Nova Scotia Power has confirmed that a recent cybersecurity incident was the result of a ransomware attack, acknowledging the breach after weeks of investigation. The utility company, which provides electricity across the Canadian province, stated that while its systems were compromised, it has not paid any ransom to the attackers. As part of the fallout […]
Ivanti is facing continued scrutiny as remote code execution (RCE) attacks targeting its software remain active, with recent exploitation efforts extending into cloud environments. The vulnerabilities appear to stem from insecure code within Ivanti’s security suite, raising concerns over the reliability of tools designed to protect enterprise systems. The ongoing nature of the attacks suggests […]
Several major Russian government services experienced widespread disruptions, with indications pointing to a cyberattack as the potential cause. Internet monitoring platforms detected outages affecting the country’s tax service and Saby, a platform used for managing secure digital keys and official documents. The disruptions, which began earlier this week, appear to be ongoing, according to technical […]
A threat group based in Vietnam is deploying deceptive online campaigns that exploit the growing interest in artificial intelligence video-generation tools, according to cybersecurity firm Mandiant. The group has launched thousands of ads, fake websites and social media posts that falsely promise access to popular prompt-to-video AI services. Instead of delivering the advertised tools, the […]
Cybercriminals are increasingly adopting a subscription-based model known as Phishing-as-a-Service (PhaaS), lowering the barrier to entry for launching sophisticated phishing attacks. Mirroring legitimate SaaS platforms, PhaaS kits—often sold on the dark web—offer pre-built templates, spoofed email tools, credential-harvesting sites, and real-time dashboards for tracking campaign success. These services enable even novice attackers to mimic trusted […]
Google has released its June 2025 Android security update, addressing 34 high-severity vulnerabilities across the platform. According to the company, the most critical flaw impacts the Android system and could allow attackers to locally escalate privileges on affected devices. The update targets multiple components, aiming to mitigate risks that could compromise user data and device […]
Cybercriminals are successfully bypassing Android 13’s security improvements by leveraging malware loaders to exploit accessibility services, according to new threat intelligence from Intel471. Google introduced the restrictions to block sideloaded apps from gaining accessibility access—often abused by banking trojans—but attackers have adapted using session-based package installers to evade these controls. One such loader, TiramisuDropper, has […]
U.S. federal authorities have seized 145 internet domains linked to BidenCash, a cybercrime platform accused of trafficking stolen financial data, according to the Justice Department. The illicit marketplace, active since at least March 2022, reportedly served over 117,000 customers and facilitated the sale of more than 15 million compromised credit card numbers. The domain seizure […]
A newly emerged ransomware-as-a-service offering known as Anubis RaaS adds wiper functionality, making attacks more destructive by permanently deleting victim data. Active since December 2024, the ransomware encrypts files and—if its “wipe mode” is enabled—erases contents irreversibly, leaving behind empty 0 KB files. The malware campaign has targeted organizations across sectors such as healthcare and […]
DuckDuckGo has expanded its Scam Blocker to shield users from an increasing range of online threats such as fake e-commerce sites, phishing hubs, and scareware. The move comes as the Federal Trade Commission reported $12.5 billion in consumer fraud losses in 2024, underscoring the urgency for stronger digital defenses. DuckDuckGo expands Scam Blocker to detect […]
Artificial intelligence continues to reshape cybersecurity, and identity protection now faces a new frontier. As AI agents gain identity, organizations must adapt their security frameworks to address the growing autonomy and access these systems possess. These agents no longer act as passive tools; they operate, decide, and interact in ways that demand recognition as distinct […]
A cyberattack cripples Russian dairy operations, triggering widespread supply chain disruptions across the nation’s major retailers. Lenta, Miratorg, and Yandex Lavka reported significant delays after hackers targeted Mercury, the national platform responsible for certifying animal-based products. The platform’s shutdown began earlier last week, halting the issuance of digital veterinary certificates essential for dairy distribution. Retailers […]