Sneaky2FA has enhanced its phishing toolkit with browser-in-the-browser (BitB) capabilities, making attacks more convincing for stealing Microsoft credentials. This evolution in cyberattack techniques increases the effectiveness of phishing attacks on Microsoft 365 accounts, thanks to sophisticated deception tactics. #Sneaky2FA #BitB
Category: Cyber Security News
A recent campaign has compromised over 50,000 ASUS routers worldwide, primarily targeting outdated models with known security flaws. The operation, possibly linked to Chinese hacking groups, exploits vulnerabilities to create a vast botnet network. #ASUSWRT #OperationWrtHug…
Media Land, a Russian bulletproof hosting provider, was sanctioned by the U.S. and allies for supporting ransomware gangs like Lockbit and BlackSuit, as well as enabling cybercriminal activities including DDoS attacks on U.S. infrastructure. The sanctions also targeted sister companies and front organizations, highlighting international efforts to combat illicit hosting services…
An international law enforcement operation targeted illegal streaming sites by tracking cryptocurrency transactions, revealing the financial networks behind digital piracy. The effort successfully traced around $55 million in cryptocurrency, leading to actions by major platforms like Coinbase and Binance. #CryptocurrencyTracking #DigitalPiracy #BlockchainIntelligence…
A bipartisan bill, the SEC Data Protection Act of 2025, aims to enhance cybersecurity measures at the Securities and Exchange Commission to safeguard sensitive financial information. The legislation emphasizes modern cybersecurity protocols, internal accountability, and adherence to best practices like those from NIST. #SECDataProtection #Cyberthreats…
Secure.com has launched AI-powered Digital Security Teammates (DSTs) after raising $4.5 million in pre-seed funding. These agents seamlessly integrate into security stacks to assist teams in incident management, reducing burnout and increasing efficiency. #Securecom #DSTs #AIsecurity #cyberthreats #fintech…
Amazonās threat intelligence describes how Iranian threat groups have used cyber operations to enable physical attacks, illustrating a rising trend in hybrid warfare. These cases show the increasing integration of cyber reconnaissance with kinetic military actions, emphasizing the need for enhanced defense strategies. #ImperialKitten #MuddyWater…
U.S., Australian, and UK authorities have imposed sanctions on Media Land, a Russian BPH provider, for supporting cybercriminal activities including ransomware and DDoS attacks. These actions demonstrate a coordinated effort to combat cybercrime by disrupting infrastructure used by notorious ransomware groups like LockBit and Black Basta. #MediaLand #BPH #LockBit #BlackBasta…
The United States, UK, and Australia have imposed sanctions on Russian bulletproof hosting providers supporting cybercriminal groups, including ransomware gangs and DDoS attackers. These measures target entities like Media Land, associated with notorious gangs such as LockBit, Black Basta, and Evil Corp, to disrupt their malicious infrastructure. #MediaLand #LockBit #BlackBasta #EvilCorp
A critical vulnerability in the W3 Total Cache (W3TC) WordPress plugin allows unauthenticated users to execute PHP commands on affected sites. Updating to version 2.8.13 or deactivating the plugin is essential to mitigate the risk of full website takeover. #W3TotalCache #CVE-2025-9501
This report details a new cyber campaign targeting Brazilian users with a WhatsApp-based distribution of the Eternidade Stealer banking trojan. The campaign employs social engineering, WhatsApp hijacking, and Delphi-based malware, with some global indicators of activity. #EternidadeStealer #WaterSaci #WhatsAppHijacking #DelphiMalware…
A critical security flaw in 7-Zip, CVE-2025-11001, is actively exploited in the wild, allowing remote code execution through crafted ZIP files. Users should update to version 25.00 immediately to mitigate the risk. #7Zip #CVE202511001…
Russian insurer VSK is facing ongoing disruptions after a cyberattack, likely ransomware, compromised its systems and caused service outages for millions of customers. The incident is part of a rise in cyber threats targeting Russian companies, with potential links to geopolitical tensions. #VSK #Ransomware #RussianCyberattacks…
The European Commission proposes to loosen data protection and AI regulations in the EU under the Digital Omnibus, aiming to boost innovation and reduce red tape. Critics argue that these changes will reduce privacy protections and favor big tech at the expense of smaller companies and consumers. #GDPR #AIAct #EuropeanUnion #DataPrivacyProtection…
Two Canadian provincial governments released reports blaming school systems for the PowerSchool data leak due to inadequate security measures. The breach exposed data of millions of students and teachers, highlighting the importance of robust privacy protocols and oversight. #PowerSchool #DataLeak #Ontario #Alberta…