Researchers have discovered a new mobile scam that uses malicious JavaScript to redirect users to Chinese adult-content scams disguised as Progressive Web Apps (PWAs). The attack specifically targets mobile devices while filtering out desktop traffic, using PWAs to bypass standard security...
A global coalition of law enforcement agencies and tech companies successfully dismantled the Lumma malware-as-a-service infrastructure in May 2025, seizing over 2,300 domains and disrupting marketplaces where the malware was being rented. Microsoft identified nearly 400,000 infected Windo...
The "Meta Mirage" phishing campaign targets businesses using Meta's Business Suite, with over 14,000 malicious URLs identified. Attackers impersonate official Meta communications about policy violations or account suspensions, hosting fake pages on trusted cloud platforms to evade detectio...
A sophisticated phishing campaign distributing Horabot malware is targeting Windows users across Latin America, primarily in Mexico, Guatemala, Colombia, Peru, Chile, and Argentina. Discovered by Fortinet FortiGuard Labs in April 2025, the attack uses fake invoice emails to deliver malware...
The Australian Human Rights Commission reported a significant data breach exposing 670 sensitive documents online between April-May 2025. The breach compromised personal information including health data, religious affiliations, and contact details from complaint submissions and project do...
