Collaborate Disseminate
Cybersecurity researcher Jeremiah Fowler discovered a massive 10.7TB ClaimPix leak exposing 5.1M customer files, vehicle data, and Power of Attorney documents. Read the full details. Continue reading US Auto Insurance Platform ClaimPix Leaked 10.7TB of Records Online
Microsoft Threat Intelligence detected a new AI-powered phishing campaign using LLMs to hide malicious code inside SVG files disguised as business dashboards. Continue reading Microsoft Flags AI Phishing Attack Hiding in SVG Files
Dutch authorities arrest two teens recruited by pro-Russian hackers for spying missions. Learn how Russia is using disposable agents for sabotage across Europe. Continue reading Dutch Teens Arrested Over Alleged Spying for Pro-Russian Hackers
Luxury retailer Harrods confirms 430,000 customer records (names, contacts) were stolen from a third-party provider in the latest UK retail cyberattack wave. Continue reading Harrods Data Breach: 430,000 Customer Records Stolen Via Third-Party Attack
eSentire TRU analyses the new DarkCloud V4.2 infostealer, rewritten in VB6. Find out how the malware steals browser data, crypto, and contacts via targeted phishing. Continue reading DarkCloud Infostealer Relaunched to Grab Credentials, Crypto and Contacts
Hackers are sending fake invoice emails with malicious Office files that install the XWorm RAT on Windows systems, allowing full remote access and data theft. Learn how the shellcode and process injection are used to steal data, and how to stay safe fr… Continue reading Hackers Use Fake Invoices to Spread XWorm RAT via Office Files
Bitdefender warns that the TradingView Premium ad scam now targets Google ads and YouTube, hijacking verified channels to spread spyware. Continue reading Google Ads Used to Spread Trojan Disguised as TradingView Premium
FortiGuard Labs exposes a high-severity phishing campaign impersonating the National Police of Ukraine to deliver Amatera Stealer (data theft) and PureMiner (cryptojacking) to Windows PCs. Continue reading Fake Ukraine Police Notices Spread New Amatera Stealer and PureMiner
New Lone None Stealer uses Telegram C2 and DLL side-loading to grab passwords, credit cards, and crypto. Find out how to spot this highly evasive phishing scam. Continue reading Vietnamese Hackers Use Fake Copyright Notices to Spread Lone None Stealer
Cybersecurity firm Noma Security reveals ForcedLeak, a critical flaw in Salesforce Agentforce that allowed data theft. Learn what companies need to do now to secure AI agents. Continue reading ForcedLeak Flaw in Salesforce Agentforce AI Agent Exposed CRM Data