The RondoDox botnet is actively exploiting CVE-2018-5999, a six-year-old critical vulnerability in ASUS routers, to compromise devices and expand its network. This authentication bypass flaw allows attackers to execute arbitrary commands remotely, converting vulnerable routers into botnet nodes for
Europol and international partners dismantled First VPN, a service widely used by ransomware gangs, seizing 33 servers and arresting its alleged administrator. The operation, codenamed Saffron, also exposed thousands of users whose data is now in the hands of investigators across 16 countries.
Dutch authorities have seized approximately 800 servers from a hosting provider that allegedly facilitated widespread cybercriminal activities. The operation targeted a bulletproof hosting service that enabled attackers to launch DDoS attacks, distribute malware, and conduct phishing campaigns while
A newly identified cybercrime group dubbed “Pink” is conducting sophisticated vishing (voice phishing) campaigns targeting Microsoft 365 users to steal sensitive cloud data. The group employs social engineering tactics through phone calls, impersonating IT support staff to trick victims into grantin
OpenAI confirms employee devices compromised in TanStack supply chain attack. Code-signing certificates rotated after breach affected hundreds of npm and PyPI packages.
Microsoft accused of secretly patching Azure vulnerability after rejecting researcher’s report—no CVE issued. Company denies changes despite documented fix.
Mistic, a newly discovered backdoor, is being deployed in ransomware intrusion chains as a persistent access mechanism. This sophisticated malware combines advanced evasion techniques, encrypted command-and-control (C2) communications, and modular capabilities to maintain long-term access to comprom
The National Science Foundation (NSF) has decommissioned Alaska’s critical ocean monitoring network, leaving coastal communities, researchers, and emergency responders without real-time data on ocean conditions. This shutdown eliminates essential infrastructure that tracked wave heights, water tempe
The Department of Homeland Security (DHS) has confirmed a security breach of the Homeland Security Information Network (HSIN), a critical platform used by federal, state, local, and private sector entities to share sensitive information. The breach potentially exposed communications, operational dat
Canvas LMS hacked: cybercriminals claim they deleted stolen student data. Yeah right. Nobody’s buying it except maybe the executives.