Iranian threat actor Handala successfully compromised a California water utility’s operational technology systems in a targeted cyberattack that demonstrated sophisticated knowledge of critical infrastructure vulnerabilities. While the breach resulted in limited operational disruption, the incident
A critical zero-day vulnerability in Oracle PeopleSoft has been actively exploited in the wild, affecting hundreds of organizations globally. Attackers leveraged this previously unknown flaw to exfiltrate gigabytes of sensitive data from enterprise systems, including HR records, financial informatio
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical path traversal vulnerability in Ivanti Sentry (CVE-2023-38035, CVSS 9.8) to its Known Exploited Vulnerabilities (KEV) catalog. Federal agencies must patch affected systems by June 14, 2024, following confirmed acti
Russian state-sponsored threat actor Fancy Bear (APT28) has been leveraging compromised Ubiquiti EdgeRouters and cloud infrastructure to conduct sophisticated, low-profile cyberattacks against high-value targets. The group exploits legacy router firmware vulnerabilities and misconfigured devices to
A coordinated international law enforcement operation involving US, French, and Italian authorities successfully dismantled a major deepfake pornography website that victimized thousands of individuals. The site used AI-powered tools to create non-consensual synthetic sexual content, generating sign
The Atomic Arch campaign has compromised over 20 packages in the Arch User Repository (AUR), a popular community-driven repository for Arch Linux users. Attackers hijacked legitimate package maintainer accounts to inject malicious payloads that steal sensitive information, establish persistence, and
Cybercriminals are exploiting NinjaOne, a legitimate Remote Monitoring and Management (RMM) software, to establish persistent access and execute malicious commands while evading traditional security defenses. By leveraging trusted administrative tools, attackers bypass signature-based detection and
Community protests have blocked approximately $130 billion worth of data center construction projects in 2024, creating unprecedented challenges for cloud infrastructure expansion. Local opposition centers on concerns about power grid strain, water consumption, environmental impact, and the digital
A significant supply chain attack has compromised over 400 packages in the Arch User Repository (AUR), injecting malicious code designed to install a rootkit and infostealer on Linux systems. The malware establishes persistence, exfiltrates sensitive data, and provides attackers with backdoor access
Threat actors are increasingly using dark web forums and marketplaces to coordinate supply-chain attacks, with intelligence analysts identifying early warning indicators months before public disclosures. Recent analysis reveals that compromised vendor credentials, stolen code-signing certificates, a