Lazarus uses a fake LinkedIn profile to lure top executives in cyber-espionage schemes, with the latest target being the CEO of AllSecure. Exploiting the professional networking platform, the notorious North Korean hacking group masqueraded as a legitimate industry interviewer to deceive the executive. This audacious move highlights the growing sophistication and boldness of cyberthreats directed […]
Ericsson US confirms a data breach following a cyberattack on one of its service providers, which led to the exposure of sensitive information pertaining to employees and customers. On April 28, 2025, the service provider detected unusual activity suggesting unauthorized data access. To address the situation, they enlisted external cybersecurity experts and notified the FBI. […]
Poland police busted a group of teenagers who allegedly sold software tools designed for launching distributed denial-of-service (DDoS) attacks. Authorities have accused these minors of profiting by providing resources that targeted and disrupted popular websites. The investigation revealed that these DDoS kits allowed buyers to flood specific websites with traffic, causing significant operational disruptions. Polish […]
Cybercriminals are employing the Claude Code lure tactic to deceive developers and IT professionals. These attackers set up counterfeit download pages that imitate Claude Code, a legitimate AI coding assistant. Users, seeking official software, inadvertently download an infostealer malware. This exploit reflects a troubling trend where popular AI tools are leveraged to gain unwarranted trust. […]
Cybersecurity experts have revealed critical vulnerabilities in Amazon’s AWS-LC, an open-source cryptographic library integral to Amazon’s cloud infrastructure. These amazon aws lc flaws raise significant concerns due to their potential threat to cloud-based operations. The vulnerabilities identified include CVE-2026-3338, CVE-2026-3337, CVE-2026-3336, and CVE-2026-2256, which present unauthenticated bypass risks that could compromise data security across Amazon […]
China-linked hackers hit telcos in South America with a sophisticated new malware toolkit, posing significant threats to regional telecommunications security. The APT group, identified as UAT-9244, has been active since 2024, exploiting vulnerabilities in Windows, Linux, and network-edge devices. This operation highlights the hackers’ ability to penetrate diverse system environments, which raises alarms about the […]
Iranian hackers weaponize cameras as cyber warfare takes center stage in the Middle East. According to a recent report by Check Point Research, Iranian threat actors have been manipulating IP cameras to gain a tactical advantage in regional conflicts. This digital strategy acts as a “force multiplier,” enhancing traditional military operations with real-time intelligence feed. […]
Cybersecurity experts have issued a warning about a series of vulnerabilities in Everon OCPP backends, the core system managing electric vehicle charging stations globally. These flaws threaten the stability and security of the EV charging infrastructure, raising concerns about potential disruptions. With the global push towards electric vehicles accelerating, these discoveries highlight crucial risks in […]
Google has promptly released a crucial update for the Chrome Stable channel, addressing multiple security vulnerabilities. Notably, the update resolves 10 vulnerabilities, with three deemed critical and seven classified as high-risk. This proactive move by Google patches Chrome flaws that could potentially compromise user data and browser stability. Users should prioritize updating Chrome to secure […]
Recent analysis from Google and iVerify has unveiled a potent threat in the form of the Russian Coruna iOS exploit. Initially utilized by Russian state actors, this sophisticated exploit kit is now being repurposed across expansive criminal operations worldwide. Experts have highlighted the Coruna kit’s role in breaching robust iOS security measures, signaling a significant […]
Europol dismantles Tycoon 2FA, a notorious phishing-as-a-service operation that facilitated large-scale credential harvesting attacks. This collaborative effort, involving law enforcement agencies and cybersecurity firms, has effectively curtailed a major tool of cybercriminals. Emerging in August 2023, Tycoon 2FA allowed attackers to execute adversary-in-the-middle (AitM) phishing attacks, duping users into revealing sensitive information. Described by Europol […]
The Silver Dragon group, linked to China, uses Google Drive to orchestrate covert communication targeting Europe and Asia. As part of the APT41 umbrella, Silver Dragon exploits vulnerabilities in public internet servers and uses phishing emails with malicious attachments to infiltrate systems. After gaining access, the group utilizes the commercial tool Cobalt Strike for maintaining […]