Emerging Threats
Botnets Revive 13-Year-Old Apache Flaw in Global Campaign
A shocking resurgence of a 13-year-old Apache flaw has been exploited in a global campaign, highlighting the ongoing threat of old vulnerabilities getting new life. A hybrid P2P botnet and 18 other alarming stories have been uncovered, serving as a stark reminder to stay vigilant in the face of evolving cyber threats.
India-Tied Hack-for-Hire Group Targets MENA Journalists
Meet the shadowy hack-for-hire group with ties to India that's targeting journalists and activists in the Middle East and North Africa, silencing voices and stifling free speech. Their sinister operations have been uncovered by security researchers, revealing a chilling espionage trade where reporters, officials, and dissenting voices are prime targets.
Bitter APT Group Exploits Middle East Spear-Phishing Campaign
The Bitter APT Group has been linked to a sophisticated year-long spear-phishing campaign that targeted the Middle East, using deceptive emails to spread its reach. This hack-for-hire effort, attributed to a South Asian connection, signals a sustained threat to the region's security.
Adobe Reader Zero-Day Exploited in Targeted Attacks Since December
A previously unknown zero-day vulnerability in Adobe Reader has been exploited in targeted attacks since December, using maliciously crafted PDF documents to quietly turn trusted files into stealthy threats. This highly sophisticated exploit raises serious questions about the security of everyday file formats and our trust in them.
Zephyr Energy Hit by $900K Cyber Heist via Contractor Payment Redirect
Zephyr Energy plc lost a staggering £700,000 in a shocking cyber heist, where attackers cleverly redirected a single payment meant for a contractor into their own account. This brazen attack serves as a stark reminder of the devastating consequences of cyber risk.
MacOS ClickFix Attack Exploits Script Editor to Evade Apple Warnings
The cat-and-mouse game continues: after Apple added security warnings to Terminal, attackers behind the Atomic Stealer family adapted their ClickFix attack to exploit Script Editor instead. This latest move shows how adversaries constantly evolve to evade detection.
Eurail Breach Compromises 300,000 Customer Records
A single misstep by Eurail B.V. has put the personal information of over 300,000 travelers at risk, following a massive data breach in December 2025 that exposed sensitive customer records. As we rely on digital services to plan our cross-border getaways, this breach forces us to confront the delicate balance between convenience and data security.
Google Exposes New Extortion Group Targeting BPOs and Helpdesks
A new extortion group, uncovered by Google's threat intelligence team, is setting its sights on Business Process Outsourcing (BPO) companies and helpdesks, posing a significant threat to the service layers that many businesses rely on. This emerging threat, possibly linked to the notorious "Raccoon" persona, has the potential to create widespread pressure points across multiple organizations.
Adobe Reader zero-day flaw under active exploitation
Malicious PDF documents have been hiding a nasty secret: a zero-day vulnerability in Adobe Reader that's been exploited by attackers since at least December, allowing them to spread malware and wreak havoc. This stealthy threat highlights the urgent need for better detection and response to these types of attacks.
Hackers Breach Bitcoin Depot, Steal $3.6 Million in Cryptocurrency
A recent breach at Bitcoin Depot, one of the largest Bitcoin ATM networks, has resulted in the theft of $3.665 million in cryptocurrency, raising urgent questions about the security of digital assets in the age of physical convenience. This alarming hack forces customers, industry observers, and regulators to confront the growing tension between accessibility and vulnerability.
Microsoft Disrupts Open-Source Projects with Sudden Account Suspensions
Microsoft's sudden suspension of developer accounts has left maintainers of popular open-source projects locked out, unable to publish crucial security patches and software updates for Windows users. This abrupt move has sparked concern, with many wondering who will keep the digital roof fixed when the people who make the essential tools are shut out.
Malicious Code Infiltrates Python Package Index
A recent supply-chain attack on a popular Python package has raised a critical question: how much trust do you really have in the software that quietly powers your work? A malicious .pth file hidden in the litellm package version 1.82.8 can automatically execute malicious code on every Python startup.
