Latest

Hackers have stolen personal data belonging to more than 17.6 million people after breaching the systems of the U.S.-based financial technology company Prosper. The compromised information includes names, home addresses, dates of birth, email addresses, Social Security numbers, identification documents, and employment-related details. Prosper’s Role in

Researchers have identified 131 extensions in the official Chrome Web Store that automate actions on WhatsApp Web and were used to send mass spam to Brazilian users. The cluster shares a single codebase, identical design patterns, and common infrastructure, and it currently accounts for roughly 20,905 active users, according

Researchers from Seqrite Labs have uncovered a new malicious campaign believed to target the Russian automotive industry and e-commerce platforms. The attackers are deploying a previously unknown .NET-based backdoor named CAPI to conduct data theft and system reconnaissance. Infection Vector: Phishing with a Tax-Themed Decoy According to the researchers, the

Kaspersky Lab researchers have uncovered a malicious package on the npm registry named https-proxy-utils, disguised as a legitimate proxy management tool. The package secretly installed the AdaptixC2 framework — an open-source post-exploitation toolkit similar to Cobalt Strike — onto compromised developer devices. The malicious package has since been removed from npm. AdaptixC2:

European law enforcement has shut down one of the world’s largest SIM farm operations, responsible for fueling a massive global market in fake online accounts. The takedown—codenamed Operation SIMCARTEL—dismantled a criminal network managing over 1,200 SIM boxes loaded with 40,000 active SIM cards used in

China’s Ministry of State Security (MSS) has accused the U.S. National Security Agency (NSA) of conducting cyberattacks against the country’s National Time Service Center (NTSC), a critical institution responsible for maintaining Beijing Time and coordinating national synchronization systems. In a statement posted to its official WeChat account,

Trend Micro researchers have discovered a new malicious campaign targeting unpatched Cisco devices, using a recently fixed zero-day vulnerability to deploy rootkits that hide deep within network firmware. The flaw, CVE-2025-20352 (CVSS 7.7), affects all supported versions of Cisco IOS and IOS XE, the operating systems powering much of