CYBER ATTACK

Google alerts users to a security vulnerability affecting its Android operating system that is currently being actively exploited in the wild. A privilege escalation flaw in the Android Frame

Since May 2025, a new malware known as COLDRIVER—a hacking group with ties to Russia—has undergone multiple developmental iterations. The state-sponsored hacking team has quickly improved and

The most recent DDoS Radar report from Gcore examines attack data from Q3–Q4

Spear-phishing campaigns that target North America, Asia, and Europe have been linked to a threat actor with ties to China. The attacks are intended to deliver GOVERSHELL, a Go-based implant.

In relation to cyberattacks against major retailers Marks & Spencer, Co-op, and Harrods, four people have been taken into custody. Two 19-year-old men, a third 17-year-old, and a 20-year-old

There has been a "significant spike" in brute-force traffic directed at Fortinet SSL VPN devices, according to researchers. According to threat intelligence company GreyNoise, the coordinated

A surge in malicious activity involving the roping of susceptible D-Link routers into two distinct botnets has alerted researchers. Both the Kaiten (also known as Tsunami) variant CAPSAICIN a

The remote access trojan known as ValleyRAT was initially discovered in

Attackers are delivering malware to different regions using AI-enhanced tools. Among the most impacted industries are manufacturing, government, healthcare, technology, and retail. Trend Micr

Three people have been sanctioned by the European Union Council for allegedly engaging in "malicious cyber activities" against Estonia. The three Russian nationals, Yuriy Fedorovich Denisov,

As part of highly targeted cyberattacks, DoNot Team was connected to a new Android malware. Cybersecurity firm Cyfirma discovered the artifacts in question in October and December of

The US government has issued a warning about cyberattacks carried out by pro-Iranian organizations. As part of the Iran-Israel conflict that started on June 13, 2025, it launched airstrikes o

Remcos RAT is a fileless version of the well-known commercial malware Remcos. The attack persuades recipients to open a Microsoft Excel attachment by using lures with a purchase order theme.

Since at least July 2023, financial institutions throughout Africa have been the target of several cyberattacks, which cybersecurity researchers are drawing attention to. The activity is bein

A maximum-severity security vulnerability in the Wing FTP Server has been actively exploited in the wild. The vulnerability, identified as CVE-2025-47812 (CVSS score:

Kaspersky: VBCloud has been seen to be used by Cloud Atlas in its cyberattack campaigns that targeted "several dozen users" in

There are no signs that other federal agencies were affected by the cyberattack that targeted the Treasury Department. China has refuted claims that it violated the U.S. Treasury Department.

Evasive Panda, a threat actor with ties to China, targeted a government agency and a religious group in Taiwan. They were infected by the threat actor using a post-compromise toolset known as

As part of a "highly sophisticated espionage campaign" in mid-September 2025, Chinese state-sponsored threat actors employed artificial intelligence (AI) to plan automated cyberattacks. The G

A European Union diplomatic organization has been the target of a threat actor with ties to China, MirrorFace. The hacking team has never before targeted an organization in the area. It is de

Emergency Response for Computers A new malicious email campaign that targets government agencies, businesses, and military organizations has been described by Team of Ukraine. The campaign ha

It has been determined that the threat cluster is an extension of an ongoing campaign carried out by a threat actor with ties to Belarus. An obfuscated macro is executed when a malicious Exce

According to JPCERT/CC, APT-C-60 delivered the SpyGlace backdoor using a lure with a job application theme. The attack made use of trustworthy services like Bitbucket, Google Drive, and StatC

The Python-based cloud attack tool AndroxGh0st is well-known for specifically targeting Laravel applications. It has previously taken advantage of vulnerabilities in PHPUnit, the Laravel Fram

Numerous Google Chrome extensions have been found to steal private information. Apple consents to pay $95 million to resolve a protracted class action lawsuit in the United States. A proof-of

There have been many disturbing developments in the field of cybersecurity over the past week. Cybercriminals have been actively taking advantage of a serious flaw in Cleo's file transfer sof

Even the most intelligent of us are being duped by AI-powered scams, sneaky malware is hiding in well-known software, and hackers are breaking into the setups of other hackers. On the other h