CyberNews A major incident has struck the US Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF), with the regulatory agency confirming that one of its systems was compromised by the Qilin ransomware gang. This latest breach is just the latest in a string of high-profile cybersecurity incidents to hit various federal agencies this year. The incident … Read more
The US Cybersecurity and Infrastructure Security Agency (CISA) has added six exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, putting thousands of organizations on high alert for potential cyber attacks. The newly listed flaws affect a range of critical infrastructure components, including NetScaler, Linux, and SQL Server systems. The KEV catalog is a key … Read more
Malware Development Speeds Up with AI, But Success Rate Remains Elusive A recent analysis of 405 malware samples linked to artificial intelligence (AI) has revealed that while AI can significantly accelerate the development and creation of malicious software, it does not necessarily make these tools more effective or harder to detect. In fact, existing security … Read more
Citrix NetScaler Vulnerability Exploited in the Wild, Government Agencies Urged to Act Swiftly A critical vulnerability in Citrix’s NetScaler appliances has been exploited in the wild by attackers, prompting the Cybersecurity and Infrastructure Security Agency (CISA) to issue an urgent advisory for government agencies to address the flaw immediately. The vulnerability, tracked as CVE-2026-8452, was … Read more
Nigeria Takes Bold Steps Toward Sovereign Cloud Initiative, Boosting National Security and Economic Growth In a significant move towards asserting its digital sovereignty, Nigeria has launched a comprehensive plan to establish its own sovereign cloud infrastructure. The West African nation’s initiative aims to reduce reliance on foreign data storage and cloud providers, while also enhancing … Read more
Cyberattackers have found a new way to compromise Microsoft 365 accounts, using a novel phishing service called NovaCookies that steals authenticated sessions for as low as $320 per month. This adversary-in-the-middle (AitM) phishing service has been discovered by researchers at Island, an enterprise browser maker, who warn that it’s giving attackers a turnkey solution to … Read more
A novel and insidious cyber threat has emerged, targeting Android-based automotive head units in a bid to spread malware and hijack update systems. Researchers at Kaspersky have uncovered a sophisticated piece of malware, dubbed JarService, which is designed to infect car infotainment modules and recruit them into a botnet for click-fraud purposes. The malware, linked … Read more
West African Crime Syndicates Disrupted in Global Law Enforcement Operation A massive international law enforcement effort has dealt a significant blow to organized crime groups in West Africa, disrupting their networks and infrastructure. Interpol’s Jackal IV operation, which involved 22 countries across six continents, resulted in the arrest of 58 suspects and the identification of … Read more
**Phishing Service Offers Turnkey Solution to Steal Microsoft 365 Sessions for $320 a Month** A novel phishing service has emerged, offering a commercial-grade solution for attackers to steal authenticated Microsoft 365 sessions for as little as $320 a month. Dubbed “NovaCookies,” this adversary-in-the-middle (AitM) phishing service is targeting hundreds of organizations across multiple regions, with … Read more
Android Malware Hijacks Update System for Car Head Units, Highlighting Wider Botnet Threat In a disturbing escalation of cyber threats, researchers at Kaspersky have discovered Android malware targeting car head units, the hardware modules on dashboards that control vehicle communication, entertainment, and information systems. This is the first documented case of its kind, where malicious … Read more