The Arkana Security extortion gang briefly listed over the weekend what appeared to be newly stolen Ticketmaster data but is instead the data stolen during the 2024 Snowflake data theft attacks. [...]
The Italian government claims that accepting Paragon’s help would have compromised national security and classified information.
A Chroma database operated by Russian AI chatbot startup My Jedai was found exposed online, leaking survey responses…
Behind every security alert is a bigger story. Sometimes it’s a system being tested. Sometimes it’s trust being lost in quiet ways—through delays, odd behavior, or subtle gaps in control. This...
You don’t need a rogue employee to suffer a breach. All it takes is a free trial that someone forgot to cancel. An AI-powered note-taker quietly syncing with your Google Drive. A personal Gmail...
Leatherman, a 22-year FBI veteran, has been heavily involved in cyber investigations as section chief and deputy assistant director over the past three years. The post FBI veteran Brett Leatherman...
Over 84,000 instances of the Roundcube webmail software are vulnerable to CVE-2025-49113, a critical remote code execution (RCE) vulnerability with a publicly available exploit. [...]
SentinelLABS uncovers widespread China-linked cyber espionage targeting over 70 global organizations and cybersecurity firms between July 2024 and…
Vulnerability in PayU CommercePro plugin allows account hijacking on thousands of WordPress sites
A vulnerability allowed researchers to brute-force any Google account's recovery phone number simply by knowing a their profile name and an easily retrieved partial phone number, creating a...
The statement said the Rhode Island-based company identified unauthorized activity on its systems on Thursday, prompting officials to take systems offline. The action “has temporarily impacted the...
UNFI, a grocery distributor for Whole Foods and others, warned of disruptions to customer orders after a cyberattack.
New PathWiper malware targeted Ukrainian critical infrastructure, using legitimate tools for cyber-attacks
Disclaimer This trend report on the deep web and dark web of May 2025 is sectioned into Ransomware, Data Breach, DarkWeb, CyberAttack, and Threat Actor. Please note that there are some parts of...
Unit 221B’s Allison Nixon said crackdowns have effectively shown the group that their actions carry real consequences. The post Internet infamy drives The Com’s crime sprees appeared first on CyberScoop.
Unit 221B’s Allison Nixon said crackdowns have effectively shown the group that their actions carry real consequences. The post Internet infamy drives The Com’s crime sprees appeared first on CyberScoop.
Researchers from Cisco Talos observed a destructive attack on a critical infrastructure entity within Ukraine, involving a previously... The post PathWiper malware targets Ukrainian critical...
U.S. President Donald J. Trump signed a sweeping Executive Order that reorients U.S. cybersecurity strategy by focusing on... The post Trump executive order rewrites US cybersecurity playbook,...
The European Union Agency for Cybersecurity (ENISA) has refreshed its National Cybersecurity Strategies (NCSS) Interactive Map. This dynamic... The post ENISA updates NCSS Interactive Map to track...
DeNexus, vendor of end-to-end cyber risk management for operational technology (OT) environments within Industrial Enterprises and Critical Infrastructure,... The post DeNexus’ DeRISK version...
SSH Communications Security (SSH) announces that it has joined the Beyond the Limits of Post-Quantum Cryptography (BlimPQC) project,... The post SSH Communications joins BlimPQC project to help...
In its latest campaign this spring, DarkGaboon was observed deploying LockBit 3.0 ransomware against victims in Russia, Positive Technologies said in a report last week.
SentinelOne has shared more details on an attempted supply chain attack by Chinese hackers through an IT services and logistics firm that manages hardware logistics for the cybersecurity firm. [...]
A collective of former WordPress developers and contributors backed by the Linux Foundation has launched the FAIR Package Manager, a new and independent distribution system for trusted WordPress...
The bug allowed a researcher to uncover recovery phone numbers of nearly any Google account.
Phone numbers are a goldmine for SIM swappers. A researcher found how to get this precious piece of information through a clever brute-force attack.
Authorities said they busted a ring responsible for illegally extracting citizens' data from Kazakhstan's government networks and distributing it through Telegram and other ways.
The DragonForce Ransomware Cartel has quickly gained notoriety and staked its claim on the threat landscape. Rivals are going dark and accusations of exit scams and government cooperation are...
The three dominant computing platforms have each tried to build features that help you manage passwords without paying for third-party software. Are any of them worth your time and effort?
OpenAI has revealed that it banned a set of ChatGPT accounts that were likely operated by Russian-speaking threat actors and two Chinese nation-state hacking groups to assist with malware...