SafePal Data Breach: Authorization Flaw Exposes Data of Nearly 40,000 Customers
SafePal, a hardware wallet maker, has disclosed an authorization flaw in an order-tracking plug-in that exposed the personal information of approximately 39,798…
Tag: phishing
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More Ravie LakshmananAug 17, 2026Cybersecurity / Hacking The expensive attacks…
CTM360 Uncovers 3,000+ Recruitment Phishing URLs Using Browser-in-the-Browser Credential Traps
Cybersecurity researchers at CTM360 have exposed a large-scale, global recruitment-themed phishing campaign that leverages Browser-in-the-Browser (BitB) windows to steal Google and Facebook…
Facebook Credentials Targeted in RecruitTrap Phishing
The RecruitTrap campaign also targets Facebook credentials through fake authentication popups, enabling account takeover and potential access to advertising platforms.
Trump Memo Authorizes U.S. Firms to Hack and Disrupt Foreign Crime Groups
A new White House memo signed by U.S. President Donald Trump directs the National Coordination Center (NCC) to establish a program allowing…
Transnational Criminal Organizations (TCOs) Targeted by New U.S. Offensive Cyber Program
Transnational Criminal Organizations (TCOs) are foreign groups that conduct cyber-enabled crimes such as ransomware, phishing, financial fraud, sextortion, and pig butchering scams…
WindRelay Android Malware Turns Phones into NFC Relays for Payment Fraud
Cybersecurity researchers at Group-IB have uncovered a new Android malware family called WindRelay that turns victims' smartphones into NFC relays for contactless…
Enveil: Data Security Company Impersonated in Attacks
Enveil is a data security company that was impersonated by Lazarus Group. Attackers created fake websites mimicking Enveil to distribute a trojanized…
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks Ravie LakshmananAug 11, 2026Ransomware / Threat Intelligence Cybersecurity and intelligence agencies…
Kimsuky Builds Offline AI Stack to Boost Phishing and Malware Operations
North Korea's Kimsuky hacking group, operating under the Reconnaissance General Bureau, has been assembling an offline artificial intelligence (AI) stack on its…