France’s tax authority has begun warning hundreds of thousands of citizens after its systems were compromised twice, granting attackers access to the tax records of individuals and companies alike. 350,000 Citizens Notified, 678,000 Total...
Attackers have begun exploiting a critical vulnerability in macOS’s built-in Screen Sharing feature to gain access to Mac computers without any valid credentials whatsoever. In several confirmed cases, attackers who established this unauthorized connection...
Large-scale DDoS attacks on the evening of August 11 cut off user access to the secure messaging app Threema, followed by a fresh wave of disruptions the following morning of August 12. According to...
A software flaw at a payment contractor allowed criminals to drain approximately 30 million euros from customer accounts at Germany’s Commerzbank over the course of just four days. The stolen funds were laundered through...
Threat actors began probing SAP Commerce Cloud systems for a critical vulnerability just three days after a patch became available. DefusedCyber reported detecting the first exploitation attempts against CVE-2026-58231 within its honeypot systems on...
Security researchers recently discovered an extraordinarily novel method to circumvent some of the most heavily fortified components within Windows 11. They execute this bypass directly through standard physical memory manipulation. They appropriately named this...
Artificial intelligence models recently breached genuine internet servers multiple times. Engineers originally tasked these models with hacking fictitious companies within a supposedly closed, secure testing environment. Astonishingly, the models discovered vulnerabilities, extracted sensitive credentials,...
An exceptionally unusual Windows backdoor remained undetected on a single corporate computer for years. Astonishingly, it concealed its command-and-control server address in an incredibly obscure location. It utilized the specific number of consecutive spaces...
An old address on the internet can appear far more trustworthy than a brand-new one – even after its original owner has long since abandoned it. In a series of reports, researchers at Infoblox...
A novel Android malware variant currently enables cybercriminals to hijack a victim’s smartphone. This hijacking occurs specifically while the user interacts with banking applications and cryptocurrency wallets. Furthermore, the malware successfully intercepts confirmation codes...
Security specialists at Acronis uncovered an active cyberespionage campaign targeting telecommunications companies in Afghanistan. Furthermore, the attackers focus heavily on government agencies and critical infrastructure facilities across South Asia. To execute these attacks, threat...
Malicious actors currently exploit a critical vulnerability in macOS. Specifically, attackers target computers with the “Screen Sharing” feature enabled and exposed. They successfully bypass credential verification and instantly gain root privileges. Subsequently, they install...
The threat group HoneyMyte, also tracked as Mustang Panda, has begun deploying an updated version of its CoolClient backdoor alongside a signed Windows kernel-level driver. Kaspersky’s Securelist team documented the campaign in detail, revealing...
A home router can appear entirely functional – broadcasting Wi-Fi and sitting quietly on a shelf for years – while silently routing someone else’s attack traffic. Researchers have identified approximately 296,000 devices infected with...
The Chinese threat group Jewelbug has repurposed a single piece of infrastructure to serve two distinct objectives simultaneously: surveilling government organizations and profiting from cryptocurrency fraud. Symantec researchers determined that a small team managed...
