Emerging Threats
Leaked Windows Zero-Days Exploited in Targeted Attacks
Cyber attackers are exploiting newly disclosed Windows flaws in targeted attacks, allowing them to gain alarming levels of system control before organizations can patch the vulnerabilities. This alarming window of opportunity leaves defenders scrambling to respond.
Mirai Botnet Targets TP-Link Routers via CVE-2023-33538 Exploits
Your home router could be a ticking time bomb, vulnerable to exploitation by malicious actors - in fact, a known weakness (CVE-2023-33538) in TP-Link routers has already been targeted by the notorious Mirai botnet. Is your small but mighty box at risk of becoming a launchpad for someone else's agenda?
CISA Flags Apache ActiveMQ Flaw as Actively Exploited
The US Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on a high-severity flaw in Apache ActiveMQ Classic, warning that it's being actively exploited by hackers - and giving organizations a narrow window to assess their exposure and respond. With a CVSS score of 8.8, this vulnerability is a critical threat that demands immediate attention.
Malware Targets Water Treatment Systems with Sabotage Capabilities
Meet ZionSiphon, a new and alarming type of malware designed to sabotage water treatment systems by stopping the flow of water, posing a significant threat to operational technology in these environments. This malicious software is purpose-built to disrupt, rather than spy or steal, highlighting a chilling new risk for the industry.
Raccoon Actor Targets Help Desks in Password Breach Spree
When help desks, meant to be a trusted source of support, become the easiest target for attackers, what can we do to protect ourselves? A recent surge in breaches, including a password breach spree by a Raccoon-linked actor, has left technologists, policymakers, and everyday users scrambling for answers.
Stryker Cyberattack Impacts Q1 Financials Amid Insurance Gap
A March cyberattack has dealt a double blow to global medtech giant Stryker, impacting its Q1 financials and highlighting a glaring vulnerability: the company lacks cyber insurance to cover the costs. Iranian hackers have publicly claimed responsibility for the incident, adding a complex layer to Stryker's already troublesome situation.
PowMix Botnet Targets Czech Workers with Randomized C2 Traffic
Cybersecurity researchers have uncovered a sneaky new botnet, dubbed PowMix, that's targeting Czech workers with a clever tactic: hiding in the timing of its command-and-control traffic. This stealthy approach has left experts scrambling to respond to the active campaign, which has been observed since December 2025.
Operation Atlantic Disrupts $45 Million Crypto Phishing Fraud
In a shocking turn of events, Operation Atlantic successfully disrupted a massive $45 million crypto phishing fraud, putting a stop to a large-scale scam that had been wreaking havoc on unsuspecting victims. This stunning breakthrough highlights the ongoing battle to protect the crypto ecosystem from malicious threats.
North Korea Exploits Social Engineering to Target macOS Users
Beware of a sneaky new scam where North Korean hackers trick macOS users into handing over their credentials and cryptocurrency by posing as a fake Zoom update. They're using social engineering to get you to do the work for them, making it a low-cost but hard-to-stop threat.
Authorities Disrupt 53 DDoS-for-Hire Domains in Global Crackdown
In a major global crackdown, authorities have seized 53 domains linked to notorious DDoS-for-hire services, dealing a significant blow to online disruption. This bold move, part of Operation PowerOFF, also put over 75,000 alleged cybercriminals on notice to cease their malicious activities.
Hackers exploit Marimo flaw to spread NKAbuse malware via Hugging Face
Hackers are exploiting a critical flaw in Marimo's reactive Python notebook to spread a new variant of NKAbuse malware, sneaking malicious payloads onto Hugging Face Spaces, a popular platform for sharing machine learning models. This alarming attack highlights the need for vigilance when it comes to defending against malware disguised as code-sharing tools.
Malware Exploits APK Flaws to Evade Android Static Analysis
Malware developers have found a sneaky trick to evade detection on Android devices, exploiting APK flaws to hide their malicious code from static analysis - and over 3,000 malware samples have already adopted this tactic. This widespread technique allows malware to fly under the radar, posing a significant threat to Android users.
