Tag: emerging threats
8652 articles
Europol Operation: Stunning, Devastating $55M Crypto Bust
Europes Cyber‑Patrol Week used blockchain forensics and cross‑border raids to disrupt crypto services moving roughly $55 million, delivering a stunning, devastating blow to criminal money‑movement rails. The takedown shows how improved tracing and private‑sector cooperation can unmask operators — even as some legitimate users lose a layer of convenience.
Python-Based WhatsApp Worm Exclusive: Dangerous Stealer
What would you do if your WhatsApp started messaging your friends without you? Researchers warn the Delphi-based Eternidade Stealer is hijacking accounts and weaponizing contact lists—using social engineering and IMAP-resolved C2 to spread quickly and dodge static defenses.
Eternidade Stealer Trojan Exclusive Severe Cybercrime Surge
Eternidade Stealer is a new banking trojan that weaponizes Brazil’s favorite app, WhatsApp, turning ordinary messages into a fast-moving credential theft campaign. Researchers warn one click can unleash downloaders that harvest browser-stored credentials and cookies, making everyday chats unexpectedly risky for users and businesses.
PlushDaemon Exclusive: Dangerous New Spy Malware
Exclusive: PlushDaemon malware is a stealthy new spy quietly siphoning personal data — learn how it works, whos at risk, and easy steps you can take to protect yourself.
China-Linked WrtHug Exclusive: Dangerous ASUS Router Hijack
Imagine the little black box under your desk as a secret backdoor — SecurityScorecard has exposed WrtHug, a China-linked campaign hijacking thousands of ASUS routers to intercept traffic, steal credentials and quietly persist in homes and small businesses. It shows how exposed management interfaces and unpatched firmware can turn everyday routers into powerful spying and staging platforms.
Half of Ransomware Access: Exclusive Critical VPN Threat
Think your VPN keeps the bad guys out? Q3 data show compromised VPN credentials were the top initial access vector for ransomware, so it’s time to rethink perimeter defenses, identity hygiene, and incident response.
Fortinet Exclusive: Critical FortiWeb CVE-2025-58034
Exclusive: A critical FortiWeb vulnerability (CVE-2025-58034) has been disclosed — find out what it means for your environment and the quick steps to keep your systems protected.
2FA Phishing Kit: Exclusive Alert on Dangerous BitB Pop-ups
Think your 2FA push is safe? Browser-in-the-Browser phishing kits like Sneaky 2FA now mimic real browser dialogs to trick users into approving account takeovers, making powerful relay attacks cheap and easy to rent.
CISA 2015 Extension: Exclusive, Welcome Short-Term Relief
Good news: the Cybersecurity Information Sharing Act’s short‑term extension buys defenders breathing room and keeps automated threat‑sharing pipelines running. But it’s only a temporary patch, leaving legal uncertainty, oversight concerns, and the need for a durable, modern solution unresolved.
New npm Malware Campaign Exclusive: Severe Crypto Redirects
When the libraries you trust become trapdoors, developers are in for a rude awakening: a new npm malware campaign by dino_reborn hides in seven packages and uses cloaking and fake CAPTCHAs to selectively redirect victims to cryptocurrency phishing flows. This supply‑chain‑style attack evades scanners by activating only under certain conditions, turning convenience into a costly risk.
AI-Enhanced Tuoni Framework: Exclusive Affordable Win
A single crafted message—leveraging AI‑enhanced Tuoni C2, steganography and in‑memory execution—slipped past defenses at scale, showing attackers are getting smarter and stealthier. Its a wake‑up call: rapid detection, cross‑team coordination and tougher verification are now essential.
DoorDash Confirms Data Breach: Exclusive Alarming Details
DoorDash data breach confirmed — get our exclusive, alarming details on what was exposed, who’s at risk, and the quick steps you can take right now to protect your information.
GenAI Stunning Surge Sparks Alarming Biometric Fraud
If a photo—or a few seconds of audio—can open a bank account in your name, we have a problem. Generative AI is churning out deepfakes and synthetic identities that can fool biometric checks and fuel a new wave of scalable fraud.
