Latest

The alleged administrator of the Russian-language cybercrime forum XSS[.]is has been arrested by Ukrainian authorities at the request of the Paris Prosecutor’s Office. The arrest was followed by a law enforcement takedown of the website, confirming what many in the cybercrime community had feared: the forum had been

A hacker infiltrated Amazon's AI assistant, Q, embedding instructions that would wipe user data from local machines and cloud environments. Even more concerning: Amazon unknowingly shipped the compromised version in a public release. What Is Amazon Q? Amazon Q is an AI-powered coding assistant for developers and IT

Brave Software has announced that its browser now blocks Microsoft’s Windows Recall feature by default—preventing the operating system from capturing screenshots of Brave windows and reinforcing its core mission of user privacy. What Is Windows Recall? First introduced by Microsoft in May 2024, Recall is an AI-powered feature

Multiple Chinese state-backed hacking groups are actively exploiting a chain of zero-day vulnerabilities in Microsoft SharePoint, according to cybersecurity researchers. Alarmingly, the attackers have reportedly compromised the network of the U.S. National Nuclear Security Administration (NNSA). ToolShell Exploit Chain: From Pwn2Own to Real-World Attacks The exploit chain—dubbed ToolShell—

Dr. Web researchers have discovered a stealthy new malware family, Trojan.Scavenger, designed to steal data from cryptocurrency wallets (MetaMask, Phantom, Slush, Exodus) and password managers (Bitwarden, LastPass). The malware targets Windows users and abuses a known technique: DLL Search Order Hijacking, where malicious files are loaded in place of

The extortion group World Leaks claimed to have breached Dell’s systems and stolen 1.3 TB of sensitive information—but Dell confirmed the attackers only accessed synthetic data from a demo environment, rendering the theft meaningless. What Happened? World Leaks infiltrated Dell’s Customer Solution Centers, a sandboxed platform

Cyber threat analysts at F6 have uncovered and helped dismantle a large domain network operated by NyashTeam, a Malware-as-a-Service (MaaS) group that provides malicious tools and hosting infrastructure to cybercriminals. The group’s services have facilitated attacks in over 50 countries, including Russia, and have now been significantly disrupted following