Emerging Threats
Ransomware Gangs Consolidate Power with Surge in Attacks
Alarming new data from cybersecurity firm Check Point reveals that just three ransomware gangs - Qilin, Akira, and Dragonforce - accounted for a staggering 40% of all ransomware incidents in March, with a whopping 269 attacks attributed to these groups alone. This concentration of power raises serious concerns about the growing threat of ransomware attacks.
Microsoft Warns of Payroll Pirate Attacks on Canadian Employees
Beware of payroll pirate attacks: a financially motivated threat actor has been hijacking Canadian employees' accounts to steal their salary payments, leaving them with a nasty surprise on payday. Microsoft is sounding the alarm on this emerging threat, dubbed Storm-2755.
Marimo Flaw CVE-2026-39987 Exploited Rapidly After Disclosure
A single line of code can drastically change the risk landscape for thousands of users - and that's exactly what happened with Marimo, an open-source Python notebook, when a critical vulnerability (CVE-2026-39987) was exploited just 10 hours after its disclosure. This severe flaw, with a CVSS score of 9.3, allows pre-authenticated remote code execution, putting all Marimo versions prior to the disclosed fix at risk.
Compromised Plugin Update Injects Backdoor into WordPress Sites
A widely used WordPress plugin, Smart Slider 3 Pro, was compromised when hackers hijacked its update system to push a poisoned version containing a backdoor, putting over 800,000 active installations at risk. This alarming breach raises critical questions about trust and security in the mechanisms we rely on to protect our online presence.
Iranian Campaign Targets 3,900 Devices in US Infrastructure
A recent Iranian cyber campaign has set its sights on a staggering 3,900 exposed devices in US infrastructure, putting energy, water, and government services at risk. This large-scale threat is a clear warning sign that these critical systems may be vulnerable to attack.
AI Tools Accelerate Healthcare Cyber Threats, Experts Warn
As AI tools become more advanced, experts warn that they can also supercharge healthcare cyber threats, autonomously identifying and exploiting software flaws at unprecedented speeds. This could lead to a dramatic surge in attacks on hospitals, clinics, and patients, making the threat landscape more treacherous than ever.
German Police Unmask REvil Leader in Cyber Crackdown
In a major cyber crackdown, German police have unmasked the leader of the notorious REvil gang, dealing a significant blow to the ransomware group, but also highlighting the ever-shifting threat landscape. As one threat subsides, new ones emerge, leaving defenders to prioritize scarce resources against an array of evolving threats.
LucidRook Malware Targets NGOs, Universities in Taiwan
A sneaky new malware called LucidRook has set its sights on non-governmental organizations and universities in Taiwan, using spear-phishing to catch its victims off guard. This Lua-based threat is the latest cyber attacker to target these vulnerable sectors.
VENOM Phishing Attacks Target C-Suite Microsoft Logins
A new phishing-as-a-service platform called VENOM is making it alarmingly easy for hackers to target senior executives, specifically seeking their Microsoft logins. This compact toolkit is putting the keys to the corner office within reach of any motivated adversary, leaving security teams scrambling to respond.
EngageLab SDK Flaw Compromises 50M Android Users
A security flaw in the EngageLab SDK has put a whopping 50 million Android users at risk, allowing apps on the same device to bypass Android's security sandbox and gain unauthorized access to sensitive information. This vulnerability, now patched, exposed cryptocurrency wallet users and others to potential data breaches.
Ransomware Attack Cripples Dutch Healthcare IT Firm ChipSoft
A ransomware attack on Dutch healthcare IT firm ChipSoft has left patients and clinicians scrambling, as clinical portals and scheduling tools went dark, disrupting critical care management systems. The devastating cyber incident forced ChipSoft to take its website and digital services offline, leaving many wondering who's left holding the chart.
Chinese Supercomputer Breach Exposes Massive 10-Petabyte Data Heist
A massive 10-petabyte data heist has been reported from a state-run Chinese supercomputer, raising urgent questions about the breach and its potential consequences. The staggering scale of the alleged theft has sparked widespread concern, but details about the incident remain scarce.
