Private equity firm Insight Partners suspects that highly sensitive financial data may have been compromised in a recent cyber intrusion, raising concerns over potential fraud risks. The breach, described as involving “weapons-grade” information, could include confidential financial records, placing investors and partners at heightened exposure to identity theft and financial manipulation. While the extent and […]
German authorities dismantled the eXch crypto exchange on April 30, 2025, in a coordinated international operation targeting money laundering and illegal trading activities. The Federal Criminal Police Office (BKA), in collaboration with the Central Office for Combating Cybercrime (ZIT) and Dutch financial intelligence agency FIOD, seized the platform’s infrastructure, €34 million in cryptocurrency, and 8 […]
A new cyberattack campaign employing ClickFix techniques is now targeting Linux systems in addition to Windows, signaling a broader scope for the emerging threat. The attackers are using platform-agnostic instructions that allow the malware to infect both operating systems, expanding the potential victim pool and demonstrating increased sophistication. ClickFix attacks typically exploit user interaction by […]
A Russian state-linked hacking group has exploited a zero-day vulnerability in MDaemon webmail software as part of a broader cyber espionage campaign targeting government email servers, according to new research from cybersecurity firm ESET. Dubbed Operation RoundPress, the activity began in 2023 and focused on exploiting cross-site scripting (XSS) flaws in multiple webmail platforms, including […]
Russian disinformation campaigns are intensifying in Poland and Romania as voters head to the polls for presidential elections, according to local authorities. Officials from both countries report a surge in activity linked to the Kremlin-backed influence network known as Doppelgänger. The disinformation effort appears designed to sway public opinion and disrupt the electoral process, with […]
Hackers are exploiting TikTok’s popularity to distribute information-stealing malware using AI-generated tutorial videos, according to researchers at Censys. The campaign targets users searching for pirated software by presenting convincing how-to videos that guide viewers through fake activation processes. Instead of legitimate instructions, the videos prompt users to run PowerShell commands that install malware such as […]
Two critical vulnerabilities in the vBulletin forum software are under active exploitation, security researchers warned. Tracked as CVE-2025-48827 and CVE-2025-48828, the flaws affect vBulletin versions 5.0.0 to 5.7.5 and 6.0.0 to 6.0.3 when running on PHP 8.1 or newer. CVE-2025-48827, rated with a maximum CVSS score of 10, allows unauthenticated users to invoke protected API […]
Coinbase, one of the largest cryptocurrency exchanges in the U.S., has confirmed a data breach linked to bribed customer support agents at TaskUs, a third-party service provider based in India. Threat actors reportedly targeted support personnel employed by TaskUs, offering bribes in exchange for internal access that was then used to extract sensitive user data […]
A major supply chain attack has compromised 15 widely used Gluestack packages on the NPM registry, affecting libraries that collectively draw over 950,000 downloads each week. The affected packages were altered to include malicious code functioning as a remote access trojan (RAT), enabling attackers to potentially gain unauthorized control over systems running the compromised software. […]
Cybersecurity researchers have uncovered a ClickFix malware campaign that leverages a counterfeit Cloudflare Turnstile—a system typically used to verify human users—to trick victims into downloading malicious software. The attack mimics Cloudflare’s “humanness” verification process to deceive users into believing they are interacting with a legitimate security check. Once engaged, the fraudulent interface initiates the installation […]
Ukraine has launched a second cyberattack targeting Russian military assets, this time focusing on Tupolev, a prominent aircraft manufacturer. The move signals an escalation in Ukraine’s digital offensive, suggesting that drones alone may no longer suffice in its strategic operations. The attack, described as a hack, is part of an ongoing campaign to disrupt Russia’s […]
Researchers have confirmed that spyware developed by Paragon was found on an Apple device, marking a significant development in a growing surveillance controversy in Italy. The discovery, revealed Wednesday, adds to mounting concerns over the use of advanced surveillance tools targeting journalists across Europe. The spyware’s presence was detected during an investigation into potential abuses […]