Latest

Researchers at Okta have uncovered a disturbing new trend: unknown threat actors are abusing Vercel’s generative AI tool, v0, to create fraudulent webpages that mimic legitimate login portals—part of a broader campaign to scale phishing attacks using generative AI. What Is v0 and How It’s Being Misused

The U.S. Department of the Treasury has imposed sanctions on Aeza Group, a Russian-based “bulletproof” hosting provider, along with four of its top operators. According to U.S. officials, Aeza’s infrastructure was actively used by ransomware gangs, information-stealing malware operators, and darknet marketplaces. Allegations and Sanctions The sanctions

Spanish police have arrested five suspects accused of laundering more than $540 million through fraudulent cryptocurrency investment schemes that defrauded over 5,000 victims worldwide. The case, supported by Europol and law enforcement agencies in Estonia, France, and the United States, highlights the growing scale and sophistication of crypto-enabled financial

Cloudflare has announced a major policy shift, automatically blocking AI-powered web scraping for new users and launching a beta program that lets website owners charge AI companies for access to their content. Key Announcements Default AI Crawler Blocking Cloudflare will now block known AI bots by default for all new

The International Criminal Court (ICC) has confirmed it is investigating a "sophisticated" cyberattack that targeted its internal systems last week. The breach has raised fresh concerns about the vulnerability of global justice institutions to cyber threats. Key Details The ICC described the incident as both “complex and targeted,

German regulators have formally ordered Google and Apple to remove the DeepSeek app from their platforms, citing serious violations of EU data protection laws. The directive was issued by Berlin’s Data Protection Commissioner, Meike Kamp, who argues that the Chinese-owned AI app fails to comply with the General Data

Google has issued emergency updates for a critical zero-day vulnerability actively exploited in the wild. Tracked as CVE-2025-6554, the flaw affects the Chrome browser and allows attackers to potentially execute arbitrary code on vulnerable systems. Key Details * Vulnerability Type: Type confusion in Chrome’s V8 JavaScript engine * Discovered By: Clément