Latest Articles

SafePay Ransomware Targets BBA Law Group: Houston Immigration Law Firm Faces Double-Extortion Threat in Latest Cyber Attack

SafePay Ransomware Targets BBA Law Group: Houston Immigration Law Firm Faces Double-Extortion Threat in Latest Cyber Attack

BBA Law Group, operating as BBA Immigration, has become the latest victim listed by the SafePay ransomware group. The incident was publicly claimed on April 17, 2026, with the domain bbalawgroup.com...

Google Blocked 602 Million Scam Ads With Gemini as AI Turns Ad Safety Into a Real-Time Cyber Fight

Google Blocked 602 Million Scam Ads With Gemini as AI Turns Ad Safety Into a Real-Time Cyber Fight

Google says it is using its Gemini models around the clock to identify and block scam ads in real time, marking one of the clearest examples yet of how large platforms are turning generative AI into...

Zerion Loses $100,000 in DPRK-Linked Social Engineering Attack as UNC1069 Targets Crypto Firms

Zerion Loses $100,000 in DPRK-Linked Social Engineering Attack as UNC1069 Targets Crypto Firms

Zerion has disclosed that roughly $100,000 was stolen from its internal hot wallets after a team member was hit in what the company linked to a sophisticated, AI-enabled social engineering campaign...

CISA Flags Actively Exploited Apache ActiveMQ Jolokia Flaw Found With AI After 13 Years

CISA Flags Actively Exploited Apache ActiveMQ Jolokia Flaw Found With AI After 13 Years

A high-severity Apache ActiveMQ vulnerability that appears to have been sitting quietly in the codebase since roughly 2013 is now at the center of an urgent patching push after CISA confirmed active...

U.S. Nationals Jailed Over DPRK IT Worker Laptop Farm Scheme That Hit 100+ Companies

U.S. Nationals Jailed Over DPRK IT Worker Laptop Farm Scheme That Hit 100+ Companies

Two U.S. nationals have been sentenced to prison for helping North Korean IT workers pose as American remote employees, in a case that shows just how effective the DPRK’s fake-worker playbook has...

Qilin Ransomware Assault on Die Linke: Cyberattack Exposes Vulnerabilities in German Political Cybersecurity

Qilin Ransomware Assault on Die Linke: Cyberattack Exposes Vulnerabilities in German Political Cybersecurity

The German democratic socialist political party Die Linke fell victim to a significant ransomware operation carried out by the Qilin group in late March 2026. The attack led to a temporary outage of...

CoinbaseCartel Targets Astreya: Inside the Latest Data Extortion Attack Shaking the IT Services Sector

CoinbaseCartel Targets Astreya: Inside the Latest Data Extortion Attack Shaking the IT Services Sector

Astreya is a prominent player in the managed IT services and consulting industry, offering comprehensive solutions that help enterprises streamline their technology operations. Headquartered in...

NIST Limits CVE Enrichment Amid Surge in Vulnerability Submissions: What It Means for Cybersecurity

NIST Limits CVE Enrichment Amid Surge in Vulnerability Submissions: What It Means for Cybersecurity

The National Institute of Standards and Technology (NIST) has announced a major shift in how it manages and enriches Common Vulnerabilities and Exposures (CVE) records, citing an unprecedented surge...

n8n Webhook Abuse Since October 2025: How Threat Actors Weaponized Cloud Workflows for Phishing and Malware Delivery

n8n Webhook Abuse Since October 2025: How Threat Actors Weaponized Cloud Workflows for Phishing and Malware Delivery

Since October 2025, cybersecurity researchers have observed a sharp increase in the abuse of cloud-based workflow automation platforms, particularly n8n, by threat actors. These attackers ...

ICS Patch Tuesday: Siemens, Schneider, Rockwell and Others Fix Industrial Flaws as Iran-Linked PLC Threats Escalate

ICS Patch Tuesday: Siemens, Schneider, Rockwell and Others Fix Industrial Flaws as Iran-Linked PLC Threats Escalate

Industrial operators got two warnings at once this week, and together they tell a bigger story than either one alone. On one side, eight major OT and industrial automation vendors published fresh...

