A sophisticated phishing platform dubbed “ARToken” has been uncovered by Cisco Talos researchers, revealing a vast toolkit designed to compromise Microsoft 365 users. The platform appears to be an affiliate of the notorious EvilTokens phishing platform, which was first exposed earlier this year. The discovery was made while investigating phishing infrastructure used in an incident … Read more
A sophisticated malware threat, dubbed Armored Likho, has been uncovered targeting government agencies and power sector organizations worldwide. This cyber espionage campaign leverages the BusySnake stealer malware to infiltrate and exfiltrate sensitive data from high-profile targets. At its core, Armored Likho is a highly customized and heavily modified version of BusySnake, a notorious information-stealing malware … Read more
A sophisticated cyberattack campaign has been uncovered, leveraging popular JavaScript library npm packages to steal sensitive information from software developers’ machines. The malicious activity is linked to North Korean hackers, who have been using a clever ruse to infiltrate development environments worldwide. The attackers exploited vulnerabilities in Rollup polyfills, a collection of libraries that simplify … Read more
A Member of European Parliament’s Spyware Oversight Committee Infected with Spyware In a shocking turn of events, it has been revealed that a member of the European Parliament’s Permanent Special Committee on Foreign Interference in Democratic Processes (PEGA) was infected with Pegasus spyware. Stelios Kouloglou, a Greek journalist and former member of the European Parliament, … Read more
A Dubious Trio of Cybersecurity Incidents: Jail Time for a Canadian Hacker, KDDI’s Massive Data Breach, and More Aubrey Cottle, a 39-year-old Canadian hacker linked to Anonymous, has been sentenced to 18 months in prison for his role in the Texas Republican Party’s website cyberattack in September 2021. The attack resulted in data being exfiltrated … Read more
Chinese AI Models Fuel Cybersecurity Concerns as Defenders Fall Behind A recent surge in advanced artificial intelligence (AI) models from Chinese firms has raised alarm bells among cybersecurity experts, who worry that these cutting-edge tools are widening the gap between attackers and defenders. The two new models, released by Zhipu AI and 360 Security Technology, … Read more
**Phishing-as-a-Service Platform Exposes Extensive Toolkit to Compromise Microsoft 365** A disturbing new development in the world of cybercrime has been uncovered by Cisco Talos researchers. The team discovered a phishing-as-a-service (PhaaS) platform called ARToken, which appears to be an affiliate of the notorious EvilTokens phishing platform. This finding has shed light on a sophisticated toolkit … Read more
A new and highly sophisticated malware strain, dubbed Armored Likho, has been discovered targeting government agencies and critical infrastructure in the power sector with its BusySnake stealer component. This stealthy threat combines advanced AI-powered detection evasion techniques with a robust payload delivery mechanism, making it a formidable foe for even the most seasoned security teams. … Read more
A major player in the notorious hacking group Scattered Spider has been extradited to the US to face charges related to a series of high-profile cyberattacks. Peter Stokes, also known as “Bouquet,” was arrested in Finland in April while attempting to board a flight to Japan and is now accused of participating in the group’s … Read more
A massive data breach has struck medical technology giant Medtronic, compromising the sensitive information of over 3.8 million individuals worldwide. The incident, which occurred in April 2026, was perpetrated by the notorious extortion group ShinyHunters, who accessed the company’s corporate IT systems and made off with a staggering 9 million records of personal information. Medtronic … Read more