Beware of malicious Firefox extensions that masquerade as helpful tools but secretly steal your crypto wallet secrets, including recovery phrases and private keys, by intercepting them during wallet import flows. These sneaky add-ons can even fake legitimate wallet interfaces to trick you into handing over sensitive info.
The FBI and US Secret Service have sounded the alarm: a whopping 86,644 Fortinet devices across 194 countries are compromised, and the FortiBleed threat is still very much active, leaving organizations at risk of being locked out of their own systems. This widespread campaign targets Fortinet FortiGate firewalls and SSL VPN gateways, putting businesses and individuals on high alert.
Meet Zohar Pinhasi, the mastermind behind MonsterCloud, who's accused of pulling off a despicable scam that left ransomware victims paying twice - once to the hackers, and again to him for fake decryption services. By posing as a hero with secret tools, he allegedly re-victimized his clients and lined his pockets with a hefty profit.
A small construction company's confident dismissal of expert help - "you're too expensive" - turned to desperation when a ransomware attack crippled their operations, forcing a shutdown. Just weeks earlier, they'd rejected a proposal from a cybersecurity consultant that could have prevented the disaster.
A malware worm has been discovered exploiting the popular Tensorlake npm package to steal sensitive credentials, with the first malicious commit occurring on October 7, 2026, at 01:20 a.m. UTC. The compromised package, version 0.5.144, was quickly taken down after publishing to the npm registry on October 8, 2026.
Meet Zohar Pinhasi, a so-called ransomware "fixer" who's accused of running a brazen scheme that raked in over $19 million from desperate clients, with a simple twist: he paid just $8 million in ransoms, pocketing the rest.
A CEO's shocking scheme to profit from ransomware recovery has landed him in hot water, accused of secretly paying off ransomers while pretending to decrypt the malware for his clients, leaving them victimized twice over. The alleged scam, which ran from 2018 to 2023, could now cost him up to 20 years in prison.
Tens of thousands of Fortinet FortiGate firewalls and SSL VPN gateways are under active attack by hackers leveraging a massive June credential leak, putting countless networks at risk of disruption. The breach, known as FortiBleed, exposed a staggering 73,932 firewall URLs across 194 countries, giving attackers a treasure trove of vulnerable targets.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Google security alert: hackers hijacked DNS records, snagging unauthorized HTTPS certificates for several Google domains and others by exploiting vulnerabilities in three country-code top-level namespaces. The attacks, targeting .gh, .sl, and .as, cleverly combined DNS control with fake TLS certificates.
Hackers hijacked country-code domains to obtain unauthorized Google HTTPS certificates, putting several domains at risk between September 22 and 27. Google quickly sprang into action, revoking the certificates and blocking them in Chrome to prevent any further damage.
Meet PoeLLM, a sneaky malware that's rapidly expanding its crypto botnet by hijacking 3,400 servers, with its operators using a clever poem-based trick to hide its command-and-control address. This cunning tactic lets the malware derive new addresses by tweaking a few words in a public GitHub poem.
Meet the first-ever malware that uses a clever trick - a poem - to hijack AI systems and steer them to its command center, cleverly hidden in a forked GitHub repository. This sneaky tactic was uncovered by Lumen's Black Lotus Labs, revealing a new level of sophistication in cyber threats.
A teenager known as "Rey," suspected of leading ShinyHunters, has been detained in Amman, Jordan, and is cooperating with the FBI after the group allegedly attempted to extort a Boeing business unit. The group's exploits began with a PeopleSoft vulnerability, fueling a wave of data thefts.
Meet PoeLLM, a sneaky malware that's compromised over 2,100 AI servers worldwide, with a staggering 800 infected systems active in just one day, all part of a massive global cryptomining campaign.
Meet PoeLLM, a sneaky malware that's hijacked over 3,400 servers since April by cleverly extracting command-and-control addresses from a harmless-sounding poem on GitHub. This cunning botnet uses a poem-based system to stay one step ahead - but its unique approach also makes it vulnerable to takedown.
Ransomware attackers are now targeting backup infrastructure, leaving victims with a harrowing choice: pay up or lose everything. UnitedHealth's $22 million ransom payment was a stark reminder of this new reality, as they still didn't recover their data.
Full SOC coverage without building one. Nubivance deploys and manages Rapid7 InsightIDR and MDR for organizations that need detection and response, not another dashboard.
Get coverage
Phishing emails are now cleverly embedding AI prompt injections to deceive both human recipients and machine learning-based email summarizers, allowing scammers to target two victims at once. These sneaky attacks use techniques like hidden text and encoded data to conceal their malicious intent.
Hackers were quick to pounce on a newly disclosed Atlassian vulnerability, launching exploitation attempts within just two hours of a public proof-of-concept (PoC) release. This critical flaw, tracked as CVE-2026-21589, allows unauthenticated attackers to access sensitive files on vulnerable self-hosted instances.
The FortiBleed threat is still on the loose, putting 86,644 vulnerable Fortinet devices across 194 countries at risk of being compromised, with attackers exploiting reused credentials and weak password storage to gain control.
Beware: ongoing FortiBleed attacks are putting Fortinet firewalls at risk, with some victims potentially getting locked out of their own devices if attackers delete or change account passwords. The FBI and US Secret Service have issued a joint warning about this sustained threat.
Beware of over 100 compromised websites serving up the nasty LunexStealer malware by masquerading as a Cloudflare verification page - just a click away from trouble! When you visit these sites, you're tricked into executing a command that lets the malware swipe your sensitive info.
The FBI and Secret Service are warning organizations that the FortiBleed threat is still active and can have a devastating impact, locking you out of your own systems if attackers disable accounts or change passwords. This is more than just a simple credential theft - it's a serious security risk that requires immediate attention.
Cyber attackers are sneaking Linux backdoors into systems in Korea and Taiwan, cleverly disguising them as email security tools to fly under the radar. The malware, known as AVERAT, uses a sneaky tactic of communicating with its controllers via ordinary email protocols to avoid detection.
Hackers are exploiting WordPress plugins to secretly create hidden admin accounts, allowing them to control your site without you even knowing. This sneaky tactic uses vulnerabilities like stored cross-site scripting (XSS) to install backdoors and gain full control.