Kosovo Extradites BlackDB Administrator to the United States to Address Cybercrime Allegations
A Kosovo national has been extradited to the United States to address charges relating to the operation of an online cybercrime marketplace in existence since 2018.

The individual, Liridon…

Significant Increase of 967% in Linux Vulnerabilities Over the Past Year
The number of newly discovered vulnerabilities affecting Linux and macOS systems has seen a significant increase. According to a recent analysis by Action1, the total count of vulnerabilities identified…

Enhancing Code Security: Cultivating a Culture of Credential Protection within Development Teams
Credential protection is essential for safeguarding against security breaches. As organizations increasingly rely on various applications and services, the importance of securing APIs and managing sensitive information has never…

Chinese Cyber Operatives Target Drone Industry through Supply Chain Assaults
A notable Chinese threat actor has been identified as disrupting the drone supply chain through a series of multi-wave attacks against various organizations in Taiwan and South Korea, according…

Exploitation of Unicode Steganography in Malicious npm Package for Google Calendar Command and Control Operations
Cybersecurity researchers have identified a malicious package titled “os-info-checker-es6,” masquerading as a utility for operating system information. Its primary function appears to be the stealthy installation of subsequent payloads…

Detection Evasion Tactics Employed by Malicious NPM Package Through Unicode Steganography
vue-bit, which are presented as accessibility and developer platform engineering tools.

The promotional tactics employed by the threat actor for these packages remain ambiguous.

Unicode Steganography Explained

Within the…

Exploitation of SAP Vulnerability by Ransomware Syndicates and State-Sponsored Threat Actors
Cybersecurity researchers have identified that a critical vulnerability in SAP’s NetWeaver Visual Composer development server is being actively exploited by various threat actors. This includes ransomware groups such as…

FrigidStealer Malware Targets macOS Users Through Deceptive Safari Browser Update Notifications
FrigidStealer is a sophisticated malware variant that specifically targets macOS users, employing deceptive tactics to infiltrate systems. It achieves this by masquerading as legitimate browser updates, thereby enticing users…

Coinbase Reports Security Incident Involving Employee Bribery and $20 Million Ransom Demand for Customer Data Theft
Coinbase has recently disclosed that cybercriminals executed a significant attack by bribing overseas support agents to gain unauthorized access to customer data. This compromised information is anticipated to be…

Security Incident: Coinbase Employees Compromised, User Data of Approximately 1% Exposed; $20 Million Extortion Attempt Thwarted
Coinbase has reported a security breach involving unauthorized access to its systems, resulting in the theft of account data for a limited number of customers. The incident was traced…

Introducing Tor Oniux: A Robust Solution for Anonymizing Network Traffic of Linux Applications
Tor has introduced Oniux, an innovative command-line utility designed to route any Linux application through the Tor network, ensuring secure and anonymous network connections.

In contrast to traditional methods…

PowerShell-Based Loader Deploys Remcos RAT in Innovative Fileless Attack
A recent analysis by the Qualys Threat Research Unit (TRU) has identified a sophisticated, fileless malware campaign utilizing PowerShell to deploy the Remcos Remote Access Trojan (RAT). This attack…

Stealthy Remcos RAT Attack Bypasses Antivirus Solutions Through PowerShell Scripting Techniques
Recent developments in cyber threats have highlighted a sophisticated approach employed by attackers utilizing PowerShell and LNK files to covertly deploy Remcos Remote Access Trojan (RAT). This method not…

Cybersecurity Breach Incident at Central Point School District 6
Central Point School District 6 is currently managing a cybersecurity incident that has compromised its digital systems. The breach was identified on Wednesday, prompting the district to activate its…

Nova Scotia Power Acknowledges Data Breach Resulting from Cyber Intrusion
Nova Scotia Power has officially confirmed that a cyberattack led to the unauthorized acquisition of sensitive customer information. This breach was identified after an incident involving unauthorized access to…

Coinbase Announces $20 Million Reward to Dismantle Cybercrime Organization Responsible for Hack
In a decisive action against cybercrime, Coinbase, a leading cryptocurrency exchange, has announced a $20 million reward aimed at identifying and apprehending those responsible for a recent cyberattack, opting…

Impact of Google Algorithm Changes on Reddit Traffic: Implications for User-Generated Content Platforms
In recent developments within the digital landscape, Reddit has been facing challenges amidst Google’s heightened emphasis on expertise in content ranking. This shift towards prioritizing authoritative sources and credible…

Security Alert: Legitimate Indiana .gov Email Addresses Being Used in Phishing Attacks Against Residents
Indiana state agencies have issued a warning to residents about fraudulent emails that are being distributed using official government email addresses. These phishing attempts, originating from various departments including…

Meta Set to Utilize EU User Data for AI Training Starting May 27 Without User Consent; Noyb Signals Potential Legal Action
Austrian privacy advocacy group noyb (None of Your Business) has issued a cease-and-desist letter to Meta’s Irish headquarters, threatening a class action lawsuit should the company continue its plan…

Windows 11 and Red Hat Linux Exploited on Opening Day of Pwn2Own Conference
On the inaugural day of Pwn2Own Berlin 2025, security researchers successfully showcased zero-day exploits targeting Windows 11, Red Hat Linux, and Oracle VirtualBox, earning a total of $260,000 in…

Dior Acknowledges Data Breach Impacting Customer Information
French luxury brand Dior has confirmed a data breach that has impacted the personal information of some of its customers. Detected on May 7, the breach involved unauthorized access…