Tag: emerging threats
8652 articles
Akira Ransomware Stunning $244M Haul Sparks Severe Alarm
Akira ransomware has pulled in roughly $244 million since September 2025—and in some attacks thieves exfiltrated data in as little as two hours. By exploiting unpatched VPN/firewall appliances and neutralizing MFA with automated playbooks, Akira’s affiliates turn trusted defenses into rapid exit routes for high-speed extortion.
Google Files Lawsuit Against Lighthouse Kit Exclusive Blow
Google just went to court to take apart a sprawling smishing operation it says was run by 25 people tied to a Chinese cyber collective, accusing them of using deceptive texts to spread malware, recruit botnets, and sell stolen credentials. The company is seeking asset freezes and third-party cooperation — pairing legal muscle with technical takedowns to short-circuit the infrastructure behind SMS-based attacks.
Russian Hackers Massive 4.3K Fake Sites Costly Hotel Breach
Think twice before clicking that booking confirmation — a Russian-speaking group has spun up more than 4,300 fake hotel and travel sites this year, using spam, AI-tuned lures and compromised booking plugins to mimic confirmations and steal payment and ID details.
IndonesianFoods Worm Exclusive: Alarming 44,000 Malware
Exclusive: The IndonesianFoods worm has already infected 44,000 devices. Find out how it spreads and the simple steps you can take right now to protect your data.
Operation Endgame 3.0: Exclusive Critical Malware Takedown
Law enforcement’s multinational takedown that removed the Rhadamanthys infostealer, neutralized VenomRAT and dismantled the Elysium botnet is a major win for international cooperation — but as malware becomes an industrialized, modular business, experts warn this victory may only be a temporary setback for adaptable criminal networks.
Operation Endgame: Stunning Success Against Global Botnets
Imagine dozens of faceless botnets toppled in days — Operation Endgame, led by Europol and Eurojust, did just that by seizing servers, payment rails and money mules to choke cybercrime’s lifeblood. By disrupting tools like Rhadamanthys Stealer, Venom RAT and the Elysium botnet, this coordinated campaign shows why hitting infrastructure beats chasing low‑level renters.
ThreatsDay Bulletin: Exclusive Critical Cyber Roundup
Every click can be the opening move in a campaign of trust-based deception. This bulletin shows how fast-moving actors like COLDRIVER are making signatures obsolete and why shifting to behavioral, intent-driven defenses is now essential.
Synnovis Issues Exclusive Breach Notice After Damaging Hack
Synnovis breach notice: after a damaging hack the company has issued an exclusive alert — here’s what was exposed, who’s affected, and simple steps you can take now to protect yourself.
CISA Exclusive: Stunning WatchGuard Flaw Threatens 54,000
Heads up: a critical unauthenticated bug (CVE‑2025‑9242) in WatchGuard Fireware VPN appliances can let attackers execute code and seize VPN gateways, putting roughly 54,000 devices at risk. CISA has added it to its KEV list — apply WatchGuard’s patches and lock down management interfaces immediately.
GlobalLogic Exclusive: Severe Oracle EBS Cl0p Attack
GlobalLogic pulls back the curtain on a severe Cl0p Oracle EBS attack. Learn what went wrong, who’s at risk, and the simple steps you can take now to protect your systems.
Cyber-Insurance Payouts Soar 230% UK Stunning Costly Spike
Think cyber insurance is a safety net? With UK payouts up 230% in 2024, rising ransoms and recovery bills are forcing businesses and regulators to rethink who will shoulder the real cost of cyber attacks.
Microsoft Fixes Kernel Zero Day: Stunning Critical Patch
Microsoft just patched an actively exploited Windows kernel zero‑day — a high‑stakes reminder that prompt patching can be the difference between a quiet night and a full system compromise. If you manage systems, prioritize this Patch Tuesday update now to protect identity, servers, and other critical endpoints.
