The stability and resilience of the internet rest largely on systems that remain invisible to most users. Among these foundational pillars is the root DNS server system—a critical mechanism responsible for translating domain names...
Within cybercriminal circles, interest in recruiting insiders from within companies is surging. Rather than mounting complex external intrusions, attackers are increasingly betting on internal sources—employees willing, for a price, to grant access to corporate...
A coordinated cybercrime crackdown across Africa has culminated in hundreds of arrests and the seizure of millions of dollars. As part of a sweeping international investigation, authorities not only detained hundreds of suspects but...
The Excel format—long regarded as a harmless office staple—is increasingly being exploited as an entry point for cyberattacks. At the center of this trend are XLL files, specialized Excel add-ins that are, in reality,...
The Chinese hacking group known as Evasive Panda (also tracked as Bronze Highland, Daggerfly, and StormBamboo) carried out one of the most sophisticated and long-running cyber campaigns of recent years, silently infecting victim systems...
By 2026, government agencies are finding it increasingly difficult to describe cyber risk with a single word or a single adversary. Analysts interviewed by ISMG argue that threats are beginning to overlap: political decisions...
The LastPass breach that occurred back in 2022 continues to generate illicit profits years later. A recent on-chain analysis by TRM Labs has uncovered new details about the underlying criminal infrastructure. At the time...
In late December, an unwelcome supply-chain surprise erupted around the popular text editor EmEditor. According to the developer, between December 19 and 22, 2025, the download button on the official website may have served...
Blockchain investigator ZachXBT reported on December 25 that, over the preceding hours, numerous Trust Wallet users had experienced unauthorized withdrawals. Affected individuals claimed their assets were drained from their wallets without any form of...
Fortinet has warned administrators that real-world attacks are once again exploiting the vulnerability FG-IR-19-283 (CVE-2020-12812), first disclosed in July 2020. Under certain FortiGate configurations, the flaw allows attackers to bypass two-factor authentication and log...
The former head of Georgia’s State Security Service has become the central figure in a major corruption scandal tied to an international fraud scheme. Georgian prosecutors allege that Grigol Liluashvili spent several years accepting...
IronJump is a hardened SSH bastion and endpoint management framework written in Bash. It enables security professionals and administrators to securely deploy and maintain jump servers and endpoint devices across hybrid infrastructure including IT,...
