Tag: emerging threats
5110 articles
Scattered Lapsus$ Hunters Reveal Exclusive Dangerous Shift
What happens when the gang you expected to fight splinters into thousands of anonymous, paid hands? Researchers warn that Scattered Lapsus$ Hunters are weaponizing tiny bitcoin bounties to crowdsource harassment, creating plausible deniability and a whole new kind of security nightmare.
Scattered Lapsus$ Hunters: Exclusive Alarming Tactic Shift
Scattered Lapsus$ Hunters are reportedly swapping big-data breaches for micropaid crowdsourcing: tiny Bitcoin bounties to many contributors to flood executives with calls, DMs and mentions. Its a cheap, scalable harassment‑for‑hire tactic that blurs into extortion and could leave platforms and regulators flat-footed.
Singapore Officials Impersonated in Stunning, Damaging Scam
Think twice before trusting top search results: criminals are buying Google ads to surface near‑perfect clones of Singapore government sites and using AI-generated deepfakes of real officials to trick investors into wiring funds or handing over credentials.
Canada Fines Cryptomus $176M in Stunning Costly Ruling
Canada slapped Cryptomus with a $176 million fine after finding it failed to follow anti‑money‑laundering rules — a dramatic wake‑up call that regulators now see crypto payment facilitators as gatekeepers, not bystanders, in the fight against illicit finance.
Singapore Officials Targeted in Stunning Damaging Scam
A stunning Singapore officials scam has exposed shocking vulnerabilities—discover how the damaging scheme unfolded and what it means for public trust.
Canada Slaps Stunning $176M Fine on Cryptomus, Severe Blow
Canada hit a Vancouver-based digital payments platform with a staggering C$176 million fine after authorities say it served as a permissive on‑ramp for illicit crypto transactions — a wake-up call about how weak AML controls let cybercrime cash out. The case shows how a simple street address can mask a global laundering corridor and why tighter oversight of crypto on‑ramps is urgently needed.
Email Bombs Expose Zendesk Flaw: Exclusive Critical Alert
When attackers turned a customer-service tool into a weapon, thousands got threatening email bombs that appeared to come from trusted brands—exploiting Zendesks lax outbound authentication and showing how convenience can suddenly erode online trust.
Canada Fines Cryptomus $176M in Harsh, Stunning Crackdown
Canada’s regulators leveled CAD 236 million (about USD 176 million) in penalties against Cryptomus after finding the payments platform acted as a stealthy on‑ramp/off‑ramp for cybercrime—an eye‑opening crackdown that signals tougher times for crypto‑enabled money laundering.
Email Bombs Reveal Stunning, Dangerous Zendesk Flaw
Imagine your inbox suddenly flooded with threatening messages from your bank, favorite store and utility — thats the reality of the recent email bombs attack, which abused Zendesk’s outbound mail to make malicious messages look legitimate. The episode exposes how convenient customer-service tools can be weaponized when email authentication is misconfigured, letting dangerous mail slip into primary inboxes.
Patch Tuesday Exclusive: Critical End of 10 Update
Microsofts October Patch Tuesday — which fixed 172 vulnerabilities and patched at least three flaws already being exploited — also sounded the retirement bell for free Windows 10 security updates. If youre still on Windows 10, the clock is ticking: patch, upgrade, or put mitigations in place before attackers reap the payoff.
Patch Tuesday Exclusive: Critical End of 10 Alert
Patch Tuesday just dropped — don’t miss this critical End of 10 alert. Find out what you need to update now to keep your systems secure.
Scattered Spider Duo: Exclusive Shocking $115M Ransom Link
Imagine lights going out at your hospital or your commute being held hostage — and the alleged architects are teenagers. The newly unsealed indictment accuses Scattered Spider of using social engineering and telecom hacks to extract at least $115M in ransoms, turning account takeovers into real‑world chaos.
