Blind Eagle (APT-C-36), a notorious Latin American threat group, has been actively targeting Colombia’s justice system, government bodies, and private firms through sophisticated cyber campaigns.

Read More
1 min read

The recently uncovered *Operation Sea Elephant* is a cyber espionage campaign targeting scientific organizations focused on ocean studies.

Read More
1 min read

A cyberespionage campaign using the FatalRAT trojan is targeting industrial organizations in the Asia-Pacific region, particularly in Taiwan, China, Japan, Thailand, and Singapore

Read More
1 min read

Security researchers at Volexity have identified Russian threat actors exploiting Microsoft 365’s Device Code Authentication for sophisticated spear-phishing attacks.

Read More
1 min read

FinStealer is a sophisticated malware campaign targeting customers of a major Indian bank through fake mobile applications.

Read More
1 min read

A large-scale brute force attack campaign using 2.8 million IP addresses is actively targeting edge security devices, including VPNs, firewalls, and gateways from vendors like Palo Alto Networks, Ivanti, and SonicWall.

Read More
1 min read

Cybersecurity researchers have uncovered a global malware campaign exploiting tax season to target financial institutions and individuals through phishing emails impersonating tax agencies like HMRC, Intuit, and myGov.

Read More
1 min read

Hellcat is a newly identified ransomware group using a Ransomware-as-a-Service (RaaS) model to target government, education, and energy sectors.

Read More
1 min read

The "FlowerStorm" phishing framework has emerged as a sophisticated Phishing-as-a-Service (PhaaS) platform targeting multiple brands to steal login credentials.

Read More
1 min read

The New York State Department of Financial Services (NYDFS) fined PayPal $2 million for failing to meet its cybersecurity standards, following a data breach in December 2022.

Read More
1 min read

Researchers have uncovered new variants of the "Banshee macOS Stealer", which initially bypassed antivirus detection due to its use of a unique string encryption technique mimicking Apple’s XProtect antivirus engine.

Read More
1 min read

A sophisticated credit card skimmer malware has been discovered targeting WordPress checkout pages by silently injecting malicious JavaScript into the WordPress database's wp_options table.

Read More
1 min read