A critical cryptographic vulnerability in Zcash’s shielded transaction protocol could have allowed attackers to create unlimited counterfeit coins without detection. The flaw, which affected Zcash’s zero-knowledge proof system, was silently patched in 2018 but only disclosed publicly after verificat
Meta has filed a contempt of court motion against NSO Group, alleging the Israeli spyware vendor violated a 2020 injunction by continuing to target WhatsApp users. The complaint claims NSO Group deployed new infrastructure and attack methods despite court orders prohibiting such activities. This leg
Threat actors are increasingly weaponizing popular AI brand names like ChatGPT, Google Bard, and Midjourney in sophisticated social engineering campaigns. By exploiting the massive public interest in artificial intelligence, attackers are distributing malware, stealing credentials, and conducting fr
A newly identified threat actor dubbed “Pink” has emerged with a focused campaign targeting enterprise users to steal cloud storage credentials. The group employs sophisticated phishing techniques, credential harvesting infrastructure, and evasion tactics to compromise corporate accounts across majo
A ransomware attack on an Illinois high school district has forced administrators to end the academic year two weeks early, sending students on an unexpected summer vacation. The cyberattack crippled critical systems including grading platforms, student information databases, and administrative netw
Gogs, the lightweight self-hosted Git service, has released an emergency patch for a critical zero-day vulnerability enabling unauthenticated remote code execution (RCE). The flaw, actively exploited in the wild, affects versions prior to 0.13.0+dev and allows attackers to execute arbitrary commands
Michigan lawmakers are advocating for a complete ban on Chinese-manufactured and Chinese-branded vehicles from entering U.S. borders, citing national security risks related to surveillance capabilities, data collection, and potential remote control features. The proposed measures go beyond existing
The threat actor UNC3753 is conducting a sophisticated campaign targeting U.S. law firms through vishing (voice phishing) attacks combined with legitimate remote monitoring and management (RMM) tools. Attackers impersonate IT support personnel to trick employees into installing remote access softwar
A critical vulnerability in Check Point VPN solutions allows attackers to bypass password authentication in IKEv1 configurations, enabling unauthorized network access. The flaw is currently under active exploitation, affecting thousands of enterprise networks worldwide. Organizations using Check Poi
The FBI has reported that Americans lost approximately $900 million to AI-powered scams in 2025, marking a significant escalation in fraud tactics. Cybercriminals are leveraging generative AI technologies to create convincing deepfakes, impersonate trusted individuals, automate phishing campaigns, a