A newly discovered vulnerability in Node.js, designated CVE-2025-55182 and informally dubbed React2Shell, has become a favored weapon of botnets within mere days of its disclosure. Operators are now launching widespread attacks against vulnerable web...
The widow of Saudi dissident journalist Jamal Khashoggi has filed a complaint with the French prosecutor’s office, alleging that her phone was infected with Israeli spyware shortly before her husband’s murder. Hanan Elatr Khashoggi...
The International Criminal Court has released a draft policy aimed at confronting crimes committed through digital technologies. The document responds to the growing role of cyber capabilities and artificial intelligence in perpetrating grave international...
Researchers from Howler Cell have detailed an underground marketplace for compromised websites operated by students and freelancers across Asia. At the center of their latest report is a cybersecurity student from Bangladesh who aspires...
APT-C-53 has once again intensified its distribution of malicious attachments targeting organizations in Ukraine. The latest wave of attacks demonstrates that the group continues to refine its stealth-penetration toolkit and to update its initial-access...
The launch of the IPCola service on underground forums in 2023 initially appeared to be yet another proxy marketplace, but the scale of the advertised address pool and the origins of its traffic quickly...
At the beginning of the year, Japan was shaken by a scandal surrounding a major data breach involving the Kaikatsu Club internet café chain. Law enforcement authorities identified a minor from Osaka Prefecture who,...
A data leak at the Chinese company Knownsec—long heralded as one of the flagships of the nation’s cybersecurity industry—has dealt the firm a reputational blow and forced an unexpected admission of internal weaknesses. In...
A researcher known under the pseudonym Vulndisclosure has reported a vulnerability, dubbed ZeroBoot, that enables an attacker to bypass file-based encryption (FBE) on the Samsung Galaxy A25 5G and access user data without entering...
A ransomware attack has crippled the operations of several key Puerto Rican government agencies, yet officials have still not publicly acknowledged the incident. According to available information, beginning on 25 November, three major public...
In February, a Slovenian information security researcher published an analysis of the Chinese remote-management device NanoKVM, revealing that the inexpensive €30–60 KVM kit shipped with a host of vulnerabilities—along with a concealed microphone that...
Researcher ZachXBT has stated that a British national implicated in the major $243 million cryptocurrency breach involving lender Genesis may have been detained in Dubai. According to him, the individual in question is known...
