Hackers are deploying a highly sophisticated phishing campaign that mimics Microsoft OneNote login prompts to steal Office 365 and Outlook credentials, according to researchers at ANY.RUN. The operation primarily targets Italian and U.S. users and abuses trusted platforms such as Notion, Glitch, Google Docs and RenderForest to host fake login pages. Victims receive emails with […]
Interlock ransomware has launched a new wave of cyberattacks in the United Kingdom, deploying a previously unknown remote access trojan (RAT) dubbed NodeSnake. The campaign marks a shift in tactics for the cybercriminal group, integrating the Node.js-based malware to enhance stealth and persistence within compromised networks. Security researchers report that NodeSnake enables attackers to exert […]
Volkswagen Group has been named in an unverified data breach claim by the Stormous ransomware gang, though no conclusive evidence has emerged to confirm the alleged compromise, according to a report from Cybernews. The threat group asserted responsibility for infiltrating the German automaker’s systems, but investigators have yet to identify proof substantiating the intrusion. The […]
Europe has emerged as the leading region with the highest number of exposed solar power systems, according to new research from cybersecurity firm Forescout. The findings raise fresh concerns about the security of critical infrastructure amid growing reliance on renewable energy sources. Forescout’s analysis highlights vulnerabilities in solar energy equipment that is accessible through the […]
A cybercriminal group known as SCATTERED SPIDER is intensifying attacks on IT support teams to bypass multi-factor authentication (MFA), according to researchers at SOSIntelligence. Active since at least 2022, the group employs native English speakers to impersonate employees and exploit help desk personnel through voice phishing and MFA reset requests. SCATTERED SPIDER operates primarily as […]
A cybercrime group tracked as UNC6040 has targeted approximately 20 organizations through a series of social-engineering attacks exploiting Salesforce customer accounts, according to Google’s Threat Intelligence Group. The campaign involves tricking individuals into providing sensitive information, enabling attackers to gain unauthorized access to enterprise systems. The attacks represent a growing trend in threat actors leveraging […]
Hackers breached healthcare services firm Episource, compromising personal and health data of approximately 5.4 million individuals. The Episource Hack Exposes Data tied to customers of healthcare organizations that rely on the company for critical services. The attackers accessed sensitive information, including personal identifiers and medical details, raising concerns about patient privacy and data security across […]
The UK’s data protection authority has fined DNA testing company 23andMe £2.31 million ($3.12 million) for what it described as “serious security failings” that led to a major data breach in 2023. The regulator said the incident exposed sensitive genetic information, causing what it called “profoundly damaging” consequences. The penalty has drawn international scrutiny, with […]
Russia-linked hacking group APT28 hits Ukraine with new malware by exploiting Signal, a secure messaging platform, according to recent cybersecurity findings. The attackers targeted Ukrainian government entities using malicious documents delivered through Signal chats, raising concerns over the platform’s misuse in cyber operations. Security researchers identified the malware as a fresh tool in APT28’s arsenal, […]
Ofsted has released a report outlining critical considerations for integrating artificial intelligence into schools and further education settings. The review highlights the importance of designated AI leaders—referred to as “AI champions”—who can guide institutions in adopting the technology effectively. According to the findings, these champions play a central role in promoting best practices and ensuring […]
A Deutsche Bank IT employee allowed his romantic partner unauthorized access to the company’s data center, raising concerns over internal security protocols at the financial institution. The incident, which occurred at the bank’s facility managed by Computacenter, has drawn attention due to the sensitive nature of the infrastructure involved. Details surrounding the motivation behind the […]
Hungary’s newly enacted biometric surveillance laws contravene the European Union’s Artificial Intelligence Act, according to European Digital Rights (EDRi), a civil rights group focused on digital freedoms. The organization argues that the legislation enables the use of invasive surveillance technologies that may infringe on fundamental rights, particularly the rights to privacy and freedom of assembly. […]