A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff…

PHP releases emergency PHP2Shell fixes for two critical flaws allowing unauthenticated code execution. Website owners and hosting providers…

Sophos found BRONZE SANDCASTLE abusing legitimate Windows apps to load encrypted backdoors, collect system information and steal Active…

Federal investigators suspect a US ransomware negotiator helped ShinyHunters operate an extortion site used to pressure nearly 100 organisations.

More than 40,000 organisations have received fake calendar invitations designed to steal Microsoft account credentials, according to new…

Citizen Lab found targeted ads delivered Candiru spyware to Al Jazeera devices without clicks, while the same ad…

Hackers reportedly heated supermarket fridges to 50°C in France, spoiling food stocks, while stores in the Netherlands and…

Raheim Hamilton, co-creator of the dark web marketplace Empire Market, was sentenced to 40 years for a platform…

FBI arrests Cypfer co-founder Edward Dubrovsky, now associated with CyberSteward, in the ShinyHunters investigation into the FBI jobs…

The FBI and DOJ seized domains and disrupted scanning and spear-phishing tools used by Flax Typhoon, a China-linked…

US and French authorities seized two domains and arrested a suspected administrator in a CSAM and non-consensual intimate image abuse case.

Dread dark web forum appears hijacked after a pinned post claimed control of the project and domain keys, while denying plans to leak user data.

Over 100 hacked Ukrainian websites used fake Cloudflare checks to install Lunex Stealer and steal browser passwords, tokens and cryptocurrency wallets.

British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send…

Meet ClingSTUN, a new Linux backdoor that exploits IoT vulnerabilities, gives attackers remote command access and turns infected devices into proxy nodes.

ShinyHunters hacker “Rey” was detained in Jordan and is reportedly cooperating with the FBI after the group claimed major FBI and corporate data breaches.

💾

Dutch Institute for Vulnerability Disclosure was breached through two Zammad 0-days in an AI-powered attack that led to remote code execution and root access.

A study of 367,000 ships finds global GPS spoofing, including Red Sea activity detected months before the MSC…

An international police operation has disrupted the KillSec ransomware group, with three suspects arrested, five servers seized and…

An Amazon Prime phishing campaign is using fake payment alerts to steal account logins, personal data and complete credit or debit card details from unsuspecting customers.