Dutch Police Crack Down on ShinyHunters Hacking Group with Arrest of Notorious Hacker Pepijn van der Stap In a significant development in the ongoing cat-and-mouse game between law enforcement and cybercrime groups, Dutch police have confirmed that they have arrested a 24-year-old Amsterdam man as part of an investigation into the notorious ShinyHunters hacking group. … Read more
A major Japanese car-sharing service has been hit with a massive data breach, compromising the sensitive information of over 6.6 million current and former members. Times Car, operated by Park24 Group, revealed that an unauthorized party accessed its systems at the beginning of September, prompting swift action to contain the damage. The breach affects not … Read more
Japan’s Keio Railway Hit by Ransomware Attack, Disrupting Business Systems Keio Corporation, a major private railway operator in Japan, has confirmed that its network was hit by a ransomware attack over the weekend. The cyberattack disrupted some of the company’s business systems and forced it to shut down its network to prevent further damage. Keio … Read more
Cybersecurity researchers have uncovered a sophisticated Android malware console, dubbed RatHat, that uses Gemini – a technique for identifying and exploiting vulnerable devices – to target higher-value victims. This highly advanced threat has been observed leveraging cross-domain privilege escalation to breach sensitive areas of compromised systems. RatHat’s capabilities are rooted in its ability to pivot … Read more
A staggering $388 million in cryptocurrency has been stolen from Bitget, a Singapore-based digital asset exchange, after an attacker exploited a flaw in a third-party security product. The heist highlights the importance of robust cybersecurity measures and the need for vigilance against vulnerabilities in even the most trusted software. The incident is believed to have … Read more
A recent surge in identity exposure attacks has shed light on a critical issue facing organizations with artificial intelligence (AI) agents: inadequate identity and access management (IAM). These sophisticated cyber threats exploit vulnerabilities in IAM systems, allowing attackers to traverse multiple domains and escalate privileges with ease. The consequences are severe, with 11 real-world cases … Read more
A sophisticated hacking group has been using a malware tool called NeedyMantis to maintain long-term access in breached networks, allowing them to launch subsequent attacks and evade detection. The malware’s ability to bypass traditional security measures makes it a particularly concerning threat for organizations with sensitive data. NeedyMantis operates by exploiting vulnerabilities in network management … Read more
Apple has just issued a critical patch for its CoreGraphics framework, which could have been exploited in targeted attacks. The vulnerability allows an attacker to gain elevated privileges and access sensitive data on Apple devices running macOS High Sierra or later. The flaw was first discovered by security researchers at Google’s Project Zero team, who … Read more
A sophisticated Android malware campaign, dubbed RatHat, has been uncovered, leveraging a novel approach to target high-value victims. The malware’s command and control (C2) server, known as Gemini, is designed to identify and prioritize targets based on their access levels within compromised networks. RatHat’s modus operandi involves exploiting vulnerabilities in Android apps, particularly those with … Read more
A staggering cybersecurity heist has unfolded, with cryptocurrency exchange Bitget revealing that an attacker exploited a vulnerability in a third-party security product to steal a whopping $388 million. The incident serves as a stark reminder of the importance of robust security measures and the need for vigilance against emerging threats. The attack appears to have … Read more