit this connection to deploy RokRAT, a potent remote access trojan. This multi-stage attack showcases the evolving tactics of APT37, as they […]
Adobe finally patches an Acrobat and Reader zero-day vulnerability, which attackers have exploited for several months, with the release of a critical fix. The vulnerability, tracked as CVE-2026-34621, posed significant risks to users of these widely used software tools. Released on April 11, the patch aims to secure systems against potential threats that had remained […]
The Masjesu botnet peddles DDoS attacks by leveraging a stealthy network of compromised IoT devices, as revealed by cybersecurity researchers. Emerging in 2023, Masjesu operates as a DDoS-for-hire service, marketed via Telegram, targeting routers, gateways, and other IoT hardware across varied architectures. Its ability to infiltrate a wide spectrum of devices underscores a growing threat […]
The Chaos botnet targets cloud environments as it evolves to exploit misconfigured cloud deployments, say cybersecurity researchers. Expanding from its historical focus on routers and edge devices, this variant increasingly penetrates cloud platforms, Darktrace revealed in a recent report. Cybersecurity experts have raised alarms over the rapid adaptability of the Chaos botnet, which now includes […]
Researchers have uncovered a critical vulnerability in Apache ActiveMQ Classic, a 13-year-old ActiveMQ bug that allows hackers to execute arbitrary commands remotely. This remote code execution flaw, undetected for over a decade, threatens the integrity and security of systems using the message broker. Apache ActiveMQ Classic, a widely adopted tool for facilitating communication between software […]
Anthropic’s Claude Mythos Preview is transforming cybersecurity with its formidable capability to uncover and autonomously exploit zero-day vulnerabilities. Unlike its predecessors, Claude Mythos stands out by autonomously generating complex exploits without explicit programming. During internal benchmarks, it achieved unprecedented success by executing control-flow hijackings on 10 fully patched systems. Its advanced logic has led to […]
Iran-linked hackers vow to renew their cyber efforts against the United States as soon as conditions permit, underscoring the deep integration of cyber warfare in modern military engagements. These threats persist despite a fragile ceasefire, reflecting the unpredictable nature of digital conflict. The hackers’ pledge highlights how cyberattacks have become a crucial element of geopolitical […]
Magento stores face malware threats as hackers embark on a widespread campaign leveraging the platform. The attackers conceal credit card-stealing scripts within a minuscule, pixel-sized Scalable Vector Graphics (SVG) image. This deceptive tactic affects nearly 100 online stores, enabling hidden malicious code to operate undetected. Users remain vulnerable while conducting transactions on compromised sites employing […]
Bitcoin Depot loses millions after hackers breached its systems, stealing $3.665 million in Bitcoin from its wallets. Bitcoin Depot operates one of the largest Bitcoin ATM networks globally. The cyberattack took place last month and has drawn attention to the vulnerabilities in the cybersecurity protocols of major cryptocurrency operators. As the popularity of crypto ATMs […]
U.S. agencies have issued a warning that Iran-linked hackers are actively targeting internet-connected programmable logic controllers (PLCs) in critical infrastructure sectors. The FBI and CISA highlighted these cyber threats in a joint advisory. These attackers focus on Rockwell/Allen-Bradley PLCs, aiming to disrupt essential services such as water, energy, and government systems through manipulation of data […]
An Iran-linked group has launched a sophisticated password-spraying campaign targeting over 300 Microsoft 365 environments in Israel and the UAE, intensifying cybersecurity challenges amid ongoing Middle Eastern conflicts. The campaign, attributed to a threat actor with connections to Iran, executed coordinated attacks in three distinct waves on March 3, March 13, and March 23, 2026. […]