What happened: The U.S. government seized the cloud infrastructure behind “FaceStealer,” an 18-month North Korean social engineering campaign that stole more…
High
⚡ Featured
Critical
Cursor confirms security breach led to malicious Claude Code extension
What happened: Attackers who stole credentials from AI infrastructure provider Fireworks AI used them to breach Cursor’s internal systems and push malicious…
High
SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks
What happened: A previously unknown state-level threat actor tracked as SilentAir has been intercepting phone calls and SMS messages by launching signaling a…
Critical
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper
What happened: Threat actors exploited the PHP2Shell vulnerabilities and a Check Point zero-day to hack Security Gateways, deploy webshells and a backdoor, a…
High
Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure
What happened: Law enforcement agencies in the US, Europe, Australia, and Canada seized 235 servers and 257 domains used to distribute the Gootloader, Castle…
Critical
SCKit abuses ScreenConnect to deploy remote access and target technician sessions
What happened: Threat actors gained unauthorized access to cloud-hosted ConnectWise ScreenConnect instances belonging to MSPs and deployed a malicious worm,…
Critical
Unpatched Check Point Gateways Are Being Wiped exploiting PHP2Shell
What happened: Attackers exploited unpatched Check Point Security Gateways worldwide through the Mobile Access portal, using PHP2Shell techniques, a root pri…
Critical
Trezor confirms crypto-stealing implants in three wallets, releases fix
What happened: Trezor confirmed that three Safe 5 hardware wallets sold through Southeast Asian reseller CryptoBilis contained malicious hardware implants de…
Critical
Extortion Group Claims Theft of Nearly One Billion Expedia Traveler Records
What happened: A newly formed Russian extortion group called n0n claims to have stolen data on nearly one billion Expedia travelers by compromising a third-p…