data
-
Machine-Speed Exploitation: How Frontier AI is Redefining the Cyber Threat Landscape
We are witnessing a fundamental paradigm shift in offensive cyber operations. Artificial Intelligence is moving beyond its role as a…
Read More » -
SideWinder APT Leverages Cloudflare Workers and Tailored PDF Lures in Sophisticated Zimbra Phishing Campaign
A highly sophisticated credential-harvesting operation, attributed to the SideWinder APT, has been identified targeting critical South Asian government infrastructure. The…
Read More » -
Notion Data Leak Exposes Editor Email Addresses Without Authentication
Security researchers have confirmed that any public Notion page now leaks the full names, email addresses, and profile pictures of…
Read More » -
NIST Restructures NVD Operations to Tackle Record CVE Growth
According to a recent announcement from the National Institute of Standards and Technology (NIST), the agency is fundamentally restructuring how…
Read More » -
From Dundee to Federal Custody: UK Man Stole $8M via SMiShing and SIM Swaps
When we talk about cyber intrusions, we often think of complex code or zero-day exploits. However, as the recent case…
Read More » -
Kyrgyzstan Crypto Exchange Grinex Suspends Operations After $13.7 Million Hack
Kyrgyzstan-based cryptocurrency exchange Grinex has suspended its operations following a $13.7 million hack attributed to Western intelligence agencies. The stolen…
Read More » -
TestDisk Impersonation Campaign Uses Microsoft-Signed Binary for DLL Sideloading and Deploys ScreenConnect RAT
Recent research has uncovered a sophisticated search engine poisoning campaign that masquerades as the legitimate TestDisk open-source data recovery tool.…
Read More » -
Global Law Enforcement Shuts Down DDoS-for-Hire Network, Warns 75,000 Users
A coordinated international law enforcement operation has dismantled a major DDoS-for-hire ecosystem, sending warnings to over 75,000 suspected users and…
Read More » -
Sapphire Sleet’s Fake Zoom SDK Preys on macOS Users Through Social Engineering
A sophisticated cyber campaign orchestrated by North Korean threat actor Sapphire Sleet reveals a significant shift toward social engineering over…
Read More » -
ATHR: Integrated Telephony-Based Attack Infrastructure and AI-Driven Voice Social Engineering in TOAD Attack Campaigns
Cybercriminal threat actors are increasingly leveraging telephone-oriented attack delivery (TOAD) methodologies to circumvent conventional email security infrastructure. This trend is…
Read More » -
Exploitation of CVE-2026-39987 in Marimo: A Multi-Stage Attack Campaign Targeting AI/ML Developer Infrastructure
Threat actors are actively exploiting CVE-2026-39987, a critical pre-authentication remote code execution (RCE) vulnerability in the marimo Python notebook platform,…
Read More » -
Still Using FTP? 6 Million Exposed Servers Remain Security Risk
A recent security brief from internet intelligence firm Censys reveals that despite its 55-year history, the File Transfer Protocol (FTP)…
Read More » -
Critical Security Flaws Exposed in EU Age Verification App
A highly anticipated European Union Age Verification application faces severe criticism after security researcher Paul Moore demonstrated how to bypass…
Read More » -
Ukrainian Authorities Warn of Surge in Targeted Cyberattacks on Government and Healthcare by UAC-0247
A significant surge in cyberattacks has been detected targeting Ukrainian local governments and municipal healthcare institutions, particularly clinical and ambulance…
Read More »