A newly identified ransomware strain, NailaoLocker, is targeting Windows systems using China’s SM2 cryptographic standard in a rare deviation from typical ransomware encryption methods. FortiGuard Labs researchers say NailaoLocker uses China’s SM2 cryptography to encrypt AES-256-CBC keys, marking the first known case of this method in ransomware campaigns. The malware’s name, drawn from the Chinese […]
A hacking group calling itself World Leaks claims to have compromised Dell Technologies, alleging it exfiltrated 1.3 terabytes of sensitive data. The group shared a screenshot of the leaked files in an online post, stoking concerns across the cybersecurity community. Dell hit by breach headlines have circulated rapidly, though the company has not yet confirmed […]
Cybersecurity researchers have identified a new strain of Android spyware linked to Iran’s Ministry of Intelligence and Security. The malicious tool, which poses as VPN services and Starlink internet apps, has targeted users with the intent to monitor dissidents. Iran spyware poses as VPN platforms to lure victims into downloading applications that secretly collect sensitive […]
A China-linked cyber espionage group known as APT41 has launched a targeted campaign against government IT infrastructure across Africa, according to researchers at Kaspersky. In this latest operation, China hackers target African systems using advanced techniques that suggest prior knowledge of internal networks. Analysts reported that malware deployed in the attack contained hardcoded service names, […]
Indian cryptocurrency exchange CoinDCX says $44 million was stolen from its reserves in a security breach that did not impact customer funds. The company’s founders disclosed the incident, emphasizing that user assets remain safe and operational services continue without disruption. The breach targeted the exchange’s hot wallets, which hold a portion of its digital assets […]
ExpressVPN has patched a critical vulnerability in its Windows application that allowed Remote Desktop Protocol (RDP) traffic to bypass the encrypted VPN tunnel. The ExpressVPN bug exposed user IP addresses during RDP sessions, undermining the core privacy protection the service is designed to provide. The flaw caused RDP traffic to route outside the VPN tunnel, […]
A critical SharePoint Zero Day Forces immediate action from federal agencies after U.S. cybersecurity officials added the vulnerability to the government’s exploited vulnerabilities catalog. The flaw affects Microsoft SharePoint servers and has been linked to hundreds of known breaches, raising red flags about its impact across public and private systems. The Cybersecurity and Infrastructure Security […]
A recent Veeam update locks out users from accessing the Web UI of Recovery Orchestrator after enabling multi-factor authentication, the company warned on Friday. The issue affects the latest version of the product, which was released with enhanced security features, including MFA support. However, once MFA is activated, users are unable to log in through […]
Ukraine has accused the Russian-backed hacker group APT28 of deploying a new strain of AI-enhanced malware, dubbed LameHug, to target its defense sector. The campaign, which Ukraine attributes to APT28, signals a sharp escalation in the use of artificial intelligence in cyber warfare. Ukraine blames Russia’s APT28 for orchestrating these attacks, which reportedly aim to […]
Researchers at cybersecurity firm Lookout have identified a new variant of DCHSpy, a malware strain that can now exfiltrate sensitive data from WhatsApp and device-stored files. The discovery came just one week after Israel launched airstrikes targeting Iran’s nuclear infrastructure. The malware steals WhatsApp data as part of a broader effort to monitor individuals perceived […]
Flights at major Polish airports faced delays after a technical failure triggered temporary airspace restrictions, prompting an urgent investigation. Poland probes sabotage as authorities examine whether the disruption to air traffic control systems stemmed from intentional interference rather than a standard equipment malfunction. The incident halted departures and arrivals across several key transportation hubs, though […]
Europol hit a major milestone in its fight against state-linked cybercrime by dismantling NoName057(16), a pro-Kremlin hacking group accused of launching disruptive attacks across Europe. In a coordinated international operation, law enforcement agencies took down over 100 servers linked to the group, arrested two members, and issued seven additional arrest warrants. The action comes as […]