A Major Ransomware Player Brought Down: Maksim Silnikau Sentenced to 16 Years for Ransom Cartel Crimes Maksim Silnikau, the mastermind behind the notorious Ransom Cartel ransomware operation, has been dealt a severe blow. The Belarusian national has been sentenced to 16 years in prison by a US court for his role in orchestrating devastating attacks … Read more
Huge Malware False Positive Locks Hundreds of Legitimate Blogs on Google’s Platform In a shocking turn of events, hundreds of innocent Blogger websites have been wrongly flagged as hosting malware and subsequently locked out of their dashboards. The issue, which began on August 4, has left many web admins scrambling to restore access to their … Read more
Cyber Attackers Exploit COLDCARD Wallet Vulnerability with Phishing Scam A sophisticated phishing campaign is targeting users of the COLDCARD cold storage wallet, exploiting fears surrounding a recent vulnerability and suspected $88.6 million Bitcoin theft. The attackers are using emails impersonating COLDCARD to trick victims into installing remote access software, granting them unauthorized control over devices. … Read more
Cyberattackers have successfully installed a post-exploitation toolkit, known as khunt, directly inside an Oracle database used to breach a corporate network. The attack was discovered by Huntress on July 27, 2026, after its security platform detected credential theft on a server hosting the Oracle database server. The attackers exploited a SQL injection vulnerability in a … Read more
A major disruption has shaken up a sprawling online scam network, known as Poipet, which has been using AI-powered chatbots to deceive victims across multiple continents. The network’s operations were severely impacted after OpenAI, the company behind the popular language model ChatGPT, took steps to disrupt their activities. At the heart of the Poipet scheme … Read more
A massive online scheme has been uncovered, where over 250 domains masquerading as legitimate repair services are using browser fingerprinting techniques to lure macOS users into downloading malware. The compromised domains, all tied to the “ClickFix” brand, have been found to employ a sophisticated approach that exploits vulnerabilities in Apple’s Safari and Google Chrome browsers. … Read more
Cyberattackers have been caught exploiting a vulnerability in an Oracle database to install a post-exploitation toolkit, giving them unfettered access to a corporate network. The attack was discovered by security firm Huntress on July 27, after its platform detected suspicious activity involving credential theft on a server hosting the Oracle database. The attackers exploited a … Read more
A recently discovered vulnerability in Paperclip AI, a popular artificial intelligence development platform, has left thousands of users exposed to potentially catastrophic attacks. The flaw, which allows malicious agents to run host commands via malicious agent imports, has significant implications for anyone who’s ever used the platform. Paperclip AI is designed to simplify AI model … Read more
A Shadowy Market Emerges, Selling Sensitive Customer Data and Opening Up Entire Networks to Attack In a disturbing revelation, it’s been discovered that sensitive customer data from a popular online platform called Claude is being sold on dark web marketplaces at discounted prices. What’s even more alarming is that the operator behind this illicit trade … Read more
A Major Cyber Heist Brought Down by AI: OpenAI’s ChatGPT Foils Poipet Scam Network In a stunning display of cybersecurity innovation, OpenAI’s chatbot technology has disrupted a sophisticated network of scammers using multiple fraud schemes to exploit victims worldwide. The Poipet scam network, named after the Cambodian border town where it originated, had been evading … Read more