Trust Wallet Chrome Extension Hack Drains $8.5M via Shai-Hulud Supply Chain Attack.

Hacker Claims European Space Agency Breach, Selling 200GB of Data.

Researchers uncovered phishing sent through Google Cloud’s built-in email feature. Emails came from google[.]com, not spoofed domains, making them harder to spot.

Clicks passed through Google-hosted pages before stealing Microsoft login credentials.

A former Coinbase support agent was arrested in India after hackers bribed contractors to steal customer data.

The breach exposed 69,461 users and led to a $20M ransom demand. Coinbase cut ties with involved vendors and says more arrests are coming.

A botnet called RondoDox has been quietly expanding for nine months, now abusing React2Shell (CVSS 10.0) to compromise Next.js servers and IoT devices.

As of December 2025, the activity has been observed leveraging the recently disclosed React2Shell (CVE-2025-55182, CVSS score: 10.0) flaw as an initial access vector.

Hacker group Handala releases former Israeli minister Ayelet Shaked’s WhatsApp chats.

The hacker group Handala announced the release of former Israeli minister Ayelet Shaked’s WhatsApp conversations, with deep access to senior political circles. The group framed the leak as both transparency and a warning, asserting its influence reaches the highest levels of authority.

Handala also referenced the “presence of Naem,” suggesting its influence shapes decisions and perceptions within Israeli politics.

A German hacker known as "Martha Root" dressed as a pink Power Ranger and deleted a white supremacist dating website live onstage.

UPDATE | Handala hacker group announces bounty on 15 Israeli intelligence officers.

The hacker group Handala has announced that it is offering a $50,000 bounty, following an earlier announcement of hacking material associated with former Israeli justice minister Ayelet Shaked. In a post circulated online, the group said it had exposed the identities of 15 alleged Israeli signal intelligence (SIGINT) officers, describing the move as part of a broader campaign against Israel’s intelligence apparatus.

Handala claimed the operation was intended to undermine confidence within Israeli security institutions and demonstrate what it called its ability to penetrate sensitive networks. The group alleged it had identified intelligence personnel and warned that anonymity could no longer be guaranteed, though it did not provide independently verifiable evidence to support its assertions.

The group said the bounty would be awarded for what it described as “credible and actionable information” related to the individuals it named.

90% of Trump support regarding Venezuela on social media is NOT organic. It’s bot generated. Same CIA playbook as Ukraine.

ShinyHunters Claim Breach of US Cybersecurity Firm Resecurity.

Trump Orders Divestment in $2.9 Million Chips Deal to Protect US Security Interests.

Thousands of ColdFusion exploit attempts spotted during Christmas holiday.

Cybercrook claims to be selling infrastructure info about three major US utilities.

Tokyo FM Data Breach: Hacker Claims Over 3 Million Records Stolen.

Windows ARM64 Internals: Pardon The Interruption! Interrupts on Windows for ARM.

Attack Surface Management usually proves visibility, not safety.

Teams count assets and alerts, but can’t show reduced exposure.

ROI only appears when risky assets get owned and fixed faster, not when inventories grow.