Collaborate Disseminate
Europol on Friday announced the arrest of 34 individuals in Spain who are alleged to be part of an international criminal organization called Black Axe.
As part of an operation conducted by the Spanish National Police, in coordination with the Bavarian… Continue reading Europol Arrests 34 Black Axe Members in Spain Over €5.9M Fraud and Organized Crime
Chinese-speaking threat actors are suspected to have leveraged a compromised SonicWall VPN appliance as an initial access vector to deploy a VMware ESXi exploit that may have been developed as far back as February 2024.
Cybersecurity firm Huntress, whi… Continue reading China-Linked Hackers Exploit VMware ESXi Zero-Days to Escape Virtual Machines
Russian state-sponsored threat actors have been linked to a fresh set of credential harvesting attacks targeting individuals associated with a Turkish energy and nuclear research agency, as well as staff affiliated with a European think tank and organi… Continue reading Russian APT28 Runs Credential-Stealing Campaign Targeting Energy and Policy Organizations
As organizations plan for 2026, cybersecurity predictions are everywhere. Yet many strategies are still shaped by headlines and speculation rather than evidence. The real challenge isn’t a lack of forecasts—it’s identifying which predictions reflect re… Continue reading Cybersecurity Predictions 2026: The Hype We Can Ignore (And the Risks We Can’t)
Trend Micro has released security updates to address multiple security vulnerabilities impacting on-premise versions of Apex Central for Windows, including a critical bug that could result in arbitrary code execution.
The vulnerability, tracked as CVE-… Continue reading Trend Micro Apex Central RCE Flaw Scores 9.8 CVSS in On-Prem Windows Versions
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday said it’s retiring 10 emergency directives (Eds) that were issued between 2019 and 2024.
The list of the directives now considered closed is as follows –
ED 19-01: Mitigate D… Continue reading CISA Retires 10 Emergency Cybersecurity Directives Issued Between 2019 and 2024
The U.S. Federal Bureau of Investigation (FBI) on Thursday released an advisory warning of North Korean state-sponsored threat actors leveraging malicious QR codes in spear-phishing campaigns targeting entities in the country.
“As of 2025, Kimsuky acto… Continue reading FBI Warns North Korean Hackers Using Malicious QR Codes in Spear-Phishing
Cybersecurity researchers have disclosed details of a new campaign that uses WhatsApp as a distribution vector for a Windows banking trojan called Astaroth in attacks targeting Brazil.
The campaign has been codenamed Boto Cor-de-Rosa by Acronis Threat … Continue reading WhatsApp Worm Spreads Astaroth Banking Trojan Across Brazil via Contact Auto-Messaging
A China-nexus threat actor known as UAT-7290 has been attributed to espionage-focused intrusions against entities in South Asia and Southeastern Europe.
The activity cluster, which has been active since at least 2022, primarily focuses on extensive tec… Continue reading China-Linked UAT-7290 Targets Telecoms with Linux Malware and ORB Nodes
The internet never stays quiet. Every week, new hacks, scams, and security problems show up somewhere.
This week’s stories show how fast attackers change their tricks, how small mistakes turn into big risks, and how the same old tools keep finding new … Continue reading ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More Stories