Researchers at SquareX have published a comprehensive report on a newly discovered vulnerability known as AI Sidebar Spoofing—a novel class of attacks that leverages malicious browser extensions disguised as AI sidebar interfaces. This technique...
The malicious modification of Telegram X, discovered by specialists at Doctor Web, turned out to be far more than a simple espionage tool—it is a fully fledged platform for the covert takeover and remote...
Trend Research has detailed a new wave of attacks carried out by the Agenda ransomware group, which has developed the ability to execute a Linux variant of its encryptor within Windows-based environments. This tactic...
Amid the declining effectiveness of traditional malware delivery channels, cybercriminals are increasingly turning to platforms never intended for such purposes. The Check Point Research team has uncovered a vast, distributed network of malicious YouTube...
The South Korean government has announced a sweeping inspection of 1,600 IT systems across the sectors of public administration, finance, and telecommunications, following a series of high-profile data breaches that have sparked public outcry...
The U.S. Department of Justice has charged 31 individuals, including alleged members of organized crime and former NBA players, in connection with a large-scale poker fraud scheme that exploited hacked Deckmate 2 automatic card...
Hackers have begun actively exploiting a newly disclosed vulnerability in the Windows Server Update Services (WSUS) component. The flaw, tracked as CVE-2025-59287, already has a publicly available proof-of-concept (PoC) exploit, dramatically increasing the likelihood...
The Unit 42 team at Palo Alto Networks has released an in-depth investigation into a new international cybercrime campaign driven by financially motivated actors, codenamed Jingle Thief. Operating out of Morocco, the group specializes...
Group-IB’s Threat Intelligence team has published a detailed analysis of a new cyber-espionage campaign very likely attributable to the MuddyWater APT. The intrusion began with a compromised mailbox that the attackers accessed via a...
In April of this year, a cyberattack crippled the operations of Juan F. Luis Hospital in the U.S. Virgin Islands, causing months-long disruptions to its electronic systems, halting automated document workflows, and inflicting severe...
Researchers from Team Z3 have withdrawn their planned demonstration of a WhatsApp vulnerability at the Pwn2Own Ireland 2025 hacking competition — an exploit that could have earned them a record $1 million prize. According...
Jewett-Cameron Trading, a manufacturer of metal and wooden fencing, has informed the U.S. Securities and Exchange Commission (SEC) of a cyberattack in which attackers gained access to video recordings of corporate meetings and confidential...
