Security News

U.S. Charges Yemeni Hacker Behind Black Kingdom Ransomware Targeting 1,500 Systems
2025-05-03 07:06

The U.S. Department of Justice (DoJ) on Thursday announced charges against a 36-year-old Yemeni national for allegedly deploying the Black Kingdom ransomware against global targets, including...

Hacker 'NullBulge' pleads guilty to stealing Disney's Slack data
2025-05-01 23:13

A California man who used the alias "NullBulge" has pleaded guilty to illegally accessing Disney's internal Slack channels and stealing over 1.1 terabytes of internal company data. [...]

Commvault Confirms Hackers Exploited CVE-2025-3928 as Zero-Day in Azure Breach
2025-05-01 08:11

Enterprise data backup platform Commvault has revealed that an unknown nation-state threat actor breached its Microsoft Azure environment by exploiting CVE-2025-3928 but emphasized there is no...

Hackers abuse IPv6 networking feature to hijack software updates
2025-05-01 00:33

A China-aligned APT threat actor named "TheWizards" abuses an IPv6 networking feature to launch adversary-in-the-middle (AitM) attacks that hijack software updates to install Windows malware. [...]

Chinese Hackers Abuse IPv6 SLAAC for AitM Attacks via Spellbinder Lateral Movement Tool
2025-04-30 11:05

A China-aligned advanced persistent threat (APT) group called TheWizards has been linked to a lateral movement tool called Spellbinder that can facilitate adversary-in-the-middle (AitM) attacks....

Hackers ramp up scans for leaked Git tokens and secrets
2025-04-29 19:02

Threat actors are intensifying internet-wide scanning for Git configuration files that can reveal sensitive secrets and authentication tokens used to compromise cloud services and source code...

France ties Russian APT28 hackers to 12 cyberattacks on French orgs
2025-04-29 18:57

Today, the French foreign ministry blamed the APT28 hacking group linked to Russia's military intelligence service (GRU) for targeting or breaching a dozen French entities over the last four years. [...]

Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised
2025-04-28 07:13

Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zero-day attacks to breach servers and gain unauthorized access. The attacks, first observed...

North Korean Hackers Spread Malware via Fake Crypto Firms and Job Interview Lures
2025-04-25 14:05

North Korea-linked threat actors behind the Contagious Interview have set up front companies as a way to distribute malware during the fake hiring process. "In this new campaign, the threat actor...

FBI seeks help to unmask Salt Typhoon hackers behind telecom breaches
2025-04-25 09:34

The FBI has asked the public for information on Chinese Salt Typhoon hackers behind widespread breaches of telecommunications providers in the United States and worldwide. [...]