Cybersecurity researchers have uncovered 19 malicious browser extensions on the Chrome Web Store and Microsoft Edge Add-ons marketplace containing wallet-stealing and crypto-draining code. These extensions masqueraded as legitimate productivity and utility tools while silently exfiltrating cryptocur
The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has confirmed a “major” cybersecurity incident following claims by a ransomware group that they breached the federal agency’s systems. The Department of Justice’s Inspector General is leading the investigation into the breach, which repor
Two alleged members of the TeamPCP cybercriminal group have been arrested and face federal charges following a months-long supply-chain attack campaign that compromised multiple software vendors and affected thousands of downstream organizations. The arrests mark a significant disruption to one of 2
Rapid7’s investigation uncovered a thriving underground economy where cybercriminals trade Social Security Numbers (SSNs) and personal identifiable information (PII) of 476 corporate executives across dark web marketplaces. These “Identity-as-a-Service” platforms commoditize executive credentials, e
A newly discovered backdoor dubbed SLEEPWALKER has been found masquerading as a legitimate ESET antivirus agent on Windows systems. This advanced malware remains dormant until activated by a specially crafted network packet, allowing attackers to maintain persistent access while evading detection. T
The FBI has successfully disrupted the QTFY hacking infrastructure, a sophisticated Chinese state-sponsored operation targeting U.S. critical infrastructure and government networks. The operation involved seizing command-and-control servers and disrupting malicious implants across compromised system
Cisco has disclosed five critical vulnerabilities in its Secure Workload platform, with two receiving the maximum CVSS score of 10.0. These flaws enable unauthenticated remote code execution, privilege escalation, and complete system compromise. Organizations running affected versions must patch imm
A critical remote code execution (RCE) vulnerability in Elementor Pro, one of WordPress’s most popular page builders with over 12 million installations, allows authenticated attackers to execute arbitrary PHP code on vulnerable sites. The flaw, tracked as CVE-2023-32243, affects Elementor Pro versio
The United States Department of Justice has indicted 17 Iranian nationals for orchestrating a sophisticated, multi-year cyber espionage campaign targeting critical infrastructure, government agencies, and private sector organizations across multiple countries. The operation compromised thousands of
Security researchers have identified 15 malicious Firefox browser extensions that exploited Cloudflare Workers to exfiltrate sensitive cryptocurrency wallet data from unsuspecting users. These extensions masqueraded as legitimate productivity and utility tools while covertly harvesting private keys,