Socket has identified a new malware loader called XORIndex incorporated into malicious packages published to the npm registry, with over 9000 downloads so far
Darknet giant Abacus Market has gone offline due to a likely exit scam, according to TRM Labs
ESET researchers map out the labyrinthine relationships among the vast hierarchy of AsyncRAT variants
The NCSC’s new Vulnerability Research Institute will help it develop outreach with the external cybersecurity community
Listen to all five episodes now, covering a wide range of cyber security topics.
In June 2025, MaReads, the website for readers and writers of Thai-language fiction and comics suffered a data breach that exposed 74k records. The breach included usernames, email addresses, phone numbers and dates of birth. MaReads is aware of the breach.
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
Le konsern Aneo a été victime d'une attaque informatique via son sous-traitant Profitbase, ce qui pourrait avoir compromis les informations personnelles de 450 employés. Les données concernées incluent des informations sur les salaires et pourraient contenir des noms, adresses et numéros de téléphon...
Grok-4 was jailbroken 48 hours post-launch using Echo Chamber and Crescendo attack methods
A vulnerability in Kigen eUICC cards has exposed billions of IoT devices via flawed eSIM profile management
Shifting security left promises faster, safer software delivery - but for many teams, that promise is undercut by painful scan performance, false positives, and pipeline friction. In our recent webina
CTM360 has identified over 17,000 fake news sites mimicking reputable brands like CNN, BBC and CNBC, spreading investment fraud across 50 countries
The NCSC has warned that there are still a significant number of organizations using Windows 10, which will soon be unsupported with security updates
Researchers from The DFIR Report, in partnership with Proofpoint, have identified a new and resilient variant of the Interlock ransomware group’s remote access trojan (RAT). This new malware, a shift … Read More
Interlock ransomware continues to develop custom tooling and a new RAT has been detected by researchers
Louis Vuitton’s UK business has notified customers of a personal data breach
A look at how PKI configuration in Kubernetes clusters works
Operation Chakra-V scores success as a fraud syndicate is busted following the raid of a scam call center operating in Noida, Uttar Pradesh
Le groupe russe Novabev a été victime d'une cyberattaque sans précédent qui a perturbé temporairement une partie de son infrastructure informatique. Les attaquants ont demandé une rançon, mais l'entreprise a refusé de céder à leurs exigences. Les opérations de l'entreprise, notamment celles de sa fi...
Unauthorized access to Util-Assist's IT system resulted in the exfiltration and compromise of employee data, including personal information. The incident occurred on July 11, 2025, and was discovered on the same date. Util-Assist is offering two years of complimentary credit monitoring and identity...