British Scattered Spider Leader Pleads Guilty to Crypto Theft
A British man, believed to be the leader of the Scattered Spider cybercrime collective, has pleaded guilty in the United States to charges of wire fraud and agg
Cybersecurity
531 articles
North Korean Hackers Behind Axios npm Package Supply Chain Attack
The maintainer of the Axios npm package has confirmed that the supply chain compromise was the result of a highly-targeted social engineering campaign orch
Microsoft Accelerates File Explorer with Speed Enhancements
Microsoft is rolling out multiple File Explorer changes to Windows 11 users in the Insider program, including improvements to launch speed and performance. [...
New LucidRook Malware Targets Taiwan NGOs
A previously undocumented threat cluster dubbed UAT-10362 has been attributed to spear-phishing campaigns targeting Taiwanese non-governmental organization
Microsoft Deploys Emergency Fixes for Windows Server Glitches
Microsoft has released out-of-band (OOB) updates to fix issues affecting Windows Server systems after installing the April 2026 security updates. [...]
Security Threats Escalate: Pre-Auth Chains and Android Rootkits
The latest ThreatsDay Bulletin is basically a cheat sheet for everything breaking on the internet right now. No corporate fluff or boring lectures her
Microsoft Rolls Back Teams Update After Launch Issues
Microsoft has reverted a recent service update that was preventing some customers from launching the Microsoft Teams desktop client. [...]
Security Threats Surge: Legacy Flaws Meet Modern Attack Methods
Thursday. Another week, another batch of things that probably should've been caught sooner but weren't. This one's got some range — old vulnerabilitie
Vercel Confirms Security Breach, Hackers Claim Data Sale
Cloud development platform Vercel has disclosed a security incident after threat actors claimed to have breached its systems and are attempting to sell stolen d
Open Source Security Report Reveals Enterprise Consumption Trends
In December 2025, we shared the first-ever The State of Trusted Open Source report, featuring insights from our product data and customer base on open
NIST Stops Rating Low-Priority Vulnerabilities Amid Rising Submissions
The National Institute of Standards and Technology will stop assigning severity scores to lower-priority vulnerabilities due to the growing workload from rising
Shadow AI: The Enterprise Security Blind Spot
As AI tools become more accessible, employees are adopting them without formal approval from IT and security teams. While these tools may boost produc
Apple's Account Alerts Weaponized in iPhone Phishing Campaign
Apple account change notifications are being abused to send fake iPhone purchase phishing scams within legitimate emails sent from Apple's servers, increasing l
The Real Cost of Repeated Credential Breaches
When talking about credential security, the focus usually lands on breach prevention. This makes sense when IBM’s 2025 Cost of a Data Breach Repo
Critical Protobuf.js Flaw Exposes JavaScript Apps to Remote Code Execution
Proof-of-concept exploit code has been published for a critical remote code execution flaw in protobuf.js, a widely used JavaScript implementation of Google's P
CISA Contractor Exposed AWS Keys in Major Gov Data Leak
Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed cred
Enterprise Identity Management Faces Critical Visibility Gap
The Fragmented State of Modern Enterprise Identity Enterprise IAM is approaching a breaking point. As organizations scale, identity becomes increasing
Microsoft Edge Update Breaks Teams Right-Click Paste Feature
Microsoft is warning that a recent Microsoft Edge browser update introduced a bug that breaks right-click paste in chats in the Microsoft Teams desktop client.
Cyber Criminals Deploy RATs and Miners via Fake Software
A financially motivated operation codenamed REF1695 has been observed leveraging fake installers to deploy remote access trojans (RATs) and
NAKIVO Backup v11.2 Adds Ransomware Defense and Platform Support
NAKIVO Inc. announced the general availability of NAKIVO Backup & Replication v11.2, focused on fast, reliable, and proactive data protection. [...]