FTSE 100 Exclusive: Alarming 500,000 Stolen Credentials
Half a million stolen credentials tied to FTSE 100 staff have surfaced in criminal data stores — a blunt wake-up call that weak passwords and reused logins are leaving Britain’s biggest firms dangerously exposed. Socura’s findings show how easily attackers can impersonate insiders and turn simple credential theft into costly breaches unless boards treat cyber as a strategic priority.
Microsoft Stops Stunning Record 5.72Tbps DDoS; Best Defense
Microsoft’s automated defenses shrugged off a jaw‑dropping 5.72 Tbps DDoS (almost 3.64 billion pps), keeping services running — but the IoT botnet behind it shows how default settings and underprotected devices still make the internet ripe for even bigger attacks.
Google Exclusive Fix for Critical Chrome V8 Zero-Day
Google just pushed an emergency Chrome update to fix a critical, actively exploited V8 JavaScript type‑confusion zero‑day (CVE‑2025‑13223, CVSS 8.8); update your browser—or call IT—now, because a single malicious page can lead to full host compromise.
Kraken Exclusive: Dangerous Ransomware Threat Escalates
Meet Kraken ransomware: an emergent cartel that borrows proven playbooks—exploiting SMB flaws, stalking networks for days, then encrypting systems and threatening data leaks—to squeeze big payouts. Cisco Talos warns this shift from scattershot attacks to precision double‑extortion raises the stakes for already overstretched defenders and demands smarter, faster responses.
Europol Exclusive: Takedown of Dangerous Gaming Links
Europol’s exclusive takedown dismantles a network of dangerous gaming links putting players at risk — see what they uncovered and how to protect your accounts and devices.
Weekly Recap Exclusive: Critical Fortinet and AI Breaches
Who watches the watchers? This week’s cascade of breaches shows attackers weaponizing trusted infrastructure — from Fortinet gear to VPNs, app stores and AI — turning familiar tools into stealthy, profitable attack platforms that slip past alert fatigue and outdated defenses.
Dragon Breath Exclusive: Critical RONINGLOADER Gh0st RAT
Think twice before clicking Next — researchers warn Dragon Breath is hiding a multi‑stage RONINGLOADER inside trojanized NSIS installers (masquerading as Chrome or Teams) to install a modified Gh0st RAT that gives attackers stealthy, persistent remote access for credential theft, lateral movement and data exfiltration.
Cyber-Attack Deals Stunning Costly $258m Q2 Blow to JLR
A major ransomware incident cost Jaguar Land Rover $258m in Q2 and helped drive a $639m loss — a stark wake‑up call that a single cyber‑intrusion can paralyze networked factories for weeks. The outage halted production, delayed deliveries and squeezed suppliers as JLR prioritised a cautious, forensic‑led recovery over a rushed restart.
RondoDox Exclusive: Dangerous Botnet Widens Reach
XWiki admins, take note: RondoDox is actively exploiting a critical eval‑injection (CVE‑2025‑24893) to achieve unauthenticated remote code execution and enroll unpatched hosts into its botnet. Patch immediately and harden exposed endpoints—or assume compromise and start remediation.
North Korean Hackers Exclusive: Dangerous JSON Channels
What if your next dependency quietly pulled a malicious payload from an innocent-looking JSON? North Korean-linked actors are exploiting public JSON storage services like JSON Keeper, JSONsilo, and npoint.io to seed stealthy backdoors into developer supply chains and swap payloads on the fly to evade detection.
AI Bugs: Stunning Critical Flaws Expose Meta, Nvidia, MS
Turns out the plumbing behind the AI boom—ZMQ messaging and unsafe pickle deserialization—can let attackers slip in and execute arbitrary code. Recent disclosures expose critical remote‑code vulnerabilities across Meta, Nvidia, Microsoft and popular PyTorch inference stacks.