Category: Information Security
Along the Myanmar–Thailand border, a swift and tangled drama is unfolding around one of the region’s most notorious hubs of online fraud — the KK Park complex. In recent days, footage has surfaced showing...
Two British teenagers are set to stand trial over last year’s cyberattack on London’s transport system — an incident investigators have linked to the hacking collective Scattered Spider, with Transport for London (TfL) estimating...
On October 25, 2025, in Hanoi, Vietnam, the signing ceremony for the world’s first global United Nations Convention on the Prevention and Response to Cybercrime was officially inaugurated. According to the United Nations Office...
In March 2025, Kaspersky Lab recorded a surge of infections triggered when users followed personalized phishing links sent via email. No additional interaction was required to activate the attack—merely opening the malicious site in...
The Pakistani hacking collective known as Transparent Tribe (APT36) has intensified cyber-espionage operations against Indian government institutions, deploying a new Go-written malware dubbed DeskRAT, researchers at Sekoia reported after observing activity in August and...
Government-backed hackers infiltrated a U.S. nuclear weapons component manufacturer by exploiting vulnerabilities in Microsoft SharePoint. The incident affected the Kansas City National Security Campus (KCNSC), part of the National Nuclear Security Administration (NNSA) under...
After a brief period of dormancy, the operator of the LockBit ransomware has returned to full-scale activity, unveiling a new and more sophisticated version of its malware. In the spring of 2024, the group’s...
In mid-summer 2025, the ToolShell vulnerability (CVE-2025-53770) became the catalyst for a major wave of compromises. Attackers exploited the flaw on SharePoint servers shortly after Microsoft released its patch, gaining unauthenticated access to files...
North Korea has intensified its reliance on cybercrime and the overseas remote employment of its citizens to circumvent international sanctions and finance its missile and nuclear programs. This conclusion was presented by member states...
The Lazarus hacking group has resurfaced—this time targeting European defence firms engaged in unmanned aerial systems development. ESET traces the activity to the DreamJob campaign, attributed to North Korea, which habitually employs bogus job...
The PhantomCaptcha operation proved to be one of the most sophisticated phishing campaigns of recent months, directed at humanitarian and administrative organizations. According to SentinelLabs, the attackers orchestrated a meticulously crafted scheme, masquerading as...
A widespread exploitation campaign has descended upon WordPress sites: attackers are targeting installations that use the GutenKit and Hunk Companion plugins, which harbor critical flaws permitting arbitrary code execution on vulnerable servers. Wordfence, a...