Tag: emerging threats
5108 articles
Kraken Exclusive: Dangerous Ransomware Threat Escalates
Meet Kraken ransomware: an emergent cartel that borrows proven playbooks—exploiting SMB flaws, stalking networks for days, then encrypting systems and threatening data leaks—to squeeze big payouts. Cisco Talos warns this shift from scattershot attacks to precision double‑extortion raises the stakes for already overstretched defenders and demands smarter, faster responses.
Europol Exclusive: Takedown of Dangerous Gaming Links
Europol’s exclusive takedown dismantles a network of dangerous gaming links putting players at risk — see what they uncovered and how to protect your accounts and devices.
Weekly Recap Exclusive: Critical Fortinet and AI Breaches
Who watches the watchers? This week’s cascade of breaches shows attackers weaponizing trusted infrastructure — from Fortinet gear to VPNs, app stores and AI — turning familiar tools into stealthy, profitable attack platforms that slip past alert fatigue and outdated defenses.
Dragon Breath Exclusive: Critical RONINGLOADER Gh0st RAT
Think twice before clicking Next — researchers warn Dragon Breath is hiding a multi‑stage RONINGLOADER inside trojanized NSIS installers (masquerading as Chrome or Teams) to install a modified Gh0st RAT that gives attackers stealthy, persistent remote access for credential theft, lateral movement and data exfiltration.
Cyber-Attack Deals Stunning Costly $258m Q2 Blow to JLR
A major ransomware incident cost Jaguar Land Rover $258m in Q2 and helped drive a $639m loss — a stark wake‑up call that a single cyber‑intrusion can paralyze networked factories for weeks. The outage halted production, delayed deliveries and squeezed suppliers as JLR prioritised a cautious, forensic‑led recovery over a rushed restart.
RondoDox Exclusive: Dangerous Botnet Widens Reach
XWiki admins, take note: RondoDox is actively exploiting a critical eval‑injection (CVE‑2025‑24893) to achieve unauthenticated remote code execution and enroll unpatched hosts into its botnet. Patch immediately and harden exposed endpoints—or assume compromise and start remediation.
North Korean Hackers Exclusive: Dangerous JSON Channels
What if your next dependency quietly pulled a malicious payload from an innocent-looking JSON? North Korean-linked actors are exploiting public JSON storage services like JSON Keeper, JSONsilo, and npoint.io to seed stealthy backdoors into developer supply chains and swap payloads on the fly to evade detection.
AI Bugs: Stunning Critical Flaws Expose Meta, Nvidia, MS
Turns out the plumbing behind the AI boom—ZMQ messaging and unsafe pickle deserialization—can let attackers slip in and execute arbitrary code. Recent disclosures expose critical remote‑code vulnerabilities across Meta, Nvidia, Microsoft and popular PyTorch inference stacks.
Akira Ransomware Stunning $244M Haul Sparks Severe Alarm
Akira ransomware has pulled in roughly $244 million since September 2025—and in some attacks thieves exfiltrated data in as little as two hours. By exploiting unpatched VPN/firewall appliances and neutralizing MFA with automated playbooks, Akira’s affiliates turn trusted defenses into rapid exit routes for high-speed extortion.
Google Files Lawsuit Against Lighthouse Kit Exclusive Blow
Google just went to court to take apart a sprawling smishing operation it says was run by 25 people tied to a Chinese cyber collective, accusing them of using deceptive texts to spread malware, recruit botnets, and sell stolen credentials. The company is seeking asset freezes and third-party cooperation — pairing legal muscle with technical takedowns to short-circuit the infrastructure behind SMS-based attacks.
Russian Hackers Massive 4.3K Fake Sites Costly Hotel Breach
Think twice before clicking that booking confirmation — a Russian-speaking group has spun up more than 4,300 fake hotel and travel sites this year, using spam, AI-tuned lures and compromised booking plugins to mimic confirmations and steal payment and ID details.
IndonesianFoods Worm Exclusive: Alarming 44,000 Malware
Exclusive: The IndonesianFoods worm has already infected 44,000 devices. Find out how it spreads and the simple steps you can take right now to protect your data.
