An innocuous cloud-based file collaboration platform recently became the conduit for a sophisticated espionage operation. The notorious Chinese threat actor, Mustang Panda, orchestrated targeted attacks against Indian government agencies and the energy sector, exploiting...
Recent revelations have surfaced regarding the notorious FortiBleed malicious operation. Researchers have definitively linked this campaign to more than mere credential harvesting. Instead, they attribute it directly to the Lynx/INC ransomware syndicate. Security experts...
The United States Department of Homeland Security is actively investigating a severe security breach. Unknown assailants compromised one of their primary information-sharing platforms, the Homeland Security Information Network (HSIN). This critical system allows federal...
Japanese manufacturing giant Nidec Corporation recently disclosed a significant cybersecurity incident affecting its Taiwanese subsidiary, Nidec Chaun Choung Technology. On June 22, 2026, IT specialists discovered the devastating remnants of a sophisticated ransomware attack...
Guest complaints usually demand immediate attention from hospitality professionals. Consequently, malicious actors recently exploited this urgency. They targeted Booking.com partners across Japan using deceptive emails. Attackers sent these messages posing as dissatisfied guests. They...
A browser search bar often looks safe. A bad Chrome extension, though, can turn it into a data trap before any results even show up. Microsoft recently found an extension called “Search for perplexity...
The Silent Infiltration Strategy A multi-year intelligence operation rarely reveals itself through a single catastrophic breach. Instead, it emerges through a clandestine sequence of quiet infiltrations. Consequently, Unit 42 researchers linked such a campaign...
Researchers have uncovered a network of malicious extensions inside the official Microsoft Edge store. These add-ons masqueraded as useful tools and operated for years alongside legitimate extensions. Disguised as ad blockers, weather widgets, video...
Cyberattack infrastructure often outlives the domains and IP addresses it depends on. Indeed, a new report from Hunt.io reveals just how densely such nodes have clustered across Eastern Europe. From 12 March to 12...
The more stealthy a malicious software remains, the longer its capacity to endure within a compromised system. This guiding philosophy drives the North Korean-linked Lazarus group in its latest offensive against banking institutions and...
Attackers infected more than 140 packages from the Mastra AI ecosystem through npm. The malicious code ran right after npm install or npm update. So the infection could reach developer workstations and build servers,...
Attackers injected malicious JavaScript into Okendo Reviews, a product review widget used by more than 18,000 brands. The compromised script loaded on store pages. After a few checks, it could show visitors a fake...
