Researchers at Silent Push have uncovered infrastructure linked to the Chinese cyber-espionage groups Salt Typhoon and UNC4841. The newly identified sample includes 45 previously unpublished domains, some of which were registered as early as...
At least eighteen widely used JavaScript packages on NPM—with a combined weekly download volume exceeding two billion—were briefly compromised with malicious code after a phishing attack on one of the maintainers. Although the incident...
The Australian Institute of Criminology has unveiled a comprehensive study exposing the inner workings of ransomware syndicates and their impact on Australia and allied nations. Researchers analyzed 865 attacks recorded between 2020 and 2022...
The GhostAction attack stands as one of the most significant compromises of the GitHub ecosystem in recent years. Researchers at GitGuardian uncovered a sweeping campaign in which threat actors injected malicious workflow files into...
The hacking scene has once again made headlines with a provocative declaration. A Telegram channel carried a message from a group styling itself as “Scattered LapSus Hunters.” They claim to have gained access to...
The arrest of the alleged administrator of the Russian-speaking forum XSS[.]is, known under the alias Toha, has become a critical inflection point for the entire underground market. According to law enforcement, on July 22,...
Cybercriminals have launched a new wave of attacks that employ SVG files as carriers for phishing pages. According to researchers at VirusTotal, the attackers disguise themselves as representatives of the Colombian Prosecutor’s Office, distributing...
The Japanese tire manufacturer Bridgestone has announced an investigation into a cybersecurity incident in North America that disrupted operations at several of its factories. The first reports of outages surfaced on September 2, when...
Researchers from the School of Computer Science at Carnegie Mellon University have unveiled the results of a large-scale analysis revealing that GitHub’s “star” system—long regarded as a measure of a project’s popularity and trustworthiness—has...
Cybercriminals have discovered a method to bypass X’s restrictions on posting links by exploiting its built-in assistant, Grok. The technique was revealed by Guardio Labs, with anomalies and screenshots documented by an X user....
Hackers launched a large-scale attempt to steal funds from the Brazilian company Sinqia S.A., a provider of financial IT services. The incident occurred on August 29 and targeted the infrastructure of Pix, Brazil’s instant...
Jaguar Land Rover has disclosed a cyberattack that forced the company to temporarily shut down several critical systems. The incident had a significant impact on manufacturing and retail operations, though preliminary assessments indicate that...
