#news


ShinyHunters Exploits Salesforce Experience Cloud for Massive Data Heist

Mar 9, 2026 // 23:12

The threat actor group ShinyHunters (also tracked as UNC6040/UNC6240) has claimed responsibility for a new wave of data theft attacks targeting Salesforce Experience Cloud (formerly Community Cloud) sites using the Aura framework. […]

FBI Warns of Fake City and County Official Phishing Attacks

Mar 9, 2026 // 19:58

The FBI and the Internet Crime Complaint Center (IC3) issued a public service announcementwarning of a sophisticated phishing campaign where cybercriminals impersonate city and county officials. The Scam Mechanism The […]

Crypto Firm Hacked After Developer AirDrops Trojanized File

Mar 9, 2026 // 19:53

The North Korean threat group UNC4899 (also known as TraderTraitor) recently breached a cryptocurrency firm by exploiting a developer’s personal-to-corporate data transfer. The attack resulted in the theft […]

Russian hackers breach officials’ Signal and WhatsApp accounts

Mar 9, 2026 // 17:58

Russian-backed hackers have launched a global cyber campaign targeting Signal and WhatsApp accounts belonging to government officials, military personnel, and journalists. The Netherlands’ intelligence agencies, […]

Sold Chrome Extensions QuickLens & ShotBird Turn Malware: Steal Data via Code Injection

Mar 9, 2026 // 14:24

Two Google Chrome extensions, QuickLens and ShotBird, were recently identified as malicious following a change in ownership. These extensions, which previously held legitimate reputations and “Featured” badges, were […]

Hackers Target Asian Critical Infrastructure Using Web Server Exploits and Mimikatz

Mar 9, 2026 // 12:35

Researchers identified a Chinese threat actor, CL-UNK-1068, conducting a multi-year campaign against critical infrastructure in South, Southeast, and East Asia. These attacks target high-stakes sectors like aviation, […]

How Hackers Use .arpa DNS and IPv6 to Bypass Phishing Security

Mar 8, 2026 // 18:38

Hackers are exploiting the .arpa top-level domain (TLD) and IPv6 infrastructure to bypass traditional phishing defenses. This method weaponizes a trusted part of the internet typically reserved for core […]

Termite Ransomware Group Adopts ClickFix Tactics to Deploy CastleRAT

Mar 7, 2026 // 19:39

Security researchers have linked recent Termite ransomware breaches to an attack chain involving ClickFix social engineering and the CastleRAT backdoor. The activity is attributed to Velvet Tempest (also known as DEV-0504), a notorious […]

Trend Micro Identifies 100+ GitHub Repos Distributing BoryptGrab Stealer

Mar 7, 2026 // 16:40

Trend Micro has identified an active campaign where over 100 GitHub repositories were used to distribute a new information-stealing malware dubbed BoryptGrab.  Campaign Strategy The attackers utilize SEO-optimized GitHub […]

Anthropic’s Claude Opus 4.6 Uncovers 22 Security Flaws in Firefox

Mar 7, 2026 // 16:35

Security research partnership, Anthropic deployed its Claude Opus 4.6 AI model to analyze Mozilla Firefox, discovering 22 security vulnerabilities in just two weeks. Key Findings Defensive Advantage vs. Offensive Risk Anthropic’s research […]

Previous 1 … 371 372 373 374 375 … 388 Next