Cyber Security

A sophisticated cyberattack campaign has been uncovered, leveraging popular JavaScript library npm packages to steal sensitive information from software developers’ machines. The malicious activity is linked to North Korean hackers, who have been using a clever ruse to infiltrate development environments worldwide. The attackers exploited vulnerabilities in Rollup polyfills, a collection of libraries that simplify … Read more

A Member of European Parliament’s Spyware Oversight Committee Infected with Spyware In a shocking turn of events, it has been revealed that a member of the European Parliament’s Permanent Special Committee on Foreign Interference in Democratic Processes (PEGA) was infected with Pegasus spyware. Stelios Kouloglou, a Greek journalist and former member of the European Parliament, … Read more

A Dubious Trio of Cybersecurity Incidents: Jail Time for a Canadian Hacker, KDDI’s Massive Data Breach, and More Aubrey Cottle, a 39-year-old Canadian hacker linked to Anonymous, has been sentenced to 18 months in prison for his role in the Texas Republican Party’s website cyberattack in September 2021. The attack resulted in data being exfiltrated … Read more

Chinese AI Models Fuel Cybersecurity Concerns as Defenders Fall Behind A recent surge in advanced artificial intelligence (AI) models from Chinese firms has raised alarm bells among cybersecurity experts, who worry that these cutting-edge tools are widening the gap between attackers and defenders. The two new models, released by Zhipu AI and 360 Security Technology, … Read more

**Phishing-as-a-Service Platform Exposes Extensive Toolkit to Compromise Microsoft 365** A disturbing new development in the world of cybercrime has been uncovered by Cisco Talos researchers. The team discovered a phishing-as-a-service (PhaaS) platform called ARToken, which appears to be an affiliate of the notorious EvilTokens phishing platform. This finding has shed light on a sophisticated toolkit … Read more

A new and highly sophisticated malware strain, dubbed Armored Likho, has been discovered targeting government agencies and critical infrastructure in the power sector with its BusySnake stealer component. This stealthy threat combines advanced AI-powered detection evasion techniques with a robust payload delivery mechanism, making it a formidable foe for even the most seasoned security teams. … Read more

A major player in the notorious hacking group Scattered Spider has been extradited to the US to face charges related to a series of high-profile cyberattacks. Peter Stokes, also known as “Bouquet,” was arrested in Finland in April while attempting to board a flight to Japan and is now accused of participating in the group’s … Read more

A massive data breach has struck medical technology giant Medtronic, compromising the sensitive information of over 3.8 million individuals worldwide. The incident, which occurred in April 2026, was perpetrated by the notorious extortion group ShinyHunters, who accessed the company’s corporate IT systems and made off with a staggering 9 million records of personal information. Medtronic … Read more

A Ransomware Attack Using Agentic AI Raises Alarm for Cloud Security In a chilling demonstration of the dangers of agentic artificial intelligence, a threat actor has successfully exploited a vulnerability in Langflow to conduct a sophisticated ransomware attack. The cloud security firm Sysdig reports that the attacker, tracked as JadePuffer, used a powerful language model … Read more

A New Mac Malware Threat Emerges, Stealing Login Credentials with Deceptive Tactics A sophisticated malware campaign targeting Apple devices has been uncovered, exploiting a vulnerability in Password Manager (PAM) checks to steal login credentials. Dubbed “PamStealer,” this malware uses fake websites mimicking popular services like McDonald’s (Maccy) to trick users into revealing their sensitive information. … Read more