Information Security News Blog

ShinyHunters hacker group cryptographic key compromise and impostor brand takeover 0

ShinyHunters Hacker Group Faces Impostor Takeover

The notorious ShinyHunters collective recently lost its original leadership. However, opportunists quickly stepped forward to seize the infamous moniker. Following several high-profile hacker arrests, a new contender for the criminal brand emerged online. Specifically,...

Thailand Anti-Scam Matrix operation seizing luxury assets from an international cybercrime syndicate 0

Thailand Anti-Scam Matrix Busts $500M Baht Fraud Ring

Law enforcement authorities in Thailand recently detained 39 suspected operatives belonging to an international online fraud syndicate. Furthermore, officers seized illicit assets valued at over 500 million baht. This sweeping operation, codenamed the Thailand...

XWorm malware plugins architecture and Windows ResetSurvival remote access trojan analysis 0

XWorm Malware Plugins Survive Windows Factory Resets

XWorm has crossed a critical threshold where a conventional Remote Access Trojan (RAT) begins operating like a comprehensive pocket surveillance suite. Recently, Netskope Threat Labs identified four distinct variants of the malware circulating actively...

Meta GitHub breach exposing source code and employee personal data 0

Meta GitHub Breach Exposes Code and 1,500 Personal Records

Threat actors recently exfiltrated proprietary Meta product source code alongside the personal records of approximately 1,500 individuals. Specifically, the attackers gained unauthorized access to several corporate GitHub repositories. To execute the intrusion, the adversaries...

Bricksforge WordPress plugin vulnerability remote code execution 0

Critical Bricksforge Vulnerability Under Active Attack

A severe critical vulnerability has been unequivocally identified within the WordPress ecosystem. Malicious actors are currently attempting to exploit this flaw to surreptitiously upload executable PHP files, entirely bypassing the need for password authentication....

Danfoss controller attack on internet-exposed supermarket refrigeration systems, with Danfoss AK-SM vulnerabilities flagged by CERT-FR 0

Danfoss Controller Attack Hits Retail Refrigeration

Refrigeration Controllers Under Attack A wave of compromises has struck Danfoss refrigeration controllers in French retail. In response, Danfoss has moved to mitigate the cyberattack, while national authorities investigate its scale. Known Flaws in...

Raspberry Pi Desktop interface running on a standard laptop showing the new Wayland environment 0

Raspberry Pi Desktop Returns for PC and Mac

After an agonizing four-year hiatus, the Raspberry Pi Foundation has triumphantly resurrected a contemporary iteration of the Raspberry Pi Desktop. This operating system is specifically engineered for conventional personal computers and legacy Intel-based Macintosh...

Citrix NetScaler SAML vulnerability CVE-2026-107406 remote code execution 0

Critical CVE-2026-107406 Flaw Hits Citrix NetScaler SAML

NetScaler administrators face an increasingly frustrating reality, compelled to deploy device updates mere days after concluding a previous wave of frantic patching. Citrix recently issued an urgent advisory regarding CVE-2026-107406, a critical vulnerability commanding...