Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Fake CAPTCHA Pages Fuel International SMS Fraud and TDS‑Driven Crypto Scams
A newly documented telecom fraud campaign shows how attackers are combining fake CAPTCHA pages, premium‑rate international numbers and advertising infrastructure ...
NASA Inspector General Exposes Sophisticated Spear‑Phishing Operation Against Aerospace and Defense Research
The NASA Office of Inspector General (OIG) has disclosed details of a sophisticated spear‑phishing and cyber‑espionage campaign in which a ...
New GopherWhisper APT Uses Go-Based Malware and Cloud C2 to Spy on Mongolian Government
A previously unknown advanced persistent threat (APT) group, dubbed GopherWhisper, has been linked to a cyber‑espionage campaign targeting government entities ...
Anthropic Project Glasswing: AI Vulnerability Discovery and the New Reality of Cyber Defense
Anthropic’s decision to delay the public release of Project Glasswing is one of the clearest signals of how rapidly artificial ...
Apple Patches iOS Notification Vulnerability CVE-2026-28950 That Exposed Signal Messages
Apple has released a security update for iOS and iPadOS that closes a privacy‑impacting flaw in the Notification Services subsystem. ...
Harvester APT Deploys GoGra Linux Backdoor Using Microsoft Graph and Outlook as Covert C2
A new campaign attributed to the Harvester advanced persistent threat (APT) group is delivering a GoGra Linux backdoor that hides ...
FIRESTARTER Backdoor on Cisco ASA: New APT Campaign Targets Network Perimeter Devices
In September 2025, a U.S. civilian federal agency became the victim of a highly targeted network perimeter attack involving a ...
Europol’s Operation PowerOFF Cracks Down on DDoS-for-Hire Services
Law enforcement agencies from 21 countries have taken coordinated action against the global market for DDoS-for-hire services, seizing 53 domains, ...
Google Deploys Gemini AI to Block Malvertising and Billions of Scam Ads
The online advertising ecosystem is entering a new phase of escalation. As threat actors increasingly rely on generative AI to ...
Millions of Unencrypted FTP Servers Still Exposed Online, Censys Warns
File Transfer Protocol (FTP) is more than 50 years old, yet it continues to be widely used on the public ...
