A European DDoS mitigation provider has been struck by an unprecedented attack, with traffic volumes peaking at 1.5 billion packets per second. The massive wave originated from thousands of compromised IoT devices and MikroTik...
A new tool called SpamGPT has emerged on underground forums and quickly become a focal point of discussion within the cybersecurity community. The platform combines the capabilities of generative AI with a fully fledged...
The U.S. Department of Justice has filed charges against Ukrainian national Volodymyr Viktorovych Timoshchuk, identified by investigators as one of the key administrators behind the LockerGoga, MegaCortex, and Nefilim ransomware operations. According to U.S....
The subject of a new investigation is Alviva Holding, a provider whose infrastructure has long been a cornerstone for cybercriminal groups. The trigger for the probe was a change in contact details within the...
The Nemo Protocol platform, built on the Sui blockchain and operating within the DeFi sector, has fallen victim to a hacker attack. Malicious actors siphoned off approximately $2.4 million in stablecoins. The incident was...
The Swiss crypto platform SwissBorg has confirmed a breach in which attackers siphoned off approximately 193,000 Solana (SOL) tokens from its Earn program. At the time of the incident, the stolen assets were valued...
By the close of 2023, it had become evident that the largest coordinated crackdown to date on DDoS-for-Hire services produced a paradoxical outcome. Researchers, presenting their findings at USENIX Security 2025, traced the market’s...
At the end of August, GreyNoise recorded a sharp surge in scanner activity targeting Cisco ASA devices. Experts warn that such waves often precede the discovery of new vulnerabilities in these products. This time,...
Researchers at Silent Push have uncovered infrastructure linked to the Chinese cyber-espionage groups Salt Typhoon and UNC4841. The newly identified sample includes 45 previously unpublished domains, some of which were registered as early as...
At least eighteen widely used JavaScript packages on NPM—with a combined weekly download volume exceeding two billion—were briefly compromised with malicious code after a phishing attack on one of the maintainers. Although the incident...
The Australian Institute of Criminology has unveiled a comprehensive study exposing the inner workings of ransomware syndicates and their impact on Australia and allied nations. Researchers analyzed 865 attacks recorded between 2020 and 2022...
The GhostAction attack stands as one of the most significant compromises of the GitHub ecosystem in recent years. Researchers at GitGuardian uncovered a sweeping campaign in which threat actors injected malicious workflow files into...
