CyberNews Carhartt Data Breach Exposes Sensitive Info of 12.9 Million Accounts A massive data breach has struck clothing retailer Carhartt, exposing sensitive information from nearly 13 million accounts. The ShinyHunters extortion group claimed responsibility for the attack earlier this month and published the stolen data on its dark web site after failing to pressure Carhartt into … Read more
A New Rowhammer Vulnerability Exploits NVIDIA’s RTX A6000, Putting Sensitive Data at Risk Researchers have discovered a fresh Rowhammer vulnerability affecting NVIDIA’s high-end graphics processing unit (GPU), the RTX A6000. Dubbed “GPUThor,” this flaw allows attackers to bypass Error-Correcting Code (ECC) memory protection, gaining host root access and compromising sensitive data. The GPUThor exploit leverages … Read more
A sophisticated malware campaign, known as GoCaracal, has been discovered using a unique tactic to evade detection and maintain persistence on compromised systems. The malware exploits an Ethereum smart contract to fetch replacement command and control (C2) addresses, allowing it to stay one step ahead of security researchers and defenders. The GoCaracal malware is designed … Read more
Spark RAT Targets Cambodia, Exploiting OPSWAT Vulnerability to Disable Security Tools A sophisticated malware campaign has been uncovered targeting Cambodian organizations, utilizing a vulnerable driver from OPSWAT to disable security tools and gain unfettered access to compromised systems. Spark RAT, as the malware is known, exploits a previously undisclosed vulnerability in OPSWAT’s MetaAccess driver, which … Read more
Two alleged members of the notorious “TeamPCP” hacking group have been arrested in Australia, marking a significant breakthrough in the global effort to bring down this prolific cybercrime syndicate. The Australian Federal Police (AFP) announced the arrests today, revealing that two men from Western Australia, aged 21 and 23, were taken into custody for their … Read more
US Disrupts Chinese Hacking Platform Used in Military and Critical Infrastructure Attacks A major blow has been dealt to state-sponsored hackers operating out of China, as the US government announced that it has disrupted a hacking platform and botnet used by these actors. The platform, operated by a company called Nanjing Xinjiuwei Network Technology, was … Read more
The US Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has confirmed a significant security incident after being added to the list of victims by the Qilin ransomware gang. The incident follows a pattern of increasingly brazen cyberattacks on high-profile targets, including several US federal agencies. Qilin, a Ransomware-as-a-Service operation that emerged in August 2022, … Read more
The US Government Faces a Deadline to Patch Critical Citrix Vulnerability A critical security flaw in Citrix NetScaler appliances has been identified as actively exploited by threat actors, prompting the US Cybersecurity and Infrastructure Security Agency (CISA) to order federal agencies to patch their systems by Saturday. The vulnerability, tracked as CVE-2026-8452, allows attackers to … Read more
The US Cybersecurity and Infrastructure Security Agency (CISA) has added six exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, a move that underscores the ongoing threat posed by unpatched software flaws. The newly listed bugs affect NetScaler, Linux, SQL Server, and other systems, putting organizations in various industries at risk of cyber attacks. The … Read more
GPUThor, a notorious rowhammer-based attack tool, has made headlines once again for its ability to bypass crucial security measures on high-end NVIDIA graphics processing units (GPUs). The latest exploit, dubbed “GPUThor Rowhammer,” successfully defeats Error-Correcting Code (ECC) memory protection on the NVIDIA RTX A6000, granting attackers Host Root Access – a level of control that’s … Read more