A massive underground ransomware economy is actively targeting exposed databases worldwide, with over 30,000 instances compromised and held for ransom. Attackers systematically scan for misconfigured databases, exfiltrate sensitive data, delete the original contents, and demand payment for restorati
Multiple npm packages maintained by Red Hat were compromised in a sophisticated supply chain attack dubbed “Miasma.” Attackers gained unauthorized access to Red Hat developer credentials and injected malicious preinstall scripts designed to harvest environment variables, AWS credentials, and other s
Cybercriminals are distributing ValleyRAT malware through counterfeit Microsoft Teams download websites. The malicious campaign targets unsuspecting users searching for legitimate Microsoft Teams installations, delivering a sophisticated remote access trojan (RAT) capable of data exfiltration, syste
Russian state-sponsored threat actors are actively exploiting CVE-2025-8088, a patched vulnerability in WinRAR, despite the availability of security updates. The flaw allows attackers to execute arbitrary code through specially crafted archive files, targeting organizations that have failed to updat
A Ukrainian national has pleaded guilty in U.S. federal court to participating in the notorious Conti ransomware operation, one of the most prolific cybercrime syndicates in recent history. Following his extradition, the defendant admitted to deploying ransomware, exfiltrating sensitive data, and fa
The Gentlemen ransomware leverages Windows SYSTEM-level scheduled tasks to execute encryption operations with the highest privileges available on compromised machines. By creating tasks that run under the NT AUTHORITY\SYSTEM account, this ransomware strain ensures unfettered access to all local driv
Cybercriminals are cloning legitimate cybersecurity tool websites—specifically Ghidra, dnSpy, and SpiderFoot—to distribute malware to security professionals and developers. These sophisticated clones mimic official sites and use typosquatting domains to trick victims into downloading trojanized vers
Elon Musk’s X Corp (formerly Twitter) has intensified efforts to terminate Federal Trade Commission privacy audits mandated by a 2011 consent decree. The company argues the audits are overly burdensome and politically motivated, while the FTC maintains they’re necessary to verify compliance with dat
The Department of Justice has seized two prominent deepfake pornography websites, CFAKE and SOCFAKE, marking the first major enforcement action under the TAKE IT DOWN Act. These platforms enabled users to create non-consensual intimate imagery using AI technology, affecting thousands of victims glob
Linus Torvalds says AI-generated bug reports are flooding Linux security mailing lists, making them “almost entirely unmanageable.” New rules incoming.