Almost 200 individuals, including minors, have been arrested across Europe for involvement in violence-as-a-service crimes orchestrated through online platforms. The operation, led by Europol’s GRIMM, aims to dismantle networks recruiting youths for contract killings, with law enforcement taking significant action to prevent violence. #OperationGRIMM #ViolenceAsAService…
Category: Cyber Security News
The FBI warns that criminals are manipulating publicly available photos to create fake proof-of-life images used in virtual kidnapping scams, demanding ransom from victims. People are advised to verify evidence thoroughly and exercise caution with personal information online. #VirtualKidnapping #ProofOfLifeScams…
Storm-0249 is shifting from initial access provisioning to more sophisticated tactics like domain spoofing, DLL side-loading, and fileless PowerShell execution to facilitate ransomware attacks. These methods enable stealthy infiltration, persistence, and exploitation of trust in signed processes, potentially aiding ransomware groups such as LockBit and ALPHV. #Storm0249 #SentinelOne #LockBit #ALPHV #C2…
Multiple threat activity clusters are exploiting CastleLoader malware under a malware-as-a-service model, with GrayBravo being the primary actor. These groups employ diverse tactics, including phishing, malvertising, and infrastructure impersonation, to target sectors like logistics and transport. #GrayBravo #CastleLoader #CastleRAT #MaaS…
South Korean police are investigating Coupang’s recent data breach that compromised the personal information of 33.7 million customers. Authorities are using seized devices and data to trace the breach’s origin, highlighting ongoing concerns over data protection and corporate accountability in South Korea. #Coupang #DataBreach…
The widow of Jamal Khashoggi has filed a lawsuit in France claiming that Saudi Arabia used Pegasus spyware to monitor her devices before her husband’s murder. The complaint links the surveillance to her husband’s killing and highlights ongoing legal actions against the NSO Group for facilitating spyware attacks. #JamalKhashoggi #Pegasus #NSOGroup…
Recent attacks exploiting the React2Shell vulnerability (CVE-2025-55182) appear to be conducted by North Korean threat actors, targeting open-source frameworks like React and Next.js. These exploits involve sophisticated malware such as EtherRAT and are linked to campaigns stealing cryptocurrency and deploying persistent implants. #React2Shell #NorthKorea #EtherRAT #ContagiousInterview…
This webinar focuses on the importance of swift detection and coordinated response during a critical cybersecurity vulnerability exploit. It emphasizes the need for alignment between GRC and security teams, leveraging threat intelligence and communication strategies. #ThreatIntelligence #GRC #SecurityTeams…
Prime Security has raised $20 million in Series A funding to expand its AI-powered security platform that conducts autonomous security reviews during software development. The company’s innovative approach is already trusted by high-profile clients like PayPal and Bumble to help identify and mitigate risks early in the development process. #AgenticSecurityArchitect #BlackHat2025…
Microsoft is addressing an outage affecting users in Europe and the UK from accessing its Copilot AI assistant due to capacity scaling issues. Additional incidents include disruptions in Microsoft Defender for Endpoint and load balancing problems, impacting service availability and functionality. #MicrosoftCopilot #MicrosoftDefender #ServiceOutage
Canadian organizations are being targeted by the STAC6565 threat cluster, which has evolved from cyber espionage to hybrid operations involving ransomware. The threat group, linked to Gold Blade, uses spear-phishing and sophisticated malware like QWCrypt and RedLoader to conduct cyberattacks, primarily focusing on Canadian firms. #GoldBlade #QWCrypt…
Google has introduced new security features in Chrome to protect against indirect prompt injections and data exfiltration in AI-powered browsing. These include layered defenses like the User Alignment Critic and Agent Origin Sets, emphasizing task alignment, origin control, and user transparency. #GoogleChrome #AgenticAI…
This article discusses how Tines enables organizations to operationalize the Shared Signals Framework (SSF) to improve Zero Trust security despite tool limitations. It provides a detailed workflow for integrating Kolide Device Trust with Okta, enhancing real-time device compliance signals. #SSF #ZeroTrust #Kolide #Okta #Tines…
A new Mirai-based Broadside botnet is actively targeting vulnerable TBK Vision DVR devices to coordinate large-scale DDoS attacks. This threat is particularly concerning for the maritime logistics sector, given the potential access to vessel systems. #Mirai #Broadside #TBKVision #DDoS #maritime…
Proofpoint has acquired Hornetsecurity for $1.8 billion to expand its presence in the SMB market and Europe. This deal enhances Proofpoint’s cloud-native security offerings for Microsoft 365 environments, serving over 125,000 customers. #Hornetsecurity #Proofpoint #Microsoft365Security #SMBMarket #CybersecurityAcquisition…