ASOS Suffers Data Breach After Hackers Use Social Engineering Tactics to Steal Employee Credentials In a concerning incident that highlights the ongoing threat of social engineering attacks, UK fashion retailer ASOS has confirmed that a recent data breach was caused by hackers who stole an employee’s login credentials and used them to access sensitive information … Read more
Microsoft Teams is set to receive a significant boost in security features, including support for third-party deepfake detection tools and impersonation protection. This move comes as part of Microsoft’s ongoing efforts to strengthen the platform’s defenses against increasingly sophisticated cyber threats. The introduction of third-party deepfake detection solutions will allow organizations to enhance meeting security … Read more
Malicious Firefox Extensions Target Users with Fake Wallets, Putting Recovery Phrases at Risk A new wave of malicious Firefox extensions has been discovered, targeting users with fake wallets that pose as Rabby and OKX wallets. These rogue add-ons have managed to slip past Mozilla’s review process, compromising the security of thousands of users who have … Read more
A widespread phishing campaign, dubbed “Wazza Phishkit,” has been making headlines in recent days as it targets high-profile organizations across the US, EU, and Australia. The attack involves sophisticated social engineering tactics, leveraging exposed identities to create active attack paths that can compromise sensitive information. The Wazza Phishkit campaign appears to be a highly coordinated … Read more
Ransomware Recovery Scheme Exposed as $11M Scam A shocking case of cybercrime has come to light in the United States, where a company owner was charged with defrauding clients through a ransomware remediation scheme. Zohar Pinhasi, 50, the owner of MonsterCloud, allegedly convinced organizations that fell victim to ransomware attacks to pay his company for … Read more
Samsung Galaxy S26 Hacked Three Times at Pwn2Own Ireland, Zero-Day Flaws Revealed Security researchers have been busy at Pwn2Own Ireland 2026, a competition that tests the vulnerability of popular devices and software to zero-day attacks. On the second day of the event, three separate teams successfully hacked the Samsung Galaxy S26 flagship smartphone, exposing critical … Read more
A notorious npm package, Tensorlake, has been compromised to deliver a stealthy credential-stealing worm dubbed Shai-Hulud. The malicious update affects users who have installed the library in their projects, potentially exposing sensitive authentication credentials and paving the way for further attacks. Tensorlake is an open-source JavaScript library used for image processing and computer vision tasks. … Read more
A notorious cybersecurity firm, MonsterCloud, has been accused of a shocking scheme that reveals the dark underbelly of the ransomware industry. The company’s owner is alleged to have billed clients over $19 million for services that didn’t exist, while secretly paying ransoms on their behalf to decrypt encrypted data. The accusations against MonsterCloud come after … Read more
A $10 Million Bounty for Tips on HAFNIUM Hacker Zhang Yu, as Experts Warn of Identity Exposure Risks The US Department of Justice has put out a call for information on Zhang Yu, the alleged mastermind behind a series of high-profile hacking incidents linked to the notorious HAFNIUM group. As part of this effort, the … Read more
FortiBleed Attackers Lock Out Organizations from Fortinet Devices Worldwide A highly sophisticated cyber attack campaign, known as FortiBleed, has been making headlines for months, targeting organizations with Fortinet’s firewalls and VPN appliances. The attackers have been using compromised credentials and brute-force techniques to gain access to vulnerable devices, but the latest twist is that they’re … Read more