Microsoft April 2026 Patch Tuesday Addresses 169 Vulnerabilities Including Actively Exploited SharePoint Zero-Day

Microsoft April 2026 Patch Tuesday Addresses 169 Vulnerabilities Including Actively Exploited SharePoint Zero-Day

Microsoft released security updates in April 2026 that address a total of 169 vulnerabilities across its extensive product portfolio. This large volume includes eight vulnerabilities rated as...

CSA Warns CISOs to Get ‘Mythos-Ready’ as AI Speeds the Path From Flaw Discovery to Exploitation

CSA Warns CISOs to Get ‘Mythos-Ready’ as AI Speeds the Path From Flaw Discovery to Exploitation

The Cloud Security Alliance is urging security leaders to get “Mythos-ready,” warning that the next wave of AI-driven cyber capability could collapse the time between finding a vulnerability and...

Booking.com Breach Exposes Reservation Data, Forces Mandatory PIN Resets

Booking.com Breach Exposes Reservation Data, Forces Mandatory PIN Resets

Global travel platform Booking.com has confirmed a cybersecurity incident involving unauthorized access to reservation data, raising concerns over user privacy and digital safety in the travel...

Basic-Fit Data Breach Exposes 1 Million Members: What Happened, Impact, and Cybersecurity Lessons for Europe

Basic-Fit Data Breach Exposes 1 Million Members: What Happened, Impact, and Cybersecurity Lessons for Europe

European fitness giant Basic-Fit, one of the largest gym operators across the continent, has disclosed a significant cybersecurity incident affecting approximately 1 million members. The breach,...

Rockstar Games Confirms Data Breach After ShinyHunters Threatens Leak Over Alleged Anodot Access

Rockstar Games Confirms Data Breach After ShinyHunters Threatens Leak Over Alleged Anodot Access

Rockstar Games has confirmed a data breach after the cybercrime group ShinyHunters claimed it accessed company data through a compromise tied to third-party provider Anodot. In a statement provided...

CPUID Supply Chain Attack: Trojanized CPU-Z & HWMonitor Spread STX RAT to Global Victims

CPUID Supply Chain Attack: Trojanized CPU-Z & HWMonitor Spread STX RAT to Global Victims

In a significant software supply chain attack, unknown threat actors briefly compromised the official website of CPUID (cpuid[.]com), a trusted provider of hardware monitoring tools. During the...

Adobe Emergency Patch for CVE-2026-34621: Critical Acrobat Reader Zero-Day Exploited in Active Attacks

Adobe Emergency Patch for CVE-2026-34621: Critical Acrobat Reader Zero-Day Exploited in Active Attacks

Adobe has issued urgent security updates for its widely used Acrobat and Acrobat Reader applications to address a critical zero-day vulnerability, tracked as CVE-2026-34621, that is...

ShinyHunters Claims Major Data Breach at Abrigo: Over 1.7 Million Salesforce Records Exposed in Latest FinTech Cyber Incident

ShinyHunters Claims Major Data Breach at Abrigo: Over 1.7 Million Salesforce Records Exposed in Latest FinTech Cyber Incident

Abrigo, Inc. has established itself as a key player in the RegTech industry by offering comprehensive software solutions tailored for financial institutions. The company provides an integrated...

Afya Rekod Cyber Breach: XP95 Ransomware Targets Kenyan Digital Health Records Platform

Afya Rekod Cyber Breach: XP95 Ransomware Targets Kenyan Digital Health Records Platform

Afya Rekod operates as a leading digital health data company based in Nairobi, Kenya. The platform focuses on empowering individuals by giving them full ownership and control over their personal...

Qilin Ransomware Hits A Roettgers Company: A Retail Wake-Up Call for Small Business Cybersecurity

Qilin Ransomware Hits A Roettgers Company: A Retail Wake-Up Call for Small Business Cybersecurity

A Roettgers Company, Inc. operates under the domain arc-rci.com and maintains a significant presence in the Milwaukee metropolitan area of Wisconsin. The company traces its roots to 1917, when...