Advanced persistent threat groups have escalated cyberattacks on the maritime industry, exploiting its global trade significance to deploy ransomware. APT hackers target ships through a blend of espionage and destructive tactics, aiming to cripple operations and demand ransom. Analysts have tracked over 100 attacks on maritime and shipping firms in the past year, marking a […]
A critical CrushFTP Zero-Day Flaw has exposed servers to unauthenticated remote code execution, security researchers warned this week. Tracked as CVE-2025-54309 and scoring 9.8 on the CVSS scale, the vulnerability stems from improper request handling by CrushFTP’s DMZ proxy, which fails to enforce authentication on sensitive admin endpoints. Attackers can exploit this flaw by sending […]
Palo Alto Networks has announced plans to acquire identity security firm CyberArk in a $25 billion deal, marking its largest acquisition to date. With this move, Palo Alto buys CyberArk to strengthen its capabilities in identity security, a rapidly growing segment within the cybersecurity sector. The acquisition signals Palo Alto Networks’ strategic shift beyond its […]
Hackers are actively exploiting a critical vulnerability in the popular WordPress theme “Alone – Charity Multipurpose Non-profit” to gain control of websites. The flaw, identified as CVE-2025-5394, holds a severity rating of 9.8 on the CVSS scale. Threat actors are using it to upload arbitrary files, allowing them to install unauthorized plugins and seize full […]
Cybersecurity researchers at Avast have released a free decryptor for the FunkSec ransomware, allowing victims to recover encrypted files without paying a ransom. Gen Digital confirmed the tool’s release after collaboration with law enforcement, marking a turning point in the fight against the malware strain. With the FunkSec ransomware defeated, the team determined the threat […]
A critical security flaw in Base44, the AI-powered vibe coding platform recently acquired by Wix, exposed private enterprise applications to unauthorized access. The Base44 hack exposes private app access by allowing attackers to exploit a logic flaw using publicly available app IDs, bypassing authentication even for apps protected by Single Sign-On. Wiz Research identified the […]
The Qilin ransomware gang has introduced a new legal support service for its affiliates, marking a troubling shift in cybercrime tactics. The move, first revealed on a Russian-language darknet forum in June 2025, shows how Qilin Ransomware Gains Edge by combining technical extortion with legal intimidation. This strategy targets victims’ fears of regulatory penalties and […]
Rising tensions between Thailand and Cambodia have taken a digital turn, as cybercrime stokes Thai-Cambodian conflict beyond traditional political and territorial disputes. A surge in online scams, allegedly orchestrated from within Cambodia’s borders, has drawn sharp criticism from Thai authorities, who link the cybercriminal activity to broader regional instability. Investigations reveal that call centers and […]
A UK-registered company, Qwins Ltd, has emerged as a major enabler of cybercrime, according to cybersecurity researchers who linked its infrastructure to global malware campaigns. Operating under ASN 213702, Qwins Ltd has provided bulletproof hosting services that support malware families like Lumma Stealer, Amadey, and Mirai variants. Researchers observed its servers distributing over 120 malware […]
A newly uncovered information-stealing malware known as 0bj3ctivityStealer has drawn attention for its advanced exfiltration tactics and layered execution chain. First identified by HP Wolf Security researchers, the malware hides payload using obfuscated JavaScript and steganographic methods to bypass traditional detection systems. Its attack begins with phishing emails disguised as purchase order requests, luring users […]
Apple has rolled out security-focused updates for Mac users running macOS Sonoma and macOS Ventura, delivering macOS Sonoma 14.7.7 and macOS Ventura 13.7.7. The company labeled these releases as critical, addressing undisclosed security vulnerabilities. Apple releases urgent macOS patches periodically to maintain robust system protection and improve user safety. Alongside the macOS updates, Apple also […]
Dollar Tree denied reports of a ransomware attack this week after a cybercriminal group claimed it had breached the discount retailer’s systems. Dollar Tree denies hack allegations, asserting that the data in question originated from a separate entity no longer in operation. The company clarified that the alleged stolen data came from a defunct discount […]