Category: CYBER SECURITY

Europol has arrested the suspected administrator of xss.is, one of the most influential Russian-speaking cybercrime forums, marking a breakthrough in the fight against cybercrime.

Just hours after Microsoft confirmed that Chinese state-backed hacking groups exploited a zero-day vulnerability in its SharePoint software, a new report from Bloomberg reveals that the U.S. National Nuclear Security Administration (NNSA) was among the victims.

Apple has notified more than a dozen Iranian users in recent months that their iPhones were targeted with government spyware, according to cybersecurity researchers and a new report by the Miaan Group.

Microsoft has confirmed that several recent cyberattacks targeting SharePoint servers have been linked to Chinese state-affiliated hacking groups.

ExpressVPN has patched a critical flaw in its Windows client that allowed Remote Desktop Protocol (RDP) traffic to bypass the VPN tunnel, potentially exposing users’ real IP addresses.

According to a statement posted on Ring’s Facebook page and status page, the company is “aware of a bug that incorrectly displays prior login dates as May 28, 2025,” due to a recent backend update

Hackers are actively exploiting a zero-day vulnerability in Microsoft SharePoint servers, with early attacks primarily targeting government organizations, according to researchers and recent reports.

Cybersecurity researcher Jeremiah Fowler has uncovered a massive data breach involving an unprotected and unencrypted database containing over 3.5 million records.

A newly rebranded extortion gang known as "World Leaks" has breached one of Dell’s product demonstration platforms and is now attempting to extort the company.

Microsoft has issued a critical alert about active cyberattacks targeting its on-premises SharePoint server software, which is widely used by businesses and government agencies to manage internal documents and facilitate collaboration.

Victims of the Phobos and 8Base ransomware operations can now recover their encrypted files for free, thanks to a new decryptor tool released by Japanese police.

The UK's National Cyber Security Centre (NCSC) has officially linked a sophisticated malware campaign, known as ‘Authentic Antics’, to the notorious APT28 hacking group—also known as Fancy Bear—which is connected to Russia’s military intelligence service (GRU).

A Chinese state-sponsored hacking group known as Salt Typhoon infiltrated a U.S. Army National Guard network and remained undetected for nine months in 2024, stealing sensitive data, including network diagrams, administrator credentials, and personal information of service members.

Cryptocurrency exchange BigONE has confirmed a $27 million theft following a cyberattack that compromised its hot wallet on July 16, 2025.

Google has filed a lawsuit against the anonymous operators of the BadBox 2.0 Android malware botnet, accusing them of running a global ad fraud operation that exploits Google’s advertising platforms.

Cybersecurity researcher Jeremiah Fowler has uncovered a massive data breach involving over 1.1 million records tied to the Gladney Center for Adoption, a Texas-based organization known for providing adoption and advocacy services for more than 130 years.

Former U.S. Army soldier Cameron John Wagenius has pleaded guilty to hacking major telecommunication companies and attempting to extort them by threatening to leak stolen data, the U.S. Department of Justice (DOJ) announced on Tuesday.

A new report by cybersecurity firm Lookout has revealed that Chinese authorities are using a powerful Android malware tool called Massistant to extract data from seized mobile phones, even accessing private content from encrypted messaging apps like Signal.

An international law enforcement operation has dismantled a Romanian ransomware group known as Diskstation, which crippled businesses in Italy’s Lombardy region by encrypting their systems.