CyberNews A massive data breach at cloud-based communication platform RingCentral has exposed sensitive information for over 1.6 million accounts, leaving business owners and employees scrambling to assess their security risks. The ShinyHunters extortion group is behind the breach, which was facilitated by a sophisticated social engineering campaign that exploited vulnerabilities in RingCentral’s systems. RingCentral, used by … Read more
Oil giant Shell has found itself at the center of a potential cybersecurity incident after a notorious ransomware gang claimed to have stolen 89GB of sensitive data. The Clop gang, known for its brazen data theft attacks, published a list on its dark web leak site that includes Shell as one of 43 new victims … Read more
The Dark World of Adtech: A New Service Sheds Light on Who’s Tracking You A new, free online service called DecryptAds is changing the game for individuals and organizations seeking to uncover who’s behind the ads they see on their favorite websites and mobile apps. This powerful tool scrapes and correlates publicly available data from … Read more
A Devastating DNS Amplification Attack Hits Global Networks, Causing Widespread Disruptions A massive DNS amplification attack has rocked global networks, leaving a trail of destruction in its wake. The assault, which began on Thursday evening, has already affected numerous organizations and individuals worldwide, causing widespread disruptions to online services. The attack, attributed to a sophisticated … Read more
Cybersecurity researchers have discovered a sophisticated macOS malware that not only steals sensitive data but also takes control of the victim’s browser sessions. The malware, dubbed AmnesiaStealer, has been spreading through a series of complex attacks, leaving many users unaware of their compromised systems. AmnesiaStealer is a multi-stage Rust-based information stealer that has been distributed … Read more
Hackers Quickly Exploit Unpatched GeoServer Zero-Day Vulnerability, Exposing Organizations to Remote Code Execution Attacks A critical zero-day vulnerability in the popular open source platform for geospatial data processing and sharing, GeoServer, has been publicly disclosed by a security researcher just hours ago. Unfortunately, threat actors have already started exploiting this flaw, putting organizations that rely … Read more
A data breach at ShipMonk has compromised the personal information of nearly 14,000 customers who use hardware crypto wallets from Trezor. While Trezor’s own systems were not affected, hackers gained access to sensitive customer data through a vulnerability in ShipMonk’s Metabase tool. The incident is believed to have been carried out by the notorious extortion … Read more
A Data Analyst’s Descent into Extortion: Former Brightly Employee Sentenced to Prison for $2.5 Million Scheme In a shocking case of betrayal, a former data analyst has been sentenced to two years in prison for orchestrating a massive extortion scheme against his employer, Brightly Software. Cameron Curry, also known as “Loot,” targeted the company’s sensitive … Read more
Cybersecurity analysts are increasingly turning to artificial intelligence (AI) to aid in their work, and one recent experiment with a Large Language Model (LLM) has yielded some surprising insights. A cybersecurity professional used Gemma4, an LLM, to analyze file hashes uploaded to the DShield sensor over the past 30 days. The model was tasked with … Read more
A Devastating DNS Water Torture Attack Hits Global Networks, Leaving Widespread Disruption in Its Wake In a shocking display of cyber cunning, a sophisticated attack on internet infrastructure has left millions of users struggling to access online services worldwide. The assault, which targets the Domain Name System (DNS) – the internet’s address book – has … Read more