…Cybersecurity and Infrastructure Security Agency (CISA) is giving federal agencies until Sunday to patch a vulnerability in Cisco Unified Communications Manager Server that is being actively exploited. Identified as CVE-2026-20230…
…RansomHouse is a cybercrime group that launched in 2022 as a data-extortion operation, listing victims on a darkweb portal and leaking or selling data stolen from their corporate networks. Over time…
…communications, and ultimately gained control of accounts at cryptocurrency exchanges. It is estimated that millions of U.S. dollars have been stolen this way and then laundered "via a distributed financial network…
…Cobalt Strike profiles designed to make beacon traffic resemble legitimate web requests A Telegram bot API–based external command and control (C2) mechanism that routed communication through Telegram’s infrastructure rather than…
…Operation KRATOS shut down an illegal streaming network with more than 22 million users worldwide, with law enforcement authorities also making 11 arrests, identifying 102 suspects, and conducting 112 searches. In January…
WordPress malware campaign hides payloads in Steam profiles By Bill Toulas June 1, 2026 01:04 PM Nearly 2,000 WordPress websites were infected with malware that relies on Steam Community profile…
…The intruders then installed a self-hiding backdoor plugin and established a communication channel with a domain impersonating Tidio to send any newly captured data. The plugin also provided full remote access…
…Ivanti's IT asset management solutions are used by over 40,000 clients worldwide and are supported by a network of over 7,000 partners and over 3,000 employees. Test every…
…First, the infrastructure used in the attacks overlaps with a covert VPS network previously associated with multiple China-linked actors. Another clue is the presence of Chinese-language artifacts in earlier phishing…
…The action was coordinated with international partners through the International Computer Hacking and Intellectual Property (ICHIP) Network of U.S. prosecutors, with authorities targeting servers and domains in Peru and Bulgaria, as…