A newly uncovered ransomware campaign is targeting supporters of Elon Musk with a mix of technical sophistication and satirical messaging, according to researchers at KrakenLabs. Identified as a variant of the Fog ransomware family, the attack chain begins with phishing emails containing PDFs labeled “Pay Adjustment.” These lure victims to a Netlify-hosted ZIP file that […]
A critical vulnerability in the GNU C Library (glibc) is putting millions of Linux systems at risk of local privilege escalation and arbitrary code execution, according to a security advisory published May 16. Tracked as CVE-2025-4802, the flaw affects glibc versions 2.27 through 2.38 and stems from improper handling of the LD_LIBRARY_PATH environment variable in […]
A Brussels Court of Appeal ruled Wednesday that tracking-based online advertising practices violate European privacy laws, citing insufficient consent mechanisms. The decision targets the core of how digital advertisers operate across the EU, where user data is routinely collected and shared to serve personalized ads. The court found that current implementations of consent do not […]
A widespread malware campaign using the Lumma infostealer compromised approximately 10 million systems globally before being disrupted, according to the FBI. The malicious software targeted a broad range of victims, including individuals, businesses, and major corporations such as those in the Fortune 500. Cybercriminals deployed the malware to extract sensitive data from infected machines, enabling […]
Hackers are leveraging search engine optimization (SEO) poisoning to launch a new wave of payroll fraud attacks, security researchers at ReliaQuest report. By targeting employees on mobile devices, attackers create fake login pages that closely mimic legitimate corporate payroll portals. These spoofed sites appear prominently in search results when users look for company payroll platforms, […]
VMware has released a new batch of security patches addressing multiple software vulnerabilities that could expose users to serious cyber threats, including data leakage, unauthorized command execution, and denial-of-service (DoS) attacks. The most critical flaw among them has been flagged by NATO, underscoring its potential impact on security-sensitive environments. The company did not provide any […]
The Everest ransomware group has reportedly leaked sensitive employee data belonging to Coca-Cola, exposing internal records on the dark web. According to cybersecurity sources, the compromised information includes personal and professional details of the company’s staff. The leak was disclosed via the hackers’ data leak site, where samples of the stolen files were made publicly […]
Chinese authorities have accused a group allegedly connected to Taiwan’s ruling Democratic Progressive Party (DPP) of carrying out cyberattacks on a local technology company, according to police in Guangzhou. The group is suspected of targeting more than 1,000 critical networks across over 10 provinces in mainland China, officials said. The announcement comes amid heightened tensions […]
An Iranian national has pleaded guilty to two criminal counts tied to the deployment of the RobbinHood ransomware, which inflicted at least $19 million in damages, most notably targeting the city of Baltimore. The cyberattack disrupted municipal operations, crippling services and systems across the city. The defendant, identified as Sina Gholinejad, admitted to participating in […]
A sophisticated malware crypter known as Pure Crypter has been observed bypassing new security features introduced in Windows 11 version 24H2, according to researchers at eSentire. Designed as a modular malware delivery platform, Pure Crypter deploys multiple evasion techniques, including AMSI bypassing, DLL unhooking, and execution delays, to avoid detection by modern security tools. The […]
MainStreet Bancshares, a Virginia-based community bank, disclosed that nearly 5% of its customer data was compromised following a cybersecurity breach involving a third-party vendor. The incident occurred in March and was reported by The Record, a cybersecurity news outlet operated by Recorded Future. The breach did not originate within MainStreet Bank’s internal systems but stemmed […]
A wave of unexplained iPhone crashes has raised alarms in the cybersecurity community, with some observers suspecting links to Chinese hacking operations—allegations Apple firmly denies. The crashes have prompted scrutiny amid rising geopolitical tensions and increasing cyberespionage activity. Though no official attribution has been made, the incidents coincide with broader concerns about state-backed cyber intrusions […]