The group Lunar Spider—also known under the aliases Gold SwathMore and Elara—has ramped up a new malicious campaign that leverages a counterfeit CAPTCHA verification interface to infect victims’ devices. The primary vector is the...
A hacker collective known as UAT-8099 is presently conducting an active campaign to promote malicious content in search results by compromising Microsoft IIS servers across multiple countries. Cisco Talos researchers found that this Mandarin-language...
The vulnerability rewards platform HackerOne has announced that over the past twelve months, white-hat hackers around the world have earned a total of $81 million in payouts — a 13% increase compared to the...
Amid the ongoing duel between Linux kernel developers and authors of malicious modules, each kernel release reshuffles the balance of power. A recent example is the FlipSwitch rootkit module, which employs an unusual technique...
On September 29, the Intermediate People’s Court of Wenzhou delivered a verdict in the high-profile case of the so-called “Min Clan,” whose operations for years had been entwined with armed militias and vast criminal...
BBC journalist Joe Tidy found himself entangled in a scenario that ordinarily lurks in the shadows of the cybercriminal world. In July he received an unexpected Signal message from an unknown interlocutor identifying himself...
A new Android banking trojan known as Klopatra has infected more than three thousand smartphones within just a few weeks, the majority of which are located in Spain and Italy. The malware was discovered...
Red Hat, the American developer of enterprise Linux solutions, has confirmed a cybersecurity incident shortly after a group calling itself Crimson Collective claimed responsibility for stealing nearly 570 GB of data from the company’s...
CERT-UA has detected a new targeted campaign against Ukraine in which operators distribute malicious XLL modules inside ZIP archives via the Signal messenger, ultimately delivering the CABINETRAT backdoor to victims’ machines. The agency attributes...
The Chinese company Anker, maker of Eufy security cameras, launched an unusual campaign in late 2024: it offered users cash in exchange for video recordings of package thefts and attempted car break-ins. As reported...
The French cybersecurity firm SEKOIA has uncovered a smishing campaign in which attackers exploit vulnerabilities in Milesight industrial 4G/5G routers to distribute phishing SMS messages across several European countries. According to the report, adversaries...
Google has released the stable version of Chrome 141.0.7390.54/55 for Windows, macOS, and Linux. The update will roll out over the coming days and weeks, addressing 21 security vulnerabilities of varying severity — including...
