Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations, offering to delete stolen data from ransomware groups' servers in exchange for fees ranging from $20,000 to $60,000. This behavior is anomalous because cybersecurity firms typically only reach out after an attack becomes public knowledge.
In Part 4 , we stole every document from every index, planted a rogue superuser account, created credential-independent API keys, and planted three persistence mechanisms that survive password rotations. Everything was logged.
The affected ministries — one responsible for urban development, construction and housing, and the other for mobility, transport, climate protection and the environment — have been isolated from government networks since Friday as a precaution.
The University of Texas at San Antonio, which serves 40,000 students across six campuses, said its IT team identified threat activity on its academic campus over the weekend and took some systems, including phones, offline in response.
Gen Threat Labs has identified WordlistLoader, a new loader used to deliver Amatera Stealer via ClearFake campaigns. Amatera has been actively developed over the past few months and has gradually become one of the most prevalent infostealers in the Gen user base.
Apple has released security updates for more than two dozen security vulnerabilities across iPhone, iPad, and macOS Tahoe, including yet another image parsing vulnerability that could compromise user devices. This update delivers security fixes that were first made available in the iOS 27 and iPadOS 27 betas.