US Seizes Control of North Korea's Fake Remote Worker Scam Network
Imagine a network of seemingly ordinary remote workers secretly infiltrating over 100 companies - only to discover they were all part of a massive scam run by North Korea. Two Americans have been jailed for helping the rogue nation pull off this daring cyber deception.
Ransomware Breach Exposes 337,000 CRMC Patients' Sensitive Data
A ransomware attack on a Tennessee hospital system has compromised the sensitive data of over 337,000 patients, leaving many to wonder who will watch over their personal records. In July 2025, Cookeville Medical Center (CRMC) reported a devastating breach tied to the notorious Rhysida group.
Zero-Day Exploits Multiply as Hacker Creativity Surges
Feeling overwhelmed by the endless stream of cybersecurity threats? Every Thursday morning, you're faced with a daunting question: how to stay informed without getting bogged down by a never-ending parade of old and new threats.
ATHR Platform Exploits AI Voice Agents for Automated Vishing Attacks
Imagine a phone call that's both automated and coached by a human - a new cybercrime platform called ATHR is making this a terrifying reality, using AI voice agents to fuel highly convincing vishing attacks that can steal your credentials. By combining automation with human and synthetic voices, ATHR is taking voice phishing to a whole new level of sophistication.
AI Hallucinations Expose Organizations to 'Ghost Breach' Risk
Imagine a scenario where a cutting-edge technology lies to you, and you believe it - leading to a frantic response to a crisis that never existed. AI hallucinations are exposing organizations to a new kind of risk, dubbed "ghost breaches," where fabricated threats trigger real-life emergency responses.
McGraw Hill Data Leak Exposes 13.5M Records After Salesforce Misconfiguration
McGraw Hill, a leading publisher of educational materials, recently suffered a significant data leak, exposing a staggering 13.5 million records due to a misconfigured Salesforce-hosted page. This alarming breach highlights the importance of robust data security measures, even for companies with a traditional focus like textbook publishing.
Taboola Exploits Banking Sessions to Route Users to Temu Tracking Endpoint
Imagine a single line of code secretly redirecting people logged into their bank accounts to a commercial tracking site - that's what happened when a bank unknowingly approved a Taboola pixel that sent users to a Temu tracking endpoint. This sneaky exploit slipped past security controls, leaving both the bank and its users none the wiser.
Obsidian Plugin Abuse Enables PHANTOMPULSE RAT in Finance, Crypto Attacks
Beware of the notebook that's supposed to keep your secrets safe - researchers have discovered a sneaky new attack that uses Obsidian plugin abuse to slip a powerful Trojan into your system. This novel social engineering campaign targets finance and crypto sectors with a previously unknown RAT called PHANTOMPULSE.
McGraw Hill Breach Exposes 13.5 Million User Accounts
A massive data breach at McGraw Hill has exposed the personal and academic records of 13.5 million students and educators, leaving them vulnerable to exploitation by the ShinyHunters extortion group. The breach, which targeted McGraw Hill's Salesforce environment, has raised urgent concerns about digital security and data protection in the education sector.
Ransomware Targets Carmakers with Growing Ferocity
Ransomware attacks on carmakers have doubled in just one year, now accounting for over two-fifths of all cyber-attacks targeting the industry, signaling a significant shift in the threat landscape. This rapid escalation demands a new level of resilience from firms that design, build, and sell motor vehicles.
Freight Hackers Exploit Code-Signing Service to Bypass Security Defenses
Thieves have found a sneaky way to disguise their malicious tools as trusted software by using a third-party code-signing service, making it harder for defenders to spot the threat. This new tactic allows them to cloak their malware in legitimacy, complicating the work of security teams trying to keep cargo safe from theft.
CERT-UA Warns of Data-Theft Malware Campaign Targeting Ukraine's Healthcare and Government
A sinister new malware campaign has set its sights on Ukraine's healthcare and government institutions, putting sensitive information at risk and threatening the very clinics and emergency hospitals people rely on. CERT-UA has sounded the alarm on this data-theft operation, which has already compromised municipal healthcare institutions and government bodies with stealthy malware.