ShinyHunters Exclusive: Damaging Corporate Extortion Wave
The ShinyHunters campaign has escalated from quiet database dumps to brazen public extortion—naming victims, posting timetables, and using voice‑phishing plus massive file thefts that could turn single breaches into a supply‑chain crisis. Corporations now face a stark choice: pay ransoms or risk a public dump of sensitive customer and corporate data.
DDoS Botnet Aisuru Sparks Severe, Stunning ISP Outages
Imagine fighting a storm when most of the clouds are over your own house — that’s the Aisuru DDoS. A near‑record 30 trillion bps flood from hijacked home IoT devices clustered on AT&T, Comcast and Verizon networks forced ISPs to choose between cutting off millions with blunt defenses or chasing slow, costly surgical fixes.
Self-Replicating Worm: Stunning Threat Hits 180+ Packages
A stark wake-up call: a self-replicating worm has infected 187+ NPM packages, stealing and publicly exposing developer tokens during installs. By weaponizing automated installs and transitive dependencies, it turns every npm install into a potential propagation engine.
Self-Replicating Worm Hits 180+ Packages: Exclusive Danger
A fast-spreading self-replicating worm has already infected 180+ packages—our exclusive breakdown reveals how it spreads, who’s at risk, and the quick steps you can take to protect your projects.
Bulletproof Host Exclusive: Stark’s Controversial EU Evasion
When the EU froze Stark Industries Solutions — a notorious bulletproof hosting provider tied to Kremlin-linked cyberattacks — the aim was to choke off dangerous infrastructure, but months later the same IPs and services resurfaced under new shells. That rapid reconstitution shows how sanctions on paper can fail when operators lean on bulletproof hosting to keep malware, botnets, and disinformation campaigns alive.
Bulletproof Host Evades EU Sanctions: Exclusive Controversy
EU sanctions couldnt stop a notorious bulletproof hosting provider—it reconstituted under new names and kept serving the same clients. Our exclusive reporting shows how shell companies, domain and IP migrations, and rapid rebrands preserved a hostile infrastructure, a wake-up call for regulators and defenders.
18 Popular Code Packages Hacked: Stunning Crypto Theft Risk
Imagine one convincing phishing email letting attackers slip crypto‑stealing code into 18 popular JavaScript packages — collectively downloaded billions of times each week. The breach lays bare how fragile the software supply chain is: a single compromised maintainer can push malicious updates into countless projects and developer environments.
Smishing Triad Exclusive: Dangerous 194K Domains Revealed
Think a text cant hurt you? Researchers say a single smishing campaign has spawned over 194,000 malicious domains, turning routine SMS alerts into localized lookalike sites and clever redirect chains that steal credentials or deliver malware worldwide.
Smishing Triad Exclusive: 194K Alarming Malicious Domains
A single text can open a global crime machine — Unit 42 ties 194,000+ malicious domains to one sprawling smishing operation, so pause and verify before you click.
Microsoft WSUS flaw: Exclusive urgent fix for severe exploit
Heads up: Microsoft released an emergency patch for a critical WSUS vulnerability (CVE‑2025‑59287) that’s already being exploited in the wild. Administrators must weigh rapid deployment against potential disruption — but with exploit code circulating, closing the exposure window should be the priority.
Microsoft WSUS Critical Flaw: Exclusive Exploitation Alert
Imagine the service you rely on to push security updates becoming a vehicle for remote code execution — that’s the urgent reality for WSUS admins after Microsoft issued an out‑of‑band patch for CVE-2025-59287 (CVSS 9.8) amid public proof‑of‑concept and active exploitation. Apply the emergency update now and verify your WSUS and recovery workflows to stop attackers from turning your update pipeline into an attack vector.
Microsoft WSUS flaw Exclusive: Critical exploit active
Your update server shouldnt be the thing that unpatches you. Microsoft rushed an emergency patch for a critical Windows Server Update Service (WSUS) RCE after public proof‑of‑concept code and active exploitation surfaced — inventory and patch your WSUS servers now.