Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Malicious VS Code Extensions Bitcoin Black and Codo AI Deliver Powerful Infostealer
Security researchers have once again demonstrated that even official marketplaces cannot be treated as inherently trustworthy. Experts at Koi Security ...
Asus Supplier Hit by Cyberattack as Everest Ransomware Group Claims 1 TB Data Leak
Asus has confirmed that a third-party supplier was compromised in a cyberattack, following claims by the Everest ransomware group that ...
Spiderman Phishing-as-a-Service Targets European Banks, Fintech and Crypto Wallets
A newly identified phishing-as-a-service (PhaaS) platform dubbed Spiderman is enabling cybercriminals to run large-scale, highly convincing phishing campaigns against users ...
Major Data Breach in Spain: 64 Million Records Exposed and a 19‑Year‑Old Suspect
The Spanish National Police have detained a 19‑year‑old resident of Catalonia, suspected of breaching the IT systems of nine companies ...
JS#SMUGGLER: Compromised Websites Used to Deliver NetSupport RAT to Corporate Networks
Researchers at Securonix have documented a sophisticated multi‑stage malware campaign dubbed JS#SMUGGLER, in which attackers compromise legitimate websites and use ...
GlassWorm Malware Strikes Visual Studio Code Marketplace in New Supply Chain Campaign
The malicious GlassWorm malware family, designed to compromise Visual Studio Code (VS Code) development environments, has resurfaced in official extension ...
React2Shell (CVE-2025-55182): Critical React Server Components RCE Under Active Exploitation
The critical React2Shell vulnerability (CVE-2025-55182) in the React ecosystem has moved from a theoretical risk to large‑scale, real‑world exploitation. Within ...
Windows 11 Lock Screen Bug in KB5064081 Hides Password Icon but Keeps Login Working
After the release of the August Windows 11 updates, Microsoft has warned about a new lock screen interface bug affecting ...
Asahi Ransomware Attack: Data of 2 Million People Exposed and Production Halted in Japan
In autumn 2025, global brewing giant Asahi Group Holdings disclosed that a large‑scale cyberattack was far more damaging than initially ...
ShadyPanda Malicious Browser Extensions Expose 4.3 Million Chrome and Edge Users
A multi‑year operation dubbed ShadyPanda, analysed by Koi Security, illustrates how seemingly harmless browser add‑ons can quietly turn into powerful ...