The CyberSignal delivers breaking cybersecurity news, data breach reports, vulnerability alerts, and threat intelligence for CISOs, IT leaders, and security professionals.
Crypto-Crime & Laundering
Blockchain security researchers and protocol developers have identified the North Korean state-sponsored Lazarus Group as the primary suspect in the staggering $290 million theft from Kelp DAO. SEOUL, KOR — The decentralized finance (DeFi) ecosystem is reeling after a sophisticated exploit targeted Kelp DAO, a leading liquid restaking protocol. Early on
Policy & Government
As the fallout from systemic attacks on healthcare providers continues to mount, federal lawmakers and former intelligence officials are pushing for a radical reclassification of ransomware: treating digital extortion as a capital crime. WASHINGTON, D.C. — The legal immunity traditionally enjoyed by cybercriminals — often shielded by international borders and the
Data Breaches
The French National Agency for Secure Documents (ANTS) has confirmed a significant security incident targeting its central portal, as threat actors move to monetize a database allegedly containing millions of sensitive user records. PARIS, FRA — The French government is grappling with a severe compromise of its digital identity infrastructure. The
Threat Intelligence
In a stark assessment of the global threat landscape, the UK’s lead cyber official warns that a coalition of nation-state adversaries — supercharged by artificial intelligence — now poses an unprecedented risk to critical national infrastructure. LONDON, UK — The United Kingdom is facing a "perfect storm" of cybersecurity challenges
Token Theft
Researchers have uncovered a sophisticated evolution of the NGate malware family, which now weaponizes legitimate payment applications to intercept card data and relay physical transactions across the internet in real-time. SÃO PAULO, BRZ — A high-impact cyber-espionage and financial theft campaign is currently sweeping through Brazil, utilizing a new variant of
Threat Intelligence
In a rare turn of events, security researchers have observed a surge in failed exploitation attempts targeting a high-severity vulnerability in discontinued TP-Link routers, highlighting the technical hurdles of weaponizing code for aging hardware. SHENZHEN, CHINA — A wave of automated attacks targeting the TP-Link Archer AX21 (v1.2) has largely
Vishing
Attackers are exploiting a loophole in Apple’s automated account recovery and security notification systems to bombard users with legitimate system alerts, driving them toward fraudulent support centers. CUPERTINO, CA — Security researchers from Malwarebytes and reports from the Apple user community have identified a sophisticated campaign that uses Apple’s
Mobile Security
A sophisticated "FakeWallet" campaign has bypassed Apple’s stringent review process, leading to the theft of millions in digital assets through fraudulent Ledger and Trezor clones. CUPERTINO, CA — Apple’s reputation for hosting a "curated and secure" ecosystem is facing renewed scrutiny following the discovery of
Vulnerabilities
Researchers at Pillar Security successfully bypassed Antigravity’s most restrictive "Secure Mode" using a prompt injection that transformed a simple file-search tool into an arbitrary command execution engine. MOUNTAIN VIEW, CA — Google has issued a critical patch for Antigravity, its flagship agentic Integrated Development Environment (IDE), after security
Fraud
In a staggering breach of professional ethics, a third cybersecurity "expert" has admitted to operating as an inside man for one of the world's most prolific ransomware cartels, using his position to facilitate extortions instead of preventing them. TAMPA, FL — The U.S. Department of Justice
Third Party Risk
An investigation into the "connective tissue" of the industrial internet reveals that thousands of legacy Serial-to-IP converters are currently vulnerable to unauthenticated remote code execution. SAN JOSE, CA — Forescout’s research division, Vedere Labs, has released a comprehensive security advisory titled "BRIDGE:BREAK," detailing 22 newly
Policy & Government
Modeled after the U.S. CMMC framework, the new Canadian Program for Cyber Security Certification (CPCSC) introduces a mandatory verification tier to harden the nation’s defense industrial base against state-sponsored intrusion. OTTAWA, ON — The Government of Canada has officially launched the first phase of the Canadian Program for Cyber