3+ mon, 1+ day ago   (525+ words) Cybersecurity firm Group-IB has revealed that a recent Interpol-led cybercrime law enforcement operation has led to the takedown of an established phishing-as-a-service (PhaaS) platform and the arrest of its main operator developer. The crackdown, dubbed Operation Ramz, ran from October…...

9+ mon, 2+ week ago   (406+ words) Gainsight later found that the number “has been expanded to a larger list.” The firm has not confirmed how many customers this list now contains. However, Gainsight told Infosecurity that the company “promptly notified the handful of affected customers,” suggesting…...

6+ mon, 2+ day ago   (333+ words) Salesforce has urged Experience Cloud customers to audit their website configurations after reports that a notorious threat group has already stolen data from hundreds of companies. The SaaS giant said that it had been tracking an increase in threat actor…...

10+ mon, 1+ week ago   (616+ words) Researchers at Arctic Wolf Labs have discovered a cyber espionage campaign targeting European diplomatic entities in Hungary, Belgium and additional European nations. The activity was observed in September and October 2025 and attributed to UNC6384, a cluster likely linked to Chinese-affiliated group…...

3+ mon, 3+ day ago   (328+ words) Check Point has urged customers to patch a critical zero-day vulnerability in its Remote Access VPN and Mobile Access solutions that is being actively exploited. CVE-2026-50751 is an authentication bypass flaw that affects deployments configured to use the deprecated IKEv1 key…...

2+ mon, 4+ day ago   (348+ words) A new Android spyware strain has been observed being rented out to criminals through Telegram, giving even low-skilled attackers the tools to hijack phones and steal banking credentials, researchers have found. Zimperium's zLabs named the malware RedWing and described it…...

3+ mon, 1+ week ago   (448+ words) A Russian state-linked worm has been observed hiding its components inside a little-used Windows file feature, allowing it to spread across Ukrainian networks while leaving almost no trace on infected machines. According to new analysis from Sekoia, the worm is…...

5+ mon, 1+ week ago   (320+ words) A.NET-based infostealer sold as part of a commercial cybercrime toolkit that bundles a stealer, crypter and remote access tool (RAT) under subscription tiers has been detailed further by cybersecurity researchers. The malware, known as Phantom Stealer, collects browser credentials, cookies,…...

11+ mon, 2+ week ago   (513+ words) Chinese cyber threat actors are suspected of deploying a recently identified backdoor to get a foothold into the systems of US organizations across various sectors. According to a Google Threat Intelligence Group (GTIG) report, published on September 24, threat actors have…...

11+ mon, 6+ day ago   (535+ words) A new data leak site hosted on the TOR network has been launched by the “Trinity of Chaos” – a ransomware collective allegedly tied to the Lapsus$, Scattered Spider and ShinyHunters groups. The site lists 39 major global companies, marking a significant…...