Collaborate Disseminate
ShinyHunters breached Instructure and Vimeo, exposing millions of student and user records through direct and supply chain attacks. Continue reading ShinyHunters’ Instructure Canvas LMS and Vimeo Breaches Impact Millions of Users
DataDome researchers uncovered a massive low and slow DDoS attack that delivered 2.45 billion requests using 1.2 million IP addresses. Continue reading Massive “Low and Slow” DDoS Attack Hits Platform With 2.45 Billion in 5 Hours
An anti-ICE website, GTFO ICE, linked to Miles Taylor, is accused of exposing the personal details of 17,662 activists, sparking concerns that the data may have reached government agencies. Continue reading Anti-ICE Site GTFO ICE Accused of Exposing Data of 17,000+ Activists
A massive fraud network called FEMITBOT uses Telegram Mini Apps and fake brand names like Apple, Disney, and… Continue reading FEMITBOT Network Abuses Telegram Mini Apps for Crypto Scams and Android Malware
VECT 2.0 ransomware contains fatal flaws that permanently destroy files, making recovery impossible and rendering ransom payments useless for victims worldwide. Continue reading Paying Ransom Won’t Help as VECT 2.0 Ransomware Destroys Data Irreversibly
Scammers are abusing Google AppSheet and Google Drive to bypass security filters and steal thousands of Facebook Business accounts globally. Continue reading Google AppSheet Exploited in 30,000-User Facebook Phishing Operation
Two US cybersecurity experts jailed for aiding BlackCat ransomware group, extorting victims worldwide and exploiting insider access for profit. Continue reading 2 US Cybersecurity Experts Jailed for Aiding ALPHV (BlackCat) Ransomware
SOCRadar researchers have uncovered a massive Chinese cybercrime operation using the OpenClaw and Paperclip systems to automate global attacks. Continue reading 45,000 Attacks, 5,300+ Backdoors Tied to China-Linked Cybercrime Operation
A new campaign shows misconfigured Jenkins servers abused to deploy a DDoS botnet targeting gaming systems, with Valve Corporation infrastructure in focus. Continue reading Hackers Use Jenkins Access to Deploy DDoS Botnet Against Gaming Servers
A critical cPanel vulnerability lets attackers bypass login and gain root access, with active exploitation reported before patches were released. Continue reading Critical cPanel Vulnerability Lets Attackers Bypass Login, Gain Root Access