Blog #Cybersecurity Trends

FinStealer is a sophisticated malware campaign targeting customers of a major Indian bank through fake mobile applications.

A new phishing campaign is targeting businesses with fake Facebook copyright notices, impacting over 12,000 email addresses across the EU, US, and Australia since December 20, 2024.

A large-scale brute force attack campaign using 2.8 million IP addresses is actively targeting edge security devices, including VPNs, firewalls, and gateways from vendors like Palo Alto Networks, Ivanti, and SonicWall.

The PlayStation Network (PSN) experienced a significant global outage starting around midnight on February 8, 2025, affecting services such as account management, online gaming, the PlayStation Store, and more.

A cyberattack on Hospital Sisters Health System (HSHS) in August 2023 compromised the personal information of 883,000 individuals.

A financially motivated threat actor, UAC-0006, is conducting an advanced phishing campaign targeting PrivatBank customers, using password-protected archives to deploy the SmokeLoader malware.

Cybersecurity researchers have uncovered a global malware campaign exploiting tax season to target financial institutions and individuals through phishing emails impersonating tax agencies like HMRC, Intuit, and myGov.

Morphisec researchers have uncovered a new variant of the ValleyRAT malware, employing advanced evasion tactics, multi-stage infection chains, and novel delivery methods.

Two major data breaches have impacted hundreds of thousands of individuals at Asheville Eye Associates and Delta County Memorial Hospital District.

This recent investigation uncovered a sophisticated web skimming attack targeting Casio UK and 16 other websites, likely due to vulnerabilities in Magento-based platforms.

The UK telecommunications company TalkTalk has confirmed a data breach involving a third-party supplier’s platform after a threat actor, ‘b0nd,’ claimed to have stolen information on 18.8 million customers.

Chinese AI company DeepSeek blamed a cyberattack for preventing new user registrations, though existing users remained unaffected.