The malware only remained active during the day-long outage, which also knocked major websites offline for hours.

During that time, it propagated via several vulnerabilities affecting devices from multiple vendors, including DD-WRT (CVE-2009-2765), D-Link (CVE-2020-25506, CVE-2022-37055, CVE-2024-10914, CVE-2024-10915), DigiEver (CVE-2023-52163), TBK (CVE-2024-3721), and TP-Link (CVE-2024-53375).

Microsoft Teams Flaw in Guest Chat Exposes Users to Malware Attacks.

Mobile industry warns patchwork cyber regs are driving up costs.

CodeRED emergency alert system CodeDEAD after INC ransomware attack.

AI hacking tools sold on dark web.

Qilin Ransomware Turns South Korean MSP Breach Into 28-Victim 'Korean Leaks' Data Heist.

Microsoft: Security keys may prompt for PIN after recent updates.

Microsoft to secure Entra ID sign-ins from script injection attacks.

Eight “advanced” tools failed at once.

A phishing attack slipped past all of them and reached exec inboxes. Only one thing stopped it — a strong SOC.

Hundreds of Maven packages just got caught running Shai-Hulud v2 — the same malware that hijacked npm.

It spread through automated rebuilds, infecting devs who never used npm.

Hiding in the Bun runtime, it steals GitHub + cloud creds and self-replicates like a worm — already leaking 11,000+ secrets across 4,600 repos.

Hackers hit South Korea’s banks through one IT vendor — spreading Qilin ransomware to 28 firms and stealing 2 TB of data.

Evidence suggests Russian and North Korean groups worked together.

Hackers posing as Kyrgyzstan’s Justice Ministry are spreading 2013-era NetSupport RAT across Kyrgyzstan and Uzbekistan using fake PDFs and old Java tricks—blocking outsiders to hide the attack.

Millions at risk after nationwide CodeRED alert system outage and data breach.

Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP Update.

Asahi admits ransomware gang may have spilled almost 2M people's data.

OpenAI discloses API customer data breach via Mixpanel vendor hack.

FCC sounds alarm after emergency tones turned into potty-mouthed radio takeover.

EU Council Approves New “Chat Control” Mandate Pushing Mass Surveillance.

North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie Malware.

Brit telco Brsk confirms breach as bidding begins for 230K+ customer records.