The dark web’s cybercrime marketplace has evolved into a sophisticated economy where stolen identities sell for as little as 95 cents, malware-as-a-service operates on subscription models, and scam kits are available for hire. This underground ecosystem generates billions annually, fueling identity
Law enforcement and cybersecurity partners have successfully disrupted the SocGholish malware distribution network, severing a critical access pathway used by the notorious Evil Corp cybercrime syndicate. The takedown targeted the Traffic Distribution System (TDS) infrastructure responsible for deli
A massive exploitation campaign dubbed “FortiBleed” has compromised over 430,000 Fortinet FortiGate firewalls worldwide, turning enterprise security infrastructure into credential-harvesting machines. Attackers are leveraging a critical vulnerability to deploy persistent backdoors that intercept and
Microsoft has identified CryptoBandits, a new USB-propagating malware strain that hijacks cryptocurrency transactions by replacing wallet addresses in the clipboard. The malware uses Tor for command-and-control communications, spreads via infected USB drives, and has already compromised systems acro
A sophisticated phishing campaign dubbed “CodeStorm” is leveraging compromised Microsoft 365 accounts to launch large-scale credential harvesting attacks. Attackers are exploiting trusted email relationships and M365 infrastructure to bypass security controls, targeting organizations across multiple
Healthcare technology company Xsolis disclosed a data breach affecting approximately 1.4 million individuals after attackers gained unauthorized access through a successful phishing campaign. The breach compromised sensitive patient information including names, dates of birth, Social Security number
A critical vulnerability (CVE-2026-42530) has been discovered in NGINX’s HTTP/3 implementation that allows unauthenticated attackers to trigger denial-of-service conditions and potentially achieve remote code execution. The flaw affects NGINX versions 1.25.0 through 1.26.3 with HTTP/3 enabled, stemm
ShapedPlugin’s premium WordPress plugins were compromised through a supply chain attack, with malicious actors injecting credential-stealing backdoors into legitimate plugin updates. The attack affected multiple Pro versions of popular plugins, silently exfiltrating WordPress administrator credentia
CVE-2024-40766 has been patched by vendors, but organizations remain vulnerable due to insecure default configurations and legacy settings that persist post-patch. This vulnerability highlights a critical gap in security hygiene: patches address code flaws, but misconfigured systems continue exposin
A critical remote code execution (RCE) vulnerability in Google Cloud’s production infrastructure (CVE-2026-2031) has been patched following responsible disclosure by a security researcher who earned $148,337 through Google’s Vulnerability Reward Program. The flaw allowed authenticated attackers to e