CRPx0 ransomware service says victim list jumped past 48 firms
CRPx0's white-label ransomware service claims 48 victims as ClickFix lures spread to Windows and macOS.
The Latest
Phishing kit rides genuine Docusign mail to swipe Microsoft sessions
The NovaCookies phishing service uses genuine Docusign notifications to steal Microsoft 365 sessions in real time.
Cambodia RAT campaign weaponizes vulnerable driver to gut defenses
Acronis says a Cambodia-targeting campaign loads a vulnerable OPSWAT driver to kill security tools and drop Spark RAT.
Amazon’s Kiro IDE leaks data when poisoned projects get opened
A prompt injection flaw in Amazon's Kiro IDE can push sensitive local data to attackers when a poisoned project is…
Dark Caracal-linked malware fetches backup server from a smart contract
GoCaracal, a malware framework tied to Dark Caracal, stores a fallback C2 address on the Ethereum blockchain.
Patch rush for five WordPress add-ons after takeover-grade flaws
Five critical flaws across WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP open sites to takeover and code execution.
Ubiquiti patches 22 UniFi bugs including three perfect-10 flaws
Ubiquiti shipped fixes for 22 UniFi vulnerabilities, three of them perfect-10 access control flaws.
Hasbro tells staff personal data was taken in cyberattack
Hasbro is warning current and former employees that personal data may have been exposed in a breach tied to its…
White House declares grid emergency over foreign equipment
Executive Order 14420 targets foreign bulk-power equipment over cyber, sabotage and supply-chain risks.
TerminalFix turns fake CAPTCHA pages into network backdoors
Microsoft tracks a ClickFix variant that drops a Python reverse tunnel through fake CAPTCHA overlays.
ZBT router firmware hides twin root access implants
VulnCheck found two factory implants in ZBT router firmware that give unauthenticated attackers root access.
Browser extension ring hides wallet stealers in plain sight
Socket found 19 Chrome and Edge extensions quietly stealing crypto wallet secrets in the Superior campaign.
Android 17 blocks carrier snooping on visited websites
OS-wide Encrypted Client Hello in Android 17 hides visited domains from carriers and Wi-Fi snoops.
Attacker’s sloppy server exposes Philippine nuclear site breach
Hunt.io found an exposed server packed with evidence of ownCloud and WordPress intrusions against Philippine targets.
Spotlight
Funds drained from six chains before Cosmos fix landed
A critical Cosmos EVM balance flaw let attackers drain six blockchains before the patch shipped.
Berlin defies data thieves and vows no ransom payment
Berlin refuses to pay after Rhysida-linked attackers exfiltrate data from the city's state network.
Urgent Next.js updates close AVIF and Windows RCE paths
Vercel patches two critical unauthenticated RCE bugs in the Next.js framework.
Unitree G1 EDU robots fall to two root RCE chains
Two independent flaws give attackers root on the G1 EDU, one over Bluetooth.
Features
ATF confirms major breach after Qilin posts agency on leak site
The US firearms bureau says intruders hit a standalone system tied to its investigations.
cPanel parking flaw lets tenants plant files as root user
A critical cPanel and WHM bug turns authenticated tenants into server root users.
Researchers bypass NVIDIA ECC shields with non-uniform hammering
GPUThor flips bits in GDDR6 memory on four Ampere-class NVIDIA cards despite ECC.
BlueDelta spies lean on webhook service to run HOOKEDGE backdoor
Recorded Future ties a new batch-script backdoor to Russia's BlueDelta espionage group.
UK airport operator MAG confirms 8.7 million customer records stolen
Manchester Airports Group says an extortion crew stole data tied to three UK airports.
ServiceNow ships fixes for three perfect-10 AI platform flaws
Three maximum-severity bugs in the ServiceNow AI Platform can be exploited without authentication.