Nigeria police arrested three suspects linked to global phishing. The main suspect is the alleged developer of the RaccoonO365 phishing-as-a-service kit.
Microsoft ties the tool to 5,000+ stolen credentials across 94 countries and to domain seizures in 2025, showing rising pressure on PhaaS operators.
Microsoft ties the tool to 5,000+ stolen credentials across 94 countries and to domain seizures in 2025, showing rising pressure on PhaaS operators.
CERT/CC disclosed a UEFI flaw affecting motherboards from ASRock, ASUS, GIGABYTE, and MSI.
The flaw allows early-boot DMA attacks, letting malicious PCIe devices read or modify memory before kernel security starts.
The flaw allows early-boot DMA attacks, letting malicious PCIe devices read or modify memory before kernel security starts.
Cracked Software and YouTube Videos Spread CountLoader and GachiLoader Malware
TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering
Internet Crime Complaint Center (IC3) | Senior U.S. Officials Continue to be Impersonated in Malicious Messaging Campaign
Proton is ready to leave Switzerland due to their new "Surveillance Law" which would break e2e encryption.
It has infrastructure ready in Germany & Norway, which they could fully migrate to protect customer privacy if needed.
It has infrastructure ready in Germany & Norway, which they could fully migrate to protect customer privacy if needed.
Android mobile malware campaigns are converging on the same playbook.
Wonderland in Uzbekistan, plus Cellik, Frogblight, and NexusRoute elsewhere, all use fake legit apps, droppers, and phishing to steal OTPs, bank data, and accounts.
Wonderland in Uzbekistan, plus Cellik, Frogblight, and NexusRoute elsewhere, all use fake legit apps, droppers, and phishing to steal OTPs, bank data, and accounts.
APT Infy, also called Prince of Persia, is active again after years of silence.
New research shows operations never stopped, and the toolset quietly evolved.
Updated malware, stronger C2 defenses, and fresh global victims point to a long-term espionage program
New research shows operations never stopped, and the toolset quietly evolved.
Updated malware, stronger C2 defenses, and fresh global victims point to a long-term espionage program
Microsoft Brokering File System Elevation of Privilege Vulnerability (CVE--2025-29970).
NIST tried to pull the pin on NTP servers after blackout caused atomic clock drift.
Merry Hacking Xmas! Kali Linux NetHunter 2025.4 released!
Android 16 support, new devices with injection, Evil Twin AP pages, Magisk v28.1+ support, and more! https://kali.org/blog/kali-linux-2025-4-release ❄️🎄📱⌚📡
Android 16 support, new devices with injection, Evil Twin AP pages, Magisk v28.1+ support, and more! https://kali.org/blog/kali-linux-2025-4-release ❄️🎄📱⌚📡
There’s so much stolen data in the world, South Korea will require face scans to buy a SIM.
UK Government Acknowledges It Is Investigating Cyber Incident After Media Reports.
Android Malware Operations Merge Droppers, SMS Theft, and RAT Capabilities at Scale.