Two British teenagers are set to stand trial over last year’s cyberattack on London’s transport system — an incident investigators have linked to the hacking collective Scattered Spider, with Transport for London (TfL) estimating...
On October 25, 2025, in Hanoi, Vietnam, the signing ceremony for the world’s first global United Nations Convention on the Prevention and Response to Cybercrime was officially inaugurated. According to the United Nations Office...
In March 2025, Kaspersky Lab recorded a surge of infections triggered when users followed personalized phishing links sent via email. No additional interaction was required to activate the attack—merely opening the malicious site in...
The Pakistani hacking collective known as Transparent Tribe (APT36) has intensified cyber-espionage operations against Indian government institutions, deploying a new Go-written malware dubbed DeskRAT, researchers at Sekoia reported after observing activity in August and...
Government-backed hackers infiltrated a U.S. nuclear weapons component manufacturer by exploiting vulnerabilities in Microsoft SharePoint. The incident affected the Kansas City National Security Campus (KCNSC), part of the National Nuclear Security Administration (NNSA) under...
Pentest Copilot is an open-source tool built to assist ethical hackers and penetration testers. By integrating LLMs, it automates and enhances various pentesting tasks. The tool is deployable locally with Docker and includes an...
GhostBeacon mainly consists of two primary modules: the Rogue (Fake) Access Point Spotter, which analyses Beacon Frames using couple of parameters to identify Rogue Access Points; and the Hidden Access Point Spotter, which analyses...
After a brief period of dormancy, the operator of the LockBit ransomware has returned to full-scale activity, unveiling a new and more sophisticated version of its malware. In the spring of 2024, the group’s...
In mid-summer 2025, the ToolShell vulnerability (CVE-2025-53770) became the catalyst for a major wave of compromises. Attackers exploited the flaw on SharePoint servers shortly after Microsoft released its patch, gaining unauthenticated access to files...
North Korea has intensified its reliance on cybercrime and the overseas remote employment of its citizens to circumvent international sanctions and finance its missile and nuclear programs. This conclusion was presented by member states...
The Lazarus hacking group has resurfaced—this time targeting European defence firms engaged in unmanned aerial systems development. ESET traces the activity to the DreamJob campaign, attributed to North Korea, which habitually employs bogus job...
The PhantomCaptcha operation proved to be one of the most sophisticated phishing campaigns of recent months, directed at humanitarian and administrative organizations. According to SentinelLabs, the attackers orchestrated a meticulously crafted scheme, masquerading as...
