Scattered Spider's recent attacks on UK retailers highlight a threat actor that goes far beyond help desk scams. While social engineering support staff for credential resets has proven effective since 2022 against major targets like Caesars, MGM Resorts, and Transport for London, this is j...
Treasury sanctions Philippines-based Funnull Technology for supporting "pig butchering" scams that cost Americans over $200 million. The company provided infrastructure for hundreds of thousands of malicious websites, using domain generation algorithms and rapid IP switching to evade detec...
LexisNexis Risk Solutions reported a security breach affecting over 364,000 individuals when attackers used a compromised account to steal data from GitHub on December 25, 2024. Exposed information included names, contact details, Social Security numbers, driver's license numbers, and birt...
A financially motivated threat actor called Mimo is exploiting CVE-2025-32432, a critical RCE vulnerability in Craft CMS, to deploy cryptojacking operations. After gaining access through the vulnerability, attackers install a web shell that downloads a malicious script, which removes compe...
Security researchers have discovered multiple campaigns targeting developers through malicious npm packages and VS Code extensions. Socket identified 60 npm packages that collect system data and send it to Discord webhooks, while another set of eight packages disguised as framework helpers...
