⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
CTM360's RecruitTrap report reveals a large-scale phishing campaign that uses fake interview scheduling pages and Browser-in-the-Browser (BitB) windows to steal Google and Facebook credentials, and in advanced cases, relay multi-factor authentication (MFA) prompts in real time. The attack begins with unsolicited emails or meeting invitations impersonating real recruiters from over 50 organizations across 14 sectors, directing victims to counterfeit Calendly-style pages or brand-specific recruitment portals.
RingCentral is responding to a data breach that exposed personal information of 1.6 million accounts, with the ShinyHunters extortion group claiming responsibility for the July intrusion. Have I Been Pwned is helping notify affected users of the stolen data.
Apple has issued fresh warnings to users in 110 countries who may be targeted by mercenary spyware, part of an ongoing effort since 2021 that has now reached over 150 countries. The company describes these as some of the most advanced digital threats, typically aimed at high-profile individuals such as journalists, activists, politicians, and diplomats.
A new White House memorandum signed by President Donald Trump directs the National Coordination Center (NCC) to establish a program within 60 days that authorizes vetted U.S. private sector companies to conduct offensive cyber operations against foreign Transnational Criminal Organizations (TCOs). The program permits two types of operations: cyber surveillance (unauthorized access to sensitive data) and cyber effects (disruption, denial, degradation, or destruction of information systems, networks, or infrastructure).
Kaspersky researchers detail a major evolution of the CoolClient backdoor used by the HoneyMyte APT group, which now includes a signed kernel-mode driver that acts as a rootkit. The driver hides malicious processes, files, and registry entries and communicates with the user-mode backdoor through IOCTL requests.
A former data analyst contractor for Brightly Software was sentenced to two years in prison for stealing company data and attempting to extort $2.5 million from his employer. The case highlights the significant risk posed by insider threats, especially from contractors with privileged access.