The FBI has made another significant arrest in its ongoing pursuit of the ShinyHunters hacking group, which breached the agency’s systems last month and stole sensitive information from thousands of current and former employees. According to Director Kash Patel, agents have apprehended a suspected member of the gang who is believed to be involved in … Read more
Threat actors are capitalizing on unpatched vulnerabilities in the AhsayCBS backup management platform to deploy malicious code and mine cryptocurrency. The affected organizations, at least five of which have been targeted, rely on managed service providers (MSPs) and system integrators to manage their backups. AhsayCBS is a critical component for many businesses, used to store … Read more
Hackers are using a clever technique to evade advertising security checks and direct unsuspecting users to malicious download pages. By abusing legitimate Bing search-result redirects in Google Ads, attackers are able to push Claude ClickFix attacks, which ultimately deliver unknown payloads to victims’ devices. The method, dubbed “Adception” by researchers at Push Security, involves using … Read more
The FBI has made another significant arrest in its ongoing investigation into the notorious ShinyHunters hacking group. A suspect reportedly involved in last year’s high-profile hack of a popular jobs portal has been taken into custody, bringing the total number of ShinyHunters suspects arrested or charged to at least five. ShinyHunters gained widespread attention for … Read more
A massive credential-stealing campaign has been uncovered on GitHub, with tens of thousands of repositories compromised by malicious workflows. The attack leverages GitHub Actions, a popular automation tool that allows developers to run scripts and deploy code automatically when specific events occur in their repository. Malicious actors have exploited this feature to steal sensitive credentials … Read more
A leading member of the notorious Qilin ransomware group has been arrested in Germany following extradition from Japan, marking a significant blow to the cybercrime operation. The suspect, a Russian national, was detained in May by Japanese authorities at a hotel in Osaka, but had managed to evade capture until now. The arrest comes after … Read more
The ShinyHunters extortion gang has been making headlines for months after breaching FBI systems and stealing sensitive data from over 2TB of compromised files. The latest development in this ongoing saga is the arrest of another suspected member, who is believed to be involved in the breach. According to a statement made by FBI Director … Read more
A Critical Flaw in AhsayCBS Backup Management Platform Exposes Organizations to Webshell and Crypto-Mining Attacks Threat actors have been exploiting a critical vulnerability in the AhsayCBS backup management platform, which has left at least five organizations vulnerable to webshell deployment and cryptocurrency mining. The two unpatched flaws, tracked as CVE-2026-105133 and CVE-2026-105134, were discovered by … Read more
Cybersecurity experts are sounding the alarm over a recent update to the P7 DarkSword iOS exploit kit, which has added two new features: the ability to steal sensitive data from popular crypto wallets and the capacity to execute remote commands on compromised devices. This development is particularly concerning given the rising trend of mobile-based cyber … Read more
The FBI has arrested a suspect allegedly involved in last year’s high-profile hack of ShinyHunters, a notorious cybercrime group known for its extensive collection of stolen databases and credentials. The arrest marks the latest development in the ongoing efforts to dismantle the group’s operations. ShinyHunters came under intense scrutiny after it emerged that they had … Read more