Operation Endgame 3.0: Exclusive Critical Malware Takedown
Law enforcement’s multinational takedown that removed the Rhadamanthys infostealer, neutralized VenomRAT and dismantled the Elysium botnet is a major win for international cooperation — but as malware becomes an industrialized, modular business, experts warn this victory may only be a temporary setback for adaptable criminal networks.
Operation Endgame: Stunning Success Against Global Botnets
Imagine dozens of faceless botnets toppled in days — Operation Endgame, led by Europol and Eurojust, did just that by seizing servers, payment rails and money mules to choke cybercrime’s lifeblood. By disrupting tools like Rhadamanthys Stealer, Venom RAT and the Elysium botnet, this coordinated campaign shows why hitting infrastructure beats chasing low‑level renters.
ThreatsDay Bulletin: Exclusive Critical Cyber Roundup
Every click can be the opening move in a campaign of trust-based deception. This bulletin shows how fast-moving actors like COLDRIVER are making signatures obsolete and why shifting to behavioral, intent-driven defenses is now essential.
Synnovis Issues Exclusive Breach Notice After Damaging Hack
Synnovis breach notice: after a damaging hack the company has issued an exclusive alert — here’s what was exposed, who’s affected, and simple steps you can take now to protect yourself.
CISA Exclusive: Stunning WatchGuard Flaw Threatens 54,000
Heads up: a critical unauthenticated bug (CVE‑2025‑9242) in WatchGuard Fireware VPN appliances can let attackers execute code and seize VPN gateways, putting roughly 54,000 devices at risk. CISA has added it to its KEV list — apply WatchGuard’s patches and lock down management interfaces immediately.
GlobalLogic Exclusive: Severe Oracle EBS Cl0p Attack
GlobalLogic pulls back the curtain on a severe Cl0p Oracle EBS attack. Learn what went wrong, who’s at risk, and the simple steps you can take now to protect your systems.
Cyber-Insurance Payouts Soar 230% UK Stunning Costly Spike
Think cyber insurance is a safety net? With UK payouts up 230% in 2024, rising ransoms and recovery bills are forcing businesses and regulators to rethink who will shoulder the real cost of cyber attacks.
Microsoft Fixes Kernel Zero Day: Stunning Critical Patch
Microsoft just patched an actively exploited Windows kernel zero‑day — a high‑stakes reminder that prompt patching can be the difference between a quiet night and a full system compromise. If you manage systems, prioritize this Patch Tuesday update now to protect identity, servers, and other critical endpoints.
WhatsApp Malware Exclusive: Brazil Banks’ Worst Threat
Imagine the app you use to call your mother being used to rob her bank — thats Brazils new reality as researchers link a WhatsApp-spread program called Maverick to the Coyote banking malware family. Built in .NET to decrypt, monitor and inject into banking sessions, this WhatsApp-delivered threat marks a worrying leap in scale and sophistication against Brazilian users and banks.
Android Devices Exclusive: KONNI APT Critical Alert
Imagine the smart display on your counter becoming the remote trigger that erases the phone in your pocket — researchers warn a North Korean-linked group called KONNI is abusing Google’s Find My Device and device-management features to remotely wipe Android devices. This tactic can destroy data, break two‑factor access and cripple businesses, a stark reminder that everyday conveniences can be weaponized for sabotage.
Qilin Ransomware Exclusive: Damaging Surge Hits Small Firms
Qilin ransomware has evolved into a commercialized threat that turns simple security lapses—phishing, weak credentials or exposed remote access—into crippling double‑extortion attacks on small and mid-sized firms. With affiliates and leak sites amplifying its reach, now’s the time for SMBs to shore up the basics before opportunistic criminals profit.
GootLoader WordPress: Exclusive Font Trick Is Dangerous
Think an exclusive font is harmless? Think again — GootLoader is hiding malicious JavaScript in fonts and other benign WordPress assets, letting tiny site tweaks become a fast route to full-network takeovers.