Latest Articles

Cyber Retaliation Escalates: Iranian Hacktivists Target Critical Infrastructure Following February 28 Military Strikes

Cyber Retaliation Escalates: Iranian Hacktivists Target Critical Infrastructure Following February 28 Military Strikes

Researchers from Sophos X-Ops CTU have identified a significant increase in Iranian-aligned hacktivist activity following coordinated U.S. and Israeli military strikes on February 28. The spike in...

Facebook Experiences Worldwide Outage, Users See “Account Is Currently Unavailable” Message

Facebook Experiences Worldwide Outage, Users See “Account Is Currently Unavailable” Message

Facebook Worldwide Outage Disrupts Access body { font-family: Arial, sans-serif; line-height: 1.6; margin: 40px; } h1 { color: #111; } h2 { color: #2c3e50; margin-top: 30px; } ul { margin-left:...

Android’s March Patch Urgent After Google Confirms Active Zero-Day Exploitation

Android’s March Patch Urgent After Google Confirms Active Zero-Day Exploitation

Google has released its March Android security update, patching 129 vulnerabilities across the platform. One flaw, however, stands apart from the rest. Google confirmed that CVE-2026-21385 is already...

Microsoft Flags OAuth Redirect Abuse in Phishing Campaigns Targeting Government Networks

Microsoft Flags OAuth Redirect Abuse in Phishing Campaigns Targeting Government Networks

Microsoft has issued a warning about a series of sophisticated phishing campaigns that exploit legitimate OAuth redirect mechanisms to deliver malware to government and public-sector targets. The...

Drone Strikes Hit AWS Facilities in UAE and Bahrain, Triggering Widespread Cloud Disruption

Drone Strikes Hit AWS Facilities in UAE and Bahrain, Triggering Widespread Cloud Disruption

Amazon has confirmed that drone strikes damaged three Amazon Web Services data centers in the United Arab Emirates and one in Bahrain, leading to a significant regional outage affecting dozens of...

Russia-Linked APT28 Weaponizes MSHTML Zero-Day CVE-2026-21513 in Sophisticated Pre-Patch Cyber Attacks

Russia-Linked APT28 Weaponizes MSHTML Zero-Day CVE-2026-21513 in Sophisticated Pre-Patch Cyber Attacks

In the rapidly evolving world of cyber espionage, state-sponsored actors continue to demonstrate remarkable speed and precision in identifying and exploiting vulnerabilities before vendors can...

 From Chat App to Dark Web: How Telegram Became the New Hub for Cybercrime

From Chat App to Dark Web: How Telegram Became the New Hub for Cybercrime

In just over a decade, Telegram has transformed from a niche privacy-focused messaging application into one of the most powerful platforms for cybercriminal activity worldwide. What began as a tool...

Nick Andersen Appointed Acting Director of CISA

Nick Andersen Appointed Acting Director of CISA

Nick Andersen Appointed Acting Director of CISA body { font-family: Arial, sans-serif; line-height: 1.6; margin: 40px; } h1 { color: #111; } h2 { color: #2c3e50; margin-top: 30px; } ul, ol {...

North Korean APT37 Targets Air-Gapped Systems in Advanced “Ruby Jumper” Campaign

North Korean APT37 Targets Air-Gapped Systems in Advanced “Ruby Jumper” Campaign

APT37 Targets Air-Gapped Systems in Ruby Jumper Campaign body { font-family: Arial, sans-serif; line-height: 1.6; margin: 40px; } h1 { color: #111; } h2 { color: #2c3e50; margin-top: 30px; } ul, ol...

StegaBin Resurfaces: North Korean Actors Push 26 Malicious npm Packages with Pastebin-Based C2

StegaBin Resurfaces: North Korean Actors Push 26 Malicious npm Packages with Pastebin-Based C2

A fresh wave of malicious npm packages has been attributed to the North Korean threat cluster known as Famous Chollima, marking a new phase in the long-running Contagious Interview campaign....

Inside the Notepad++ Supply Chain Breach: How the Chrysalis Backdoor Slipped Through the Updater

Inside the Notepad++ Supply Chain Breach: How the Chrysalis Backdoor Slipped Through the Updater

Between June and December 2025, attackers quietly compromised the update infrastructure of the widely used open-source text editor Notepad++. What began as a hosting-level breach evolved into a...

Trojanized FileZilla Download Uses DLL Hijacking and DoH to Steal FTP Credentials

Trojanized FileZilla Download Uses DLL Hijacking and DoH to Steal FTP Credentials

Image credit: Malwarebytes A malicious copy of the popular open-source FTP client FileZilla is circulating online, weaponized through a simple but effective DLL sideloading technique....

Escalation in Cyberspace: US and Israel Execute Massive Cyber Offensive Against Iran

Escalation in Cyberspace: US and Israel Execute Massive Cyber Offensive Against Iran

In the opening days of March 2026 the long-simmering shadow war between the United States Israel and Iran exploded into open view. What began with large-scale airstrikes on Iranian nuclear military...

Hackers Weaponize Claude Code in Massive Cyberattack on Mexican Government Systems

Hackers Weaponize Claude Code in Massive Cyberattack on Mexican Government Systems

body { font-family: Arial, sans-serif; line-height: 1.6; margin: 40px; } h1 { color: #1a1a1a; } h2 { color: #2c3e50; margin-top: 30px; } ul { margin-left: 20px; } .section { margin-bottom: 25px;...

ClawJacked Attack Exploits OpenClaw AI Agent to Enable Local Takeover and Data Theft

ClawJacked Attack Exploits OpenClaw AI Agent to Enable Local Takeover and Data Theft

A high-severity vulnerability dubbed “ClawJacked” was discovered in the OpenClaw AI agent platform, allowing malicious websites to hijack locally running instances of the tool. The flaw enabled...

AI as an Attack Tool: Claude Code Abused in Sweeping Breach of Mexican Government Systems

AI as an Attack Tool: Claude Code Abused in Sweeping Breach of Mexican Government Systems

A sophisticated cyberattack targeting Mexican government infrastructure has revealed how artificial intelligence tools can be weaponized to accelerate exploitation, automate data theft, and scale...

Top Vulnerability Scanners for Continuous Security in 2026

Top Vulnerability Scanners for Continuous Security in 2026

Modern enterprises no longer operate in static environments. Cloud workloads spin up and down in minutes, remote endpoints connect from unpredictable locations, and third-party integrations expand...

Ransomware Assault: The Cyber Siege on Mississippi's Premier Medical Hub

Ransomware Assault: The Cyber Siege on Mississippi's Premier Medical Hub

In the early hours of February 19, 2026, a sophisticated ransomware attack struck the heart of Mississippi's healthcare system. The University of Mississippi Medical Center, known as UMMC, found...

Trojanized Gaming Utilities Used to Deploy Stealthy RAT in Multi-Stage PowerShell Campaign

Trojanized Gaming Utilities Used to Deploy Stealthy RAT in Multi-Stage PowerShell Campaign

Threat actors are leveraging trojanized gaming utilities to distribute a stealthy remote access trojan in a campaign that blends social engineering with advanced defense evasion techniques. The...

Retail Giant Canadian Tire Confirms Massive Breach Affecting Over 38 Million Online Accounts

Retail Giant Canadian Tire Confirms Massive Breach Affecting Over 38 Million Online Accounts

Canadian retailer Canadian Tire has confirmed a significant data breach impacting more than 38 million customer e-commerce accounts, marking one of the largest retail cybersecurity incidents in...