Collaborate Disseminate
North Korean hackers ScarCruft shift from spying to ransomware, using VCD malware in phishing attacks, targeting South Korea… Continue reading North Korean Group ScarCruft Expands From Spying to Ransomware Attacks
A cyberattack on Bouygues Telecom exposed data for 6.4 million customers. Find out what information was compromised and… Continue reading Bouygues Telecom Hit by Cyberattack, 6.4 Million Customers Affected
AgentFlayer is a critical vulnerability in ChatGPT Connectors. Learn how this zero-click attack uses indirect prompt injection to… Continue reading AgentFlayer 0-click exploit abuses ChatGPT Connectors to Steal 3rd-party app data
A Nigerian man has been extradited from France to face hacking, identity theft, and fraud charges in the… Continue reading Nigerian man extradited from France to US over hacking and fraud allegations
Critical WinRAR flaw CVE-2025-8088 exploited by Russia-linked hackers to spread RomCom malware, update to version 7.13 now to… Continue reading WinRAR Zero-Day CVE-2025-8088 Exploited to Spread RomCom Malware
A new report by VulnCheck exposes a critical command injection flaw (CVE-2025-53652) in the Jenkins Git Parameter plugin.… Continue reading 15,000 Jenkins Servers at Risk from RCE Vulnerability (CVE-2025-53652)
A new, coordinated cybercrime campaign called “GreedyBear” has stolen over $1 million from crypto users. Learn how the group uses malicious extensions, malware, and fake websites in an industrial-scale attack uncovered by Koi Security. Continue reading GreedyBear: 40 Fake Crypto Wallet Extensions Found on Firefox Marketplace
Google confirms a data breach by ShinyHunters hackers, who used a vishing scam to access a Salesforce database with small business customer info. Continue reading Google Confirms Salesforce Data Breach by ShinyHunters via Vishing Scam
ShinyHunters breached Chanel’s US client database via Salesforce-linked access, exposing limited customer details through social engineering tactics. Continue reading ShinyHunters Target Chanel in Salesforce Linked Data Breach
Cybersecurity researchers demonstrate a new attack on Google Gemini AI for Workspace. Discover how a simple calendar invite can be used to perform phishing, steal emails, and even control home appliances. Continue reading New Promptware Attack Hijacks User’s Gemini AI Via Google Calendar Invite