Microsoft warns that a financially motivated threat group, Storm-1175, is exploiting zero-day flaws in internet-facing assets to launch Medusa ransomware attacks. These high-paced intrusions can incapacitate organizations within 24 hours, taking advantage of newly disclosed software vulnerabilities before they are patched. The group targets unpatched “N-day” vulnerabilities and also exploits zero-day flaws, highlighting a sophisticated […]
German police have identified key figures behind the notorious ransomware groups, REvil and GandCrab. The Federal Police in Germany (known as BKA) named two Russian nationals as masterminds behind these cybercrime operations active between 2019 and 2021. The identification marks a significant development in the global fight against cybercrime. These ransomware groups have been responsible […]
A critical ninja forms flaw in the WordPress plugin has exposed approximately 50,000 websites to potential takeover. This vulnerability, identified as CVE-2026-0740, has been assigned a severity score of 9.8, highlighting the urgent need for action from site administrators. Discovered by security researcher Sélim Lanouar, the flaw permits unauthorized file uploads, which can lead to […]
Google plans a crypto shift by setting the goal to fully transition to post-quantum cryptography by 2029. This ambitious move underscores the tech giant’s commitment to enhancing digital security. While functional quantum computers might not emerge soon, Google’s proactive approach to crypto-agility is a significant step. Adapting to future cryptographic challenges is critical for companies […]
The latest 2026 report from SANS warns a skills gap is widening in the cybersecurity field, placing critical infrastructure and operational technology (OT) sectors at significant risk of breaches. The report identifies a growing disparity in the capabilities required to protect vital systems, as well as the resources available to address these gaps. As the […]
Check Point tracks a wave of Iranian cyberattacks targeting critical sectors in Israel and the UAE, with a focus on the government and energy industries. These attacks, which employ password-spraying techniques, demonstrate a growing sophistication and persistence in threatening national infrastructures. Security researchers highlight the method’s effectiveness, as attackers use numerous common passwords to gain […]
Die Linke faces hackers after experiencing a serious cyberattack on its IT infrastructure in late March. The German political party confirmed the breach, revealing that hackers now threaten to leak potentially sensitive data. This incident has raised concerns over the security measures in place within political entities in Germany, especially as cyber threats become more […]
The emerging threat landscape has introduced a new challenge as DeepLoad uses the ClickFix social engineering tactic to distribute a sophisticated and previously undocumented malware loader. According to researchers at ReliaQuest, DeepLoad employs AI-assisted obfuscation and process injection to deftly bypass static scanning, making its detection challenging. Once deployed, the malware focuses on credential theft, […]
The Qilin ransomware group has claimed a significant breach against Dow Inc., a worldwide leader in chemical manufacturing. This group has allegedly added Dow Inc. to its list of victims on a Tor leak site. Yet, it has not provided any proof supporting the claim of the Dow Inc. Qilin leak. Dow Inc., which generates […]
The Dutch Finance Ministry shuts a treasury banking portal following a breach, which prompted officials to take some systems offline amid an ongoing investigation. This cyberattack, uncovered two weeks ago, has forced the ministry to bolster its defenses and scrutinize affected networks. Authorities are focusing on ensuring that the security of public finances remains uncompromised […]
The axios compromise pushes a Remote Access Trojan (RAT) across platforms, igniting significant concern in the cybersecurity space. The attack exploits a supply chain vulnerability in two npm package versions of the popular HTTP client, Axios. Specifically, versions 1.14.1 and 0.30.4 introduced a deceptive dependency, ‘plain-crypto-js’ version 4.2.1, which has been crafted for malicious intent. […]
Shares in cybersecurity firms took a hit on Friday as Anthropic tested its powerful new AI model, Mythos, which is causing ripples in the industry. The cutting-edge artificial intelligence, part of a project codenamed “Capybara,” outshines Anthropic’s previous models in crucial areas like academic reasoning, software coding, and uncovering cybersecurity vulnerabilities. The Global X Cybersecurity […]