Elon Musk revealed that US military suicide drones have been operating on Starlink satellite internet connections, directly violating SpaceX’s terms of service and usage policies. The unauthorized use of commercial satellite infrastructure for offensive military operations raises critical questions
A massive underground ransomware economy is actively targeting exposed databases worldwide, with over 30,000 instances compromised and held for ransom. Attackers systematically scan for misconfigured databases, exfiltrate sensitive data, delete the original contents, and demand payment for restorati
Iranian state-sponsored threat actor MuddyWater has launched a sophisticated espionage campaign targeting government and telecom sectors across nine countries using DLL side-loading techniques. The operation leverages legitimate applications to execute malicious payloads while evading detection, dem
Researchers have demonstrated that standard Wi-Fi routers can be weaponized to identify and track individuals through walls with alarming accuracy. By analyzing how wireless signals interact with the human body, attackers can create detailed profiles of people’s unique physical characteristics witho
Threat actors are distributing the Deno-based remote access trojan (RAT) through fake software repositories on GitHub and SourceForge. These malicious packages masquerade as legitimate development tools and productivity software, targeting developers and tech-savvy users. The Deno RAT provides attac
GitHub experienced a major global outage that brought critical CI/CD pipelines to a halt across thousands of organizations. The incident affected GitHub Actions, GitHub Pages, API services, and repository access, leaving development teams unable to deploy code, run automated tests, or access version
MFA prompt bombing, also known as MFA fatigue attacks, exploits human psychology rather than technical vulnerabilities. Attackers who have already stolen credentials flood victims with dozens or hundreds of push notification authentication requests until users accidentally approve one or simply acce
India’s Computer Emergency Response Team (CERT-In) has issued a directive requiring organizations to patch critical vulnerabilities in internet-facing systems within 12 hours of notification. This aggressive timeline responds to the accelerating threat landscape where AI-assisted attacks are weaponi
The Oncology Institute of Hope and Innovation (TOI), a California-based cancer care provider, disclosed a significant data breach affecting patient information following a cyberattack on a third-party vendor. The incident compromised sensitive patient data including names, Social Security numbers, m
A critical zero-day vulnerability in Hitachi’s KnowledgeDeliver Learning Management System (LMS) is being actively exploited to deploy Godzilla webshells and Cobalt Strike beacons. Attackers are leveraging an authentication bypass flaw to gain unauthorized access, establish persistent backdoors, and