Cyber Attacks
The decentralized social network faces its first major infrastructure test as malicious traffic floods its servers, causing intermittent outages for millions of users. SEATTLE, WA — Bluesky, the decentralized social media platform often viewed as the primary alternative to X (formerly Twitter), has confirmed that a Distributed Denial of Service (DDoS)
Critical Infrastructure
A newly discovered hybrid threat, ZionSiphon, marks a significant escalation in industrial warfare, moving beyond data theft toward the physical sabotage of desalination and treatment plants. TEL AVIV, ISRAEL — Cybersecurity researchers have identified a sophisticated new malware strain, dubbed ZionSiphon, engineered specifically to infiltrate and sabotage Israeli water infrastructure. Unlike
Cyber Crime
The sentencing of Nathan Latka’s co-conspirator highlights the severe legal repercussions for "credential stuffing" and the lucrative black market for stolen digital identities. NEW YORK, NY — A second individual involved in the massive November 2022 cyberattack against the sports betting giant DraftKings has been sentenced to
Policy & Government
In a significant legislative push, the Senate Commerce, Science, and Transportation Committee has cleared two critical cybersecurity bills aimed at hardening U.S. space infrastructure and accelerating the transition to quantum-resistant encryption. WASHINGTON, D.C. — U.S. lawmakers have taken a major step toward addressing "next-frontier"
Cyber Crime
In a massive coordinated strike, Europol, the FBI, and international partners disrupt the "Booter" service ecosystem, signaling a shift toward targeting the customers of cybercrime platforms. THE HAGUE, NL — Law enforcement agencies from across the globe have concluded a major phase of Operation PowerOFF, a sustained international effort
Artificial Intelligence (AI)
In an unprecedented open letter to business leaders, UK ministers and the NCSC warn that the "defensive advantage" is shrinking as AI models lower the barrier for sophisticated cyberattacks. LONDON, UK — The UK Government has issued a stark warning regarding the escalating cybersecurity risks posed by the rapid
Nation-State Cyber Threats
A newly identified campaign by the threat actor UAC-0247 is targeting healthcare facilities and government agencies, utilizing "urgent" document lures to deploy info-stealing malware. KYIV, UKRAINE — A persistent cyber-espionage campaign attributed to the threat group UAC-0247 has significantly expanded its operations, targeting Ukrainian hospitals,
Supply Chain Attack
A sophisticated supply chain attack exploits the ‘Shell Commands’ plugin for Obsidian, delivering the PhantomPulse Trojan to high-value targets in the finance and cryptocurrency sectors. RESEARCH TRIANGLE PARK, NC — Security researchers have uncovered an elaborate malware campaign targeting users of the popular note-taking app, Obsidian. The campaign, dubbed
Vulnerability Management
The National Institute of Standards and Technology pivots to a prioritization model, focusing enrichment efforts on critical software and known exploited vulnerabilities as the backlog reaches historic levels. GAITHERSBURG, MD — The National Institute of Standards and Technology (NIST) has announced a fundamental shift in how it manages the National Vulnerability
Trending
A high-severity vulnerability in Splunk’s data processing engine could allow authenticated attackers to execute arbitrary code, threatening the integrity of enterprise monitoring environments. SAN FRANCISCO, CA — Splunk has released urgent security updates for its Enterprise and Cloud Platform products to address a high-severity Remote Code Execution (RCE)
Identity Theft
A global surge in fraudulent Apple alerts is weaponizing the fear of losing personal photos to steal credit card details and Apple ID credentials. CUPERTINO, CA — Apple users worldwide are being urged to exercise extreme caution as a pervasive and highly effective phishing campaign resurfaces. The scam, which utilizes "
Vulnerabilities
Security updates address four severe vulnerabilities that could allow unauthenticated attackers to execute remote code or impersonate high-level administrators within corporate environments. SAN JOSE, CA — Cisco Systems has released critical security patches to address a quartet of high-impact vulnerabilities affecting its Identity Services Engine (ISE) and Webex collaboration