North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign.

Apple AirDrop and Android Quick Share flaws expose users to wireless attacks.

ARToken PhaaS exposes EvilTokens' Microsoft 365 phishing toolkit.

PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords.

Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds.

The Citizen Lab published a report documenting one of the more darkly ironic findings in recent surveillance research: former Member of the European Parliament Stelios Kouloglou was repeatedly infected with NSO Group‘s Pegasus spyware while serving on the very committee tasked with investigating Pegasus abuses across the EU.

Cavern Manticore is actively targeting Israeli government and IT organizations using “Cavern,” a modular .NET-based C2 framework. The campaign highlights growing sophistication in cyber espionage tactics and modular malware design.

New TrojPix attack can leak data from an air-gapped PC through its video cable.

The pro‑resistance hacker group al‑Jabha al‑Isnād al‑Saybrāniyya (Cyber Support Front) claims a cyberattack on three Israeli legal institutions.

It says the targets handled taxation, legal services, administrative disputes & government projects, and were linked to the Israeli Ministry of Defense.

The group also claims to have obtained a large volume of sensitive documents and data.

Telco giant KDDI says data breach affects over 12 million people.

Telegram-Hosted RedWing Malware Lets Anyone Rent Android Spyware Tools.

Chinese hackers develop LONGLEASH malware to expand ORB network.

UAT-7810 Expands ORB Network With New LONGLEASH Malware.

Ubiquiti warns of new max severity UniFi OS vulnerability.

Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets.

Accenture confirms breach after hacker offers stolen data for sale.

Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots.

WireVPN service linked to years-long residential proxy operation.

Attackers use Microsoft Teams voice calls to deliver EtherRAT malware.

CAI cloud worm gives competitors' malware the boot, then steals secrets and mines for coin.

Spain arrests suspected member of pro-Russian hacktivist groups.

Spain's National Police have arrested a man who is suspected of being an active member of the CyberArmy of Russia Reborn (CARR) and Z-Pentest, both pro-Russian hacktivist groups.

The two groups have been linked to multiple attacks targeting critical infrastructure in the U.S. and Europe.