Google has revealed a financially motivated threat group, dubbed UNC6040, that is targeting organizations using Salesforce through voice phishing, or “vishing,” schemes. According to the company’s threat intelligence team, the group employs deceptive techniques to trick victims into downloading a counterfeit version of a legitimate Salesforce tool called Data Loader. The fraudulent application is designed […]
Cilium taps eBPF to deliver deeper visibility into container environments by monitoring activities directly at the Linux kernel level. This approach enables enhanced security by capturing detailed system behavior, including system calls, network traffic, and process execution. Tools such as Tetragon leverage this capability to provide real-time insights into container operations without disrupting performance. By […]
U.K. retailers Marks & Spencer and Co-op suffered coordinated cyberattacks in April 2025, resulting in damages estimated up to $592 million. The Cyber Monitoring Centre (CMC), an independent body backed by the insurance industry, confirmed that the incidents are now classified as a “single combined cyber event.” Investigators linked the breaches to the Scattered Spider […]
Microsoft has issued an emergency fix to address a critical problem affecting some Surface Hub v1 devices running Windows 10. A known startup failure had left users unable to boot their systems, prompting the company to act swiftly. The Microsoft Issues Emergency Fix comes in response to reports of devices stuck during the startup process, […]
Microsoft has released a configuration update aimed at resolving a persistent issue that caused Windows Update to fail on certain Windows 11 devices. The rollout comes after users reported problems receiving essential system updates, which led to concerns over patch reliability and system security. The update, part of ongoing system maintenance efforts, ensures smoother delivery […]
Microsoft delivered a critical security update in its June 2025 Patch Tuesday release, addressing more than 70 vulnerabilities across its product suite. Among the issues, the company patched a zero-day flaw that posed a significant risk to users. With Microsoft fixes 70 flaws in this update cycle, system administrators and end users are urged to […]
Mobile internet access has been significantly restricted across parts of Russia ahead of the annual Victory Day parade, the Kremlin confirmed, citing “understandable reasons” for the move. The restrictions come as the country prepares for its May 9 celebrations, which commemorate the Soviet Union’s victory over Nazi Germany in World War II. The limitations appear […]
Two security vulnerabilities have been identified in the Netis Systems WF2220 software, according to a report received by CERT Polska. The flaws, tracked as CVE-2025-3758 and CVE-2025-3759, could potentially expose users to cyberattacks if left unpatched. CERT Polska disclosed the findings via its official platform, highlighting the risks posed by the issues but did not […]
A Russia-linked hacking group known as COLDRIVER has been identified deploying a new malware strain dubbed LOSTKEYS as part of a cyber-espionage campaign, according to findings shared by Google’s Threat Analysis Group. The attackers are leveraging deceptive CAPTCHA-like pages, mimicking the ClickFix verification interface, to trick targets into downloading the malicious payload. Once installed, LOSTKEYS […]
Cybercriminals are intensifying efforts to exploit vulnerable job seekers through a wave of sophisticated recruitment scams, according to new research by Netcraft. Three distinct threat actors have been identified targeting individuals globally using advanced social engineering tactics that mimic legitimate hiring processes. One group impersonates tech companies to carry out advance fee fraud, while another […]
A 45-year-old individual has been arrested in Moldova for alleged ties to the DoppelPaymer ransomware group, according to authorities. The suspect is believed to have played a role in cyberattacks associated with the notorious ransomware operation, which has targeted organizations globally. The arrest marks a significant development in international efforts to combat cybercrime, particularly ransomware […]
The website of iClicker, an educational technology platform, has been compromised in a cyberattack involving a fraudulent CAPTCHA scheme, according to a report from Hackread. The incident is part of a broader tactic known as a ClickFix attack, where attackers embed fake CAPTCHA challenges to deceive users into interacting with malicious content. The compromised section […]