Bithumb Unveils Post-Hack Recovery Strategy
In the wake of a crypto crisis, can the digital-asset ecosystem bounce back without shaking user trust? Bithumb's newly unveiled recovery strategy is a step in the right direction, but will it be enough to restore confidence after a string of high-profile hacks and mishaps?
Law Enforcement Disrupts $45 Million Global Cryptocurrency Scam
In a major breakthrough, law enforcement agencies in the US, UK, and Canada joined forces to disrupt a massive $45 million global cryptocurrency scam, freezing $12 million in stolen funds and identifying over 20,000 linked wallet addresses. This significant action not only recovered funds for victims but also shed light on the darker side of digital cash and the challenges of accountability in the crypto world.
Mythos Model Unleashes Zero-Day Exploit Capabilities for Mass Use
The game has changed: a new AI model called Mythos can now uncover devastating zero-day flaws in software and chain them together to create powerful exploits, putting this potent capability in the hands of anyone with an internet connection. This development blurs the lines between nation-state hackers and amateur cyber attackers, raising urgent questions about the future of cybersecurity.
Phishing Gang Targets Dozens of Corporations in Helpdesk Scam Spree
Beware of the person on the other end of the line - a new phishing gang is impersonating IT helpdesks to scam dozens of major corporations, leaving investigators racing to keep up. Google is sounding the alarm on this latest extortion tactic, which uses clever social engineering to catch victims off guard.
UAT-10362 Launches LucidRook Malware in Taiwanese NGO Spear-Phishing Attacks
A mysterious threat cluster, UAT-10362, has launched a targeted spear-phishing attack on Taiwanese NGOs and universities, deploying a newly discovered malware called LucidRook. This sophisticated attack raises urgent concerns for Taiwanese civil-society groups, highlighting the need for heightened vigilance and robust defenses.
Hackers Exploit Smart Slider Plugin to Deploy Malicious Code
Hackers have hijacked the update system for the popular Smart Slider 3 Pro plugin, deploying a malicious release that lets them take control of affected websites. This alarming breach highlights the vulnerability of even trusted software update channels to exploitation.
Bitcoin Depot Suffers $3.6m Crypto Heist After System Breach
In a shocking turn of events, Bitcoin Depot fell victim to a cunning cyber-attack, allowing hackers to siphon off over 50 Bitcoin worth a staggering $3.66m from its internal systems. The breach has left the company scrambling to rebuild trust and protect its customers.
New Trojan STX RAT Targets Finance Sector with Sophisticated Stealth Methods
Meet STX RAT, a sneaky new remote access trojan that's got its sights set on the finance sector, using advanced stealth methods and command-and-control capabilities to evade detection. This latest threat is a wake-up call for defenders, testing their readiness to respond to increasingly sophisticated attacks.
FBI Disrupts APT28's Router-Based Espionage Operations
The FBI recently disrupted a sneaky espionage operation run by APT28, a Russian GRU-linked group notorious for its broad reach, by cutting off their access to a network of routers they used as a launching pad for further attacks. This bold move effectively severed the group's tremendous access, putting a stop to their clever tactics.
Chevin Disrupts FleetWave Software Amid Security Incident
Imagine your fleet management software suddenly going dark - who takes the wheel then? A cybersecurity incident has taken Chevin's FleetWave SaaS platform offline in the UK and US, leaving customers in the dark.
Malware Delivers ClipBanker Through Sophisticated Infection Chain
Beware of a sneaky malware that can swap out the cryptocurrency wallet address you copied with a fake one, just by pasting a malicious software masquerading as Proxifier - putting your digital assets at risk. This Trojan uses a multi-stage infection chain to deliver ClipBanker, a stealthy threat that hijacks your clipboard.
Adobe Reader Zero-Day Exploits PDFs to Profile Targets
Malicious PDFs are being used to secretly profile targets, leveraging legitimate features to harvest system data and decide which victims are worthy of a second, more invasive attack. This sneaky tactic uses booby-trapped PDFs to quietly gather intel and determine if you're a high-value target.