WhatsApp Malware Exclusive: Brazil Banks’ Worst Threat
Imagine the app you use to call your mother being used to rob her bank — thats Brazils new reality as researchers link a WhatsApp-spread program called Maverick to the Coyote banking malware family. Built in .NET to decrypt, monitor and inject into banking sessions, this WhatsApp-delivered threat marks a worrying leap in scale and sophistication against Brazilian users and banks.
Android Devices Exclusive: KONNI APT Critical Alert
Imagine the smart display on your counter becoming the remote trigger that erases the phone in your pocket — researchers warn a North Korean-linked group called KONNI is abusing Google’s Find My Device and device-management features to remotely wipe Android devices. This tactic can destroy data, break two‑factor access and cripple businesses, a stark reminder that everyday conveniences can be weaponized for sabotage.
Qilin Ransomware Exclusive: Damaging Surge Hits Small Firms
Qilin ransomware has evolved into a commercialized threat that turns simple security lapses—phishing, weak credentials or exposed remote access—into crippling double‑extortion attacks on small and mid-sized firms. With affiliates and leak sites amplifying its reach, now’s the time for SMBs to shore up the basics before opportunistic criminals profit.
GootLoader WordPress: Exclusive Font Trick Is Dangerous
Think an exclusive font is harmless? Think again — GootLoader is hiding malicious JavaScript in fonts and other benign WordPress assets, letting tiny site tweaks become a fast route to full-network takeovers.
Hackers Exploit Exclusive Critical Triofox Flaw
A patch for CVE-2025-47812 didn’t stop attackers from exploiting Triofox — threat actors rapidly weaponized the remote-code-execution flaw to compromise unpatched or misconfigured instances. It’s a blunt reminder that publishing a fix isn’t protection unless organizations patch quickly and verify their deployments.
CISA Exclusive: Critical Zero-Day Added to KEV
When CISA added a critical zero-day vulnerability to the KEV, it was a blunt wake-up call — the flaw is already being weaponized by LandFall spyware against millions of Samsung devices. With federal patching now mandatory, the race is on to stop real-world attacks and protect users’ privacy.
AI Companies: Stunning 65% Leak of Dangerous Secrets
A new study finds about 65% of leading AI companies have accidentally exposed sensitive secrets in public Git repositories like GitHub. Researchers warn those leaks — from API keys to model endpoints — could create stealthy “shadow access” and threaten roughly $400 billion in assets.
China-Aligned UTA0388 Exclusive: Dangerous AI Phishing
Imagine your inbox posing as a trusted colleague—researchers say UTA0388, a China‑aligned cluster, now uses AI to craft eerily personalized, time‑sensitive spear‑phishing that steals credentials and plants stealthy, long‑term access.
Weekly Recap: Exclusive Cyber Threats – Essential Alert
From Android spyware that turns phones into persistent surveillance hubs to malware hiding inside virtual machines and side‑channel leaks exposing AI chats, last week’s discoveries show attackers favor stealth and persistence over brute force. If you run systems, write policy, or just carry a smartphone, it’s time to harden mobile, VM, and AI defenses before that silent compromise finds a way in.
NCA Campaign Exclusive: Critical Crypto Scam Warning
Dont miss this NCA-exclusive crypto scam warning — learn the latest tricks scammers use and quick, practical steps to keep your crypto safe.
ClickFix Phishing Exclusive: Critical Hotel Malware Alert
Imagine a routine support ticket that silently installs malware—attackers are using ClickFix‑style pages sent from compromised hotel emails to steal credentials or drop remote‑access tools like PureRAT. Be cautious: don’t paste commands or log in from unexpected support links—verify the sender and the page first.
NCSC Set to Retire Web & Mail Check: Exclusive Urgent Alert
NCSC is retiring Web Check and Mail Check — if your organisation relies on them, now’s the time to act. Migrate your scans, prioritise critical assets, and find affordable alternatives before those safety nets disappear.