Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
FlowerStorm Phishing Platform Rises from Rockstar2FA’s Ashes, Threatening Global Cybersecurity
Cybersecurity researchers have identified a significant surge in activities of FlowerStorm, a new sophisticated phishing-as-a-service (PhaaS) platform that has rapidly ...
FBI Confirms North Korean TraderTraitor Group Behind $308M DMM Bitcoin Exchange Hack
The FBI has attributed a massive cryptocurrency heist targeting Japan’s DMM Bitcoin exchange to the North Korean hacking group TraderTraitor ...
Researchers Uncover Systematic Vulnerability in AI Language Models Through Best-of-N Attack
Security researchers from Anthropic, in collaboration with experts from Oxford, Stanford, and MATS, have discovered a significant security vulnerability affecting ...
Security Alert: Malicious Python Packages Discovered Targeting Developer Systems
Fortinet’s cybersecurity research team has uncovered a significant security threat within the Python Package Index (PyPI), identifying two malicious packages ...
Adobe ColdFusion Security Alert: Critical Path Traversal Vulnerability Demands Urgent Attention
Adobe has disclosed a critical security vulnerability (CVE-2024-53961) affecting its ColdFusion web application platform, with confirmation of an active proof-of-concept ...
Critical Cleo Software Vulnerability Exploited in Major Ransomware Campaign
The Clop ransomware group exploited CVE-2024-50623, a critical zero-day in Cleo’s managed file transfer products, to breach dozens of organizations ...
Critical Supply Chain Attack Targets Popular npm Packages with Crypto Mining Malware
A significant supply chain security breach has been uncovered by cybersecurity researchers at Sonatype and Socket, affecting three widely-used npm ...
Critical Security Breach: ESA’s Official Space Shop Compromised by Payment Card Skimmer
Cybersecurity researchers at Sansec have uncovered a sophisticated cyberattack targeting the European Space Agency’s (ESA) official merchandise store. The incident ...
Russian-Israeli Developer of LockBit Ransomware Faces US Charges in Landmark Cybercrime Case
In a significant development in the fight against global cybercrime, US law enforcement agencies have announced charges against Rostislav Panev, ...
APT29 Threat Group Deploys Large-Scale RDP Proxy Infrastructure for Advanced Cyber Espionage
Trend Micro researchers have uncovered a sophisticated cyber espionage campaign orchestrated by APT29 (also known as Midnight Blizzard and Earth ...