Information Security News Blog
GitLab published a report detailing a fresh wave of attacks in which researcher Oliver Smith analyzed a shift in tactics by a North Korean cyber group employing the BeaverTail and InvisibleFerret malware families. The...
Amid a surge in cybercriminal activity, Darktrace has uncovered a new campaign powered by the ShadowV2 botnet. Researchers first observed the malicious infrastructure on June 24, 2025, when their traps were triggered. At the...
GitHub has announced sweeping changes to its npm authentication and package publication system, aimed at strengthening defenses against supply chain attacks. The catalyst for these reforms was the recent Shai-Hulud campaign—a malicious self-propagating worm...
The U.S. Secret Service announced that it had dismantled a telecommunications network in New York capable of disrupting mobile communications. The equipment was discovered near the United Nations headquarters, where the General Assembly is...
Researchers at Check Point have uncovered a prolonged and targeted campaign by the group Nimbus Manticore (also tracked as UNC1549 and Smoke Sandstorm), which since early 2025 has been directing operations against defence contractors,...
On the morning of September 23, reports emerged of a large-scale attack on the Web3 platform UXLINK. The company confirmed that attackers had siphoned off substantial amounts of cryptocurrency before moving on to the...
Cybercriminals have launched a large-scale campaign against macOS users, disguising malware as popular applications. The alert comes from LastPass, which reported that its own product was among those impersonated. Distribution is carried out through...
The European Union Agency for Cybersecurity (ENISA) has reported that disruptions across several European airports over the weekend were caused by a targeted ransomware attack against the U.S.-based provider of check-in and boarding systems,...
Cloudflare has announced that its automated systems successfully repelled a series of hyper-volumetric DDoS attacks, with two waves peaking at 22.2 Tbps and 10.6 Bpps, all without the need for human intervention. The term...
Artificial intelligence has made web development accessible to the masses: today, even those without programming skills can build a website or application using AI-powered services. These platforms enable projects to launch with remarkable speed...
Researchers at the University of Waterloo have demonstrated that even when encryption is employed, the actions of robotic assistants can be inferred with near-perfect accuracy. Their study revealed that by analyzing network traffic, it...
FirmAE is a fully-automated framework that performs emulation and vulnerability analysis. FirmAE significantly increases the emulation success rate (From Firmadyne’s 16.28% to 79.36%) with five arbitration techniques. We tested FirmAE on 1,124 wireless routers and...