Cybersecurity

Chinese APT UAT-7810 Refines Malware for ORB Network

Chinese APT group UAT-7810 is expanding its LapDogs ORB network by compromising networking devices with custom malwareThe group developed new malware variants including LONGLEASH,...

New Android Malware RedWing Sold on Telegram for Bank Fraud

A new Android malware operation called RedWing is being rented on Telegram as a ready-made bank-fraud serviceZimperium's zLabs discovered the operation, identifying it as...

Windows ID links teen to $2M jewelry heist

U.S. prosecutors linked a Scattered Spider hacker to a luxury jewelry retailer intrusion using a persistent Windows device ID, according to a newly unsealed...

Critical BeyondTrust bugs allow unauthenticated device takeover

BeyondTrust disclosed four pre-authentication vulnerabilities in its Remote Support (RS) and Privileged Remote Access (PRA) products.Two critical flaws (CVE-2026-40138 and CVE-2026-40139), each carrying a...

Iranian Cavern Manticore Hacks Israeli Firms

An Iranian state-backed hacking group is using a new modular C2 framework, Cavern, targeting Israeli IT and government sectors.The sophisticated framework uses three different...

New Linux KVM Bug Lets Guest Crash Host

A critical vulnerability dubbed 'Januscape' (CVE-2026-53359) allows a guest virtual machine to panic or potentially execute code on the host KVM hypervisor.The flaw is...

China-linked hackers target Indian taxpayers via tax phishing

A suspected China-nexus cyber campaign named Operation DragonReturn is targeting Indian taxpayers and financial professionals with sophisticated phishing emails.The attack uses fake tax department...

TrojPix Air-Gap Attack Uses Monitor Cables

Researchers at Shandong University have demonstrated a new covert data exfiltration technique called TrojPix.The method uses imperceptible pixel modulation to turn a monitor's video...

Latest news

Polymarket hit by $2.6M hack via compromised DebugBear script

Malicious code on Polymarket's site, loaded via a compromised DebugBear script, drained funds from signed-in traders on October 29.Hackers...

Chainalysis Hit by AI Agentic Attack, Customer Data Exposed.

Chainalysis said an external actor accessed non-sensitive customer data using offensive agentic techniques.The breach did not expose investigation content,...

Chainalysis Hit by Cybersecurity Incident; No Sensitive Data Breached

Blockchain analytics firm Chainalysis disclosed a Cybersecurity incident affecting its systems.The investigation found no evidence that investigation content, authentication...