Trending
A novel Phishing-as-a-Service platform is leveraging Microsoft's device code flow to bypass multi-factor authentication and automate business email compromise at scale. REDMOND — Security researchers have identified a surge in high-velocity phishing campaigns powered by a new service called "EvilTokens." The platform specifically targets Microsoft 365 environments
Trending
The launch of "Mythos" and Project Glasswing raises legitimate questions about autonomous defense — and the risks that come with it. SAN FRANCISCO — Anthropic has unveiled "Mythos," its most capable AI model to date, alongside Project Glasswing — a dedicated cybersecurity initiative designed to use Mythos to identify
Cyber Attacks
WINONA, MN — Governor Tim Walz has signed an executive order authorizing the Minnesota National Guard to provide emergency cyber assistance to Winona County as the municipality struggles to recover from a persistent ransomware attack. The activation marks a significant escalation in the state’s tactical response to a localized breach,
Data Breaches
LOS ANGELES — The City of Los Angeles is investigating a sprawling data breach that has resulted in the online leak of thousands of sensitive documents belonging to the Los Angeles Police Department (LAPD) and the City Attorney’s office. According to reports from TechCrunch and The Record, the breach appears
China
Cybersecurity investigators and international intelligence agencies are scrambling to verify a massive data breach involving one of China’s most prominent supercomputing centers. A threat actor, operating under an alias on dark web forums, claims to have exfiltrated roughly 10 petabytes (PB) of highly sensitive data from a government-linked high-performance
Threat Intelligence
U.S. intelligence and cybersecurity agencies have issued a joint advisory warning of a significant escalation in Iranian-linked cyber operations targeting the nation’s critical infrastructure. The coordinated alert from CISA, the FBI, and the NSA highlights a strategic shift from "episodic" disruptions to a "sustained and
Zero Day Exploit
Microsoft’s threat intelligence team has issued a high-priority warning regarding a sophisticated cyber-criminal actor, designated as Storm-1175, which is utilizing zero-day vulnerabilities to deploy the Medusa ransomware. The group, identified as an affiliate of the broader Medusa-as-a-Service operation, has demonstrated an unprecedented speed in its attack lifecycle, often moving
Chinese Threat Actors
Security researchers have identified a significant resurgence in cyber-espionage activity by the China-aligned threat actor TA416. The group, also known as Mustang Panda or RedDelta, has expanded its targeting to include European government entities, diplomatic missions, and organizations in the Middle East, signaling a strategic shift aligned with evolving global
Policy & Government
The Trump administration has unveiled its Fiscal Year 2027 budget proposal, calling for a significant $707 million reduction in funding for the Cybersecurity and Infrastructure Security Agency (CISA). The proposal, which represents a nearly 25% cut to the agency's current operating budget, has sparked a debate over the
Cyber Attacks
An international coalition of security agencies, led by the UK’s National Cyber Security Centre (NCSC) and the FBI, has disrupted a major cyber-espionage operation targeting thousands of home and small-office routers. The campaign, attributed to the Russian military intelligence unit known as APT28 (also documented as Fancy Bear or
Trending
The Federal Bureau of Investigation’s Internet Crime Complaint Center (IC3) has released its 2025 Annual Report, revealing a staggering $20.8 billion in reported losses to cybercrime — the highest figure ever recorded. The data shows a sharp escalation in both the frequency and financial impact of digital attacks, with
Data Breaches
PayPal has issued a series of security alerts following a wave of "unconventional" cyberattacks designed to compromise user accounts and exfiltrate sensitive financial data. The payments giant has confirmed that a significant credential stuffing campaign, alongside sophisticated phishing operations, has resulted in the exposure of personal information for