Malware Targets Gamers with Dubious Software Offers
Malware is taking aim at gamers with sneaky software offers that promise enticing perks, like "+15 armor protection" - but beware, these deals come with a hidden catch. Cyber threats are disguising themselves as tempting game enhancements, putting players at risk.
Google API Flaw Exposes Android Apps to Gemini AI Vulnerabilities
A recently discovered flaw in Google's API keys is leaving millions of Android apps vulnerable to Gemini AI exploits, potentially exposing private files and racking up unexpected billing charges. This security gap allows mobile apps to quietly tap into the powerful AI, all without users noticing.
Amateur Hackers Emerge as Growing Ransomware Threat
Ransomware is now the biggest threat today, and a growing concern is amateur hackers who may not know what they're doing - which can make it even harder to recover your data. According to Cynthia Kaiser, a cybersecurity veteran with two decades of FBI experience, these newcomers pose a particularly worrisome risk.
Hackers Conceal Credit Card Stealer in Tiny SVG Images
One tiny pixel can cause massive damage: hackers have successfully hidden credit card-stealing code inside a nearly invisible, one-pixel Scalable Vector Graphics (SVG) image, putting almost 100 Magento-based online stores at risk. This sneaky tactic allowed the malicious code to blend in with normal site assets, evading detection.
UNC6783 Hackers Infiltrate BPOs to Steal Corporate Support Tickets
Hackers known as UNC6783 are exploiting business process outsourcing providers to gain access to sensitive corporate support tickets on platforms like Zendesk, putting high-value companies across multiple sectors at risk. This sneaky tactic opens the door for cybercriminals to infiltrate and wreak havoc on unsuspecting organizations.
macOS Users Targeted in ClickFix Malware Campaign
macOS users are being targeted in a sneaky new malware campaign called ClickFix, which tricks them into executing malicious commands by abusing the Script Editor and Terminal tools. This latest attack raises a pressing question: how can we trust our trusted tools when they're being exploited by hackers?
Chaos Malware Expands to Target Misconfigured Cloud Deployments
Malware previously confined to home routers has now set its sights on cloud infrastructure, specifically targeting misconfigured cloud deployments and expanding its botnet territory. This alarming evolution in Chaos malware attacks demands attention from those responsible for securing cloud infrastructure.
CISA Mandates Emergency Patch for Exploited Ivanti EPMM Flaw
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert, ordering US government agencies to patch a critical vulnerability in Ivanti Endpoint Manager Mobile (EPMM) within just four days, as the flaw has been under active exploitation since January. With a Sunday deadline looming, federal IT teams are racing against the clock to secure systems and prevent further attacks.
Masjesu Botnet Targets Global IoT Devices with DDoS-for-Hire Service
Meet Masjesu, a stealthy botnet that's been quietly building an army of compromised IoT devices to launch devastating DDoS attacks - and it's available for rent to anyone with a Telegram account. This covert network has been operating in the shadows since 2023, offering a sinister DDoS-for-hire service that's got cybersecurity experts sounding the alarm.
Kaspersky Report Warns of Evolving Financial Cyberthreats
Stay ahead of financial cyber threats with Kaspersky's expert report, which reveals the latest trends and patterns from 2025 and offers a crucial outlook for 2026. Discover how phishing, PC malware, and infostealers are shaping the threat landscape and what it means for your financial security.
Indian-linked spyware targets MENA journalists
Researchers have uncovered a chilling spyware campaign linked to India that targeted journalists in the Middle East and North Africa, raising serious concerns about surveillance and freedom of the press. The operation, carried out by a suspected Indian government-connected group, used a potent spyware tool to secretly monitor the work of brave journalists exposing conflict, corruption, and abuse of power.
CISA Warns of Iranian Cyber Actors Targeting US Infrastructure
The Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm: Iranian-linked cyber actors are targeting US critical infrastructure, posing a threat to public safety, services, and commerce. American organizations must take immediate action to assess their risk and bolster defenses.