Malware Alert: Macfinger ClickFix Campaign Spreads Information Stealer Malware on Macs A sophisticated malware campaign targeting macOS users has been detected, and its tactics are unlike any other previously seen in the wild. The Macfinger ClickFix campaign has been active for days, infecting multiple systems with a custom-built information stealer that collects sensitive data from … Read more
The US Supreme Court has given a green light to states, allowing them to use the SAVE database to verify voter citizenship, in a move that’s sparked concerns about voter disenfranchisement and data privacy. The ruling reverses lower court decisions that found the database to be inaccurate and prone to errors. At the heart of … Read more
A former Army soldier, Cameron John Wagenius, has been sentenced to 70 months in prison for his role in a series of high-profile cyberattacks on major companies, including AT&T and Snowflake. The attacks, which spanned multiple years and involved numerous victims, resulted in the theft of billions of sensitive records and extortion payments totaling over … Read more
Salesforce Agentforce Flaws Allow Zero-Click Data Exfiltration and Phishing Attacks A trio of vulnerabilities in Salesforce’s Agentforce platform has been discovered to enable attackers to hijack trusted agents for sensitive customer relationship management (CRM) data exfiltration and phishing attacks. Dubbed “SalesBleed,” the flaws could be exploited via Web-to-Lead forms, a mechanism used by Salesforce to … Read more
A Chilling Reality: File Notification Systems Exposed on Windows, Linux, Android, and macOS Security researchers at Graz University of Technology in Austria have uncovered a disturbing truth about file-change notification systems built into popular operating systems. These systems, designed to alert applications when files are created, modified, or deleted, can be exploited by malicious actors … Read more
A Kosovar National Pleads Guilty to Running Illicit Cybercrime Marketplace In a significant victory for law enforcement, Ardit Kutleshi, a 28-year-old Kosovar national, has pleaded guilty to charges related to the creation and administration of Rydox, an online cybercrime marketplace. The US court heard that Kutleshi was involved in the operation of the platform, which … Read more
The US government’s Cybersecurity and Infrastructure Security Agency (CISA) has issued a comprehensive plan to secure election infrastructure ahead of the 2026 elections. The plan, developed in response to a directive from Homeland Security Secretary Markwayne Mullin, highlights significant cyber and physical threats facing election systems. At the heart of CISA’s plan is the recognition … Read more
Bitget Crypto Heist Sparks Fears of North Korean Involvement A devastating cyberattack has struck cryptocurrency exchange Bitget, with hackers making off with a staggering $351.6 million in digital assets. What’s more worrying is that the methods used by these attackers bear a striking resemblance to those employed by notorious North Korean threat groups. According to … Read more
**Ransomware Feud Escalates as ShinyHunters Takes Down Clop Leak Site** In a shocking move that highlights the cutthroat world of cybercrime, the ransomware gang Cl0p has seen its Tor data leak site seized by rival extortion group ShinyHunters. The attack is reportedly payback for alleged threats made by a Cl0p representative during a high-profile campaign … Read more
A Critical Flaw Exposes User Activity Across Multiple Operating Systems Researchers at Graz University of Technology in Austria have uncovered a flaw that allows malicious actors to monitor user activity on Linux, Android, Windows, and macOS systems. The vulnerability lies in the file-change notification features built into these operating systems, which can be abused to … Read more