Ransomware Gangs Exploit Vulnerable Drivers to Disable EDR Tools
Threat actors associated with Qilin and Warlock ransomware operations have been observed using the bring your own vulnerable driver (BY
Payouts King Ransomware Deploys Hidden VMs to Evade Security
The Payouts King ransomware is using the QEMU emulator as a reverse SSH backdoor to run hidden virtual machines on compromised systems and bypass endpoint secur
1,000+ ComfyUI Instances Hijacked in Cryptomining Botnet Blitz
An active campaign has been observed targeting internet-exposed instances running ComfyUI, a popular stable diffusion platform, to enlist them into a cryptocurr
How Cybercriminals Evaluate Stolen Card Marketplaces
In cybercrime markets, trust isn't assumed, it's verified. Flare reveals how underground guides teach actors to evaluate carding shops based on data quality, re
SparkCat Malware Returns: New Variant Targets Crypto Wallets
Cybersecurity researchers have discovered a new version of the SparkCat malware on the Apple App Store and Google Play Store, more than a year after t
Kyrgyzstan Crypto Exchange Grinex Halts After $13.7M Hack
Kyrgyzstan-based cryptocurrency exchange Grinex has suspended its operations after suffering a $13.7 million hack attributed to Western intelligence agencies. [
New GPU Attack Exploits Memory Flaws for CPU Takeover
New academic research has identified multiple RowHammer attacks against high-performance graphics processing units (GPUs) that could be exploited to escalate pr
MSPs Face Growing Pressure as Cyberattacks Outpace Defenses
Cyberattacks are evolving faster than many MSP and corporate defenses can keep up, with phishing driving much of today's cybercrime. Join our upcoming webinar t
Chaos Malware Variant Now Targets Misconfigured Cloud Systems
Cybersecurity researchers have flagged a new variant ofmalware called Chaosthat'scapable of hitting misconfigured cloud deployments, marking an e
CISA Alerts on Active Exploitation of Apache ActiveMQ Flaw
CISA warned that attackers are now exploiting a high-severity Apache ActiveMQ vulnerability, which was patched earlier this month after going undetected for 13
North Korean Hackers Distribute 1,700 Malicious Packages Across Developer Ecosystems
The North Korea-linked persistent campaign known as Contagious Interview has spread its tentacles by publishing malicious packages targeting the Go, R
Windows Zero-Days Under Active Exploitation
Threat actors are exploiting three recently disclosed Windows security vulnerabilities in attacks aimed at gaining SYSTEM or elevated administrator permissions.
Enterprise SOCs Face Multi-OS Attack Challenge
Your attack surface no longer lives on one operating system, and neither do the campaigns targeting it. In enterprise environments, attackers mov
Memphis Man Sentenced to 30 Months for DraftKings Account Theft
23-year-old Kamerin Stokes of Memphis, Tennessee, was sentenced to 30 months in prison for selling access to tens of thousands of hacked DraftKings accounts. [.
Linux Servers Under Attack: PHP Web Shells Hide Commands in Cookies
Threat actors are increasingly using HTTP cookies as a control channel for PHP-based web shells on Linux servers and to achieve remote code execution, acco
Windows Server Restart Issue Emerges After April 2026 Updates
Microsoft warns that some Windows domain controllers are entering restart loops after installing the April 2026 security updates. [...]
Masjesu Botnet Emerges as Global DDoS-for-Hire Threat
Cybersecurity researchers have lifted the curtain on a stealthy botnet that's designed for distributed denial-of-service (DDoS) attacks. Called Masjesu, th
New ZionSiphon Malware Targets Critical Water Infrastructure
A new malware called ZionSiphon, specifically designed for operational technology, is targeting water treatment and desalination environments to sabotage their
Critical Marimo Vulnerability Exploited in Hours
A critical security vulnerability in Marimo, an open-source Python notebook for data science and analysis, has been exploited within 10 hours of public dis
Global Operation Dismantles 75K DDoS Users, Shuts 53 Domains
The latest wave of "Operation PowerOFF," on April 13, 2026, targeted the distributed denial-of-service (DDoS) ecosystem and its users across 21 countries. [...]
Iran-Linked Hackers Target 300+ Israeli Microsoft 365 Accounts
An Iran-nexus threat actor is suspected to be behind a password-spraying campaign targeting Microsoft 365 environments in Israel and the U.A.E. amid o
Microsoft Defender Zero-Day Exploit Escalates to SYSTEM Privileges
A researcher known as "Chaotic Eclipse" has published a proof-of-concept exploit for a second Microsoft Defender zero-day, dubbed "RedSun," in the past two week
Iran-Linked Hackers Target U.S. Critical Infrastructure
Iran-affiliated cyber actors are targeting internet-facing operational technology (OT) devices across critical infrastructures in the U.S., including programmab
AI-Powered Voice Phishing Platform ATHR Automates Credential Theft
A new cybercrime platform called ATHR can harvest credentials via fully automated voice phishing attacks that use both human operators and AI agents for the soc
Developer Machines Exposed: The LiteLLM Supply Chain Risk
The most active piece of enterprise infrastructure in the company is the developer workstation. That laptop is where credentials are created, tested,
AI Security Tools Fall Short: Why Alert Triage Isn't Enough
AI-powered SOC tools promise automation, but most only speed up triage instead of reducing real workload. Tines shows how real gains come from end-to-end workfl
Hackers Exploit Next.js Flaw to Breach 766 Sites, Steal Credentials
A large-scale credential harvesting operation has been observed exploiting the React2Shell vulnerability as an initial infection vector to steal
Critical Marimo Flaw Exploited to Deploy NKAbuse Malware
Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware hosted on Hugging Face Spaces. [..
Google Launches DBSC Security Feature in Chrome 146
Google has made Device Bound Session Credentials (DBSC) generally available to all Windows users of its Chrome web browser, months after it began
Google Deploys Gemini AI to Combat Malicious Ads
Google says it is increasingly using its Gemini AI models to detect and block harmful ads on its advertising platforms, as scammers and threat actors continue t