Large-scale DDoS attacks on the evening of August 11 cut off user access to the secure messaging app Threema, followed by a fresh wave of disruptions the following morning of August 12. According to...
A software flaw at a payment contractor allowed criminals to drain approximately 30 million euros from customer accounts at Germany’s Commerzbank over the course of just four days. The stolen funds were laundered through...
The Chinese threat group Jewelbug has repurposed a single piece of infrastructure to serve two distinct objectives simultaneously: surveilling government organizations and profiting from cryptocurrency fraud. Symantec researchers determined that a small team managed...
The Threat of Physical Compromise A business trip can expose sensitive data to compromise before a laptop ever connects to the corporate network. For instance, the OVERCAST PANDA threat group infected the devices of...
Exploiting AI Infrastructure An attacker dispatched nearly 200,000 requests to a language model in just two minutes. Specifically, they leveraged a stolen access key to execute this massive flood. Consequently, such strikes rapidly transform...
Occasionally, the endeavor to prove one’s mettle begins with a transgression of the rules. In India, an aspiring student – having been denied admission to the cybersecurity programs at the Indian Institutes of Technology...
Even a seemingly mundane invoice can initiate a devastatingly complex infection chain. Recently, the notorious SilverFox threat actor orchestrated this precise deceptive scheme against a prominent Japanese industrial firm. Ultimately, their objective was to...
The Invisible Intrusion A completely mundane email, utterly devoid of malicious links or suspicious attachments, proved sufficient for the formidable TA488 hacker collective to secure persistent access to a victim’s inbox. Consequently, the perpetrators...
An ordinary email attachment can serve as the perilous gateway to a sophisticated attack chain when a meticulously crafted toolkit lurks behind a seemingly benign document. Recently, analysts at 360 Advanced Threat Research uncovered...
Google is introducing a unified naming system for the hacker groups its specialists track. Instead of labels like APT1 and a jumble of unrelated identifiers, attackers will now receive memorable two-word aliases. The transition...
Bypassing the Code: A Compromise of Trust An unidentified threat actor effectively liquidated the entirety of the cryptocurrency protocol AFX Trade without exploiting a single vulnerability within its underlying smart contract code. Instead, the...
The Inversion of State-Sponsored Cyber Heists For years, state-sponsored North Korean cyber operatives conducted audacious digital heists across international borders to siphon foreign currency and sustain the regime’s nuclear weapons program. However, this established...
