Gentlemen ransomware-as-a-service (RaaS) has emerged with sophisticated tactics that leverage multiple Endpoint Detection and Response (EDR) killing tools to disable security software before encryption. The operation employs bring-your-own-vulnerable-driver (BYOVD) attacks and exploits legitimate ut
International law enforcement agencies have successfully disrupted the SocGholish botnet infrastructure operated by the notorious Evil Corp cybercrime group. The operation dismantled command-and-control servers responsible for distributing fake browser updates that infected thousands of systems worl
Operation Escaneo represents a sophisticated evolution in Latin American cybercrime, marking a departure from traditional financially-motivated attacks toward advanced persistent threat tactics. This campaign targets government entities, financial institutions, and critical infrastructure across mul
A sophisticated clipper malware campaign leveraging Tor network infrastructure is actively targeting cryptocurrency users by intercepting and replacing wallet addresses in the clipboard while simultaneously exfiltrating seed phrases. This malware operates stealthily, monitoring clipboard activity fo
F5 Networks has released security patches addressing two critical remote code execution (RCE) vulnerabilities in NGINX Open Source. These flaws, tracked as CVE-2024-31079 and CVE-2024-32760, could allow unauthenticated attackers to execute arbitrary code on vulnerable servers. Organizations running
Nintendo has confirmed that employee and corporate data was compromised in a cyberattack targeting Amedisys, a WebMD subsidiary providing wellness services. The breach, which occurred in early 2025, exposed personal information of Nintendo employees who used the platform’s healthcare services. This
International law enforcement agencies have successfully disrupted the SocGholish malware distribution network as part of Operation Endgame. This takedown represents a significant blow to one of the most prolific malware delivery platforms responsible for deploying ransomware and information stealer
A sophisticated botnet dubbed “Popa” has been traced back to Paragon Solutions, a publicly-traded Israeli surveillance technology firm. The botnet infected thousands of devices across multiple countries, deploying commercial spyware under the guise of legitimate operations. This revelation exposes t
A critical vulnerability in FIFA’s streaming infrastructure could have allowed attackers to remotely hijack World Cup broadcast streams, potentially exposing millions of viewers to malicious content. The flaw, discovered in the content delivery system, enabled unauthorized access to streaming server
TeamPCP, a sophisticated threat actor group, has weaponized the software industry’s obsession with rapid deployment cycles to execute widespread attacks. By exploiting the security gaps inherent in rushed development processes, inadequate testing, and minimal security reviews, the group has compromi