The FBI has warned that Iranian hacking group Handala has been targeting opponents of the regime since 2023
Flux RSS
— Sources secondairesNew Trivy Docker images 0.69.5 and 0.69.6 compromised with TeamPCP infostealer, impacting CI/CD scans
Mobile banking malware targets over 1200 financial apps globally, shifting fraud to user devices
ShieldGuard Chrome extension posed as a crypto security tool but stole wallets and drained user data
The FBI wants to hear from gamers who have downloaded Steam titles containing malware
PixRevolution Android trojan hijacks Brazil’s PIX payments in real time using accessibility abuse
The pro-Iran Handala group claims to have wiped 200,000 systems in destructive wiper malware attack on US firm Stryker
Over 250 legitimate websites, including news outlets and a US Senate candidate’s official webpage, been compromised to infect visitors with infostealers, warn Rapid7 researchers
BlackSanta malware targets HR staff with fake resumes, kills EDR and steals system data
Ericsson data breach affects 15k employees/customers after third-party service provider compromise
A bank, an airport, a non-profit and the Israeli branch of a US software company were among the targets of this new MuddyWater campaign
A global operation has resulted in the takedown of popular cybercrime forum LeakBase
Malware campaign uses Ukrainian email service for credibility, deploying "BadPaw" to execute attacks
Ariomex database reveals potential sanctions evasion and capital transfers tied to Iranian actors
Black Kite reveals 26,000 unnamed corporate victims linked to 136 third-party breaches
Chainalysis reveals a big surge in median ransomware payment size in 2025 despite overall drop in criminal revenue
The security researchers from Zscaler ThreatLabz have also discovered five new tools deployed by the North Korean hacking group
UNC2814 hit 53 victims in 42 countries with novel backdoor in decade long cyber espionage operation
Ransomware Medusa linked to North Korean hackers targets US healthcare amid ongoing attacks
Supply chain worm mimicking Shai-Hulud malware spread via malicious npm packages, targeting AI tools has been identified by security researchers