Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3804 articles
Wiz’s year-end roundup revisits 2024 cloud security stories, including the XZ Utils backdoor, SAPwned vulnerabilities, exposed DeepSeek data, LLMjacking, and attacks targeting Linux and Ollama deployments.
A March roundup covers LockBit’s unverified FBI data claim, cybercrime arrests, DDoS outages at X, phishing targeting Ukraine, a railway service disruption, and large Android botnets.
An international investigation involving Group-IB, Orange-CERT-CC, and law enforcement helped disrupt OPERA1ER, a group that targeted financial institutions with phishing, credential theft, and fraudulent transactions. INTERPOL announced a key member’s arrest in Côte dʼ
Hunt.io says URLx now contains more than 10.6 billion URLs, with new filtering fields and SQL queries. The company demonstrates searching for a path associated with phishing and malware activity attributed to suspected North Korean operators.
Trellix found that Celestial Stealer, a JavaScript infostealer sold as a service, uses anti-analysis checks and terminates when it detects certain usernames or computer names, including those linked to a Huntress researcher.
Hunt.io introduced an IOC feed aggregating indicators from security publications and added potential threat-actor and campaign attribution to its C2 feed, which tracks malicious infrastructure.
A technology provider says Darktrace / EMAIL reduced suspicious emails requiring manual review by 75% in its first month, saving analysts 45 hours monthly, and detected a targeted phishing email impersonating Microsoft services and an employee’s family connection.
Wiz says it has signed a deal to be acquired by Google, subject to regulatory review. It says it will remain a multicloud platform and expects Google Cloud’s resources to accelerate its cloud-security work.
Team Cymru says it completed its third annual ISO 27001:2022 recertification audit. It says independent audits by A-LIGN attest to its maintained and continuously improved security program, which covers all its products.
Wiz announced a Slack app that lets teams review and update Wiz issues and threats, add investigation context, and ask an AI app for guidance on Wiz features and security workflows.
Hunt 2.0 adds threat-actor IOCs sourced from 200 research blogs, IP history and association tools, SQL and API capabilities, expanded enrichment, and C2-feed integrations for Cyware and OpenCTI.
DarkOwl analysts report that Telegram’s policy changes have reduced global-search results and led to channel removals. They have not observed a broader user migration, and say existing communities may still circulate invite links.
The roundup covers a Dutch server seizure linked to Zservers/XHost, cyber-espionage and spyware campaigns, EU sanctions and an arrest, and a joint advisory on Ghost ransomware activity across more than 70 countries.
A 2024 roundup covers arrests and operations targeting LockBit, Snowflake breach suspects, Scattered Spider members and botnet infrastructure, while noting that cybercriminal groups continue to operate.
A February roundup summarizes reports on Lazarus’s CookiePlus campaign, Star Blizzard phishing, a Treasury intrusion attributed to Silk Typhoon, malware activity and law-enforcement actions involving crypto mixers and LockBit.
A preview of Wiz’s 2025 Kubernetes security report says AKS clusters faced probing 18 minutes after deployment, while managed clusters used fewer unsupported Kubernetes versions and exposed workloads had fewer severe vulnerabilities and high-privilege pods.
DarkOwl analysts found inauguration-related discussion, mostly on Telegram and involving conspiracy theories, but identified no specific threats. Posts speculated about arrests, security, and the move indoors; one bomb-attack claim was based on a supposed vision, not’>
A roundup of December cybersecurity news covers international cybercrime operations, the seizure of the Rydox marketplace, cryptocurrency theft attributed to North Korean hackers, attacks on Romanian election systems, and HiatusRAT activity.
Huntress recaps its 2024 observations, including ScreenConnect exploitation, malware and ransomware activity, phishing, and attacks targeting human rights defenders, and points readers to its 2024 Cyber Threat Report.
Hunt.io reviews 2024 launches including a C2 feed, AttackCapture code search and HuntSQL, alongside research highlights on malware, phishing and attacker infrastructure.
A year-long international operation involving INTERPOL, Nigerian law enforcement and cybersecurity firms led to the arrest in Lagos of the alleged leader of the TMT/SilverTerrier phishing and BEC syndicate.
A 2019 operation involving Indonesian Cyber Police, INTERPOL and Group-IB led to three arrests over GetBilling JS-sniffer attacks that compromised nearly 200 e-commerce sites and stole shoppers’ payment and personal data.
Two INTERPOL-led operations in Nigeria resulted in 14 arrests linked to a BEC network, including suspected TMT gang members. Investigators tied the group to phishing, credential theft and fraud affecting tens of thousands of potential victims.
Team Cymru's 2024 Scout updates included Splunk and Palo Alto Networks Cortex integrations, refined search and Recon pivoting, and experimental AI-generated insight summaries for Scout users.
