Collaborate Disseminate
The encrypted vault backups stolen from the 2022 LastPass data breach have enabled bad actors to take advantage of weak master passwords to crack them open and drain cryptocurrency assets as recently as late 2025, according to new findings from TRM Lab… Continue reading LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds
Fortinet on Wednesday said it observed “recent abuse” of a five-year-old security flaw in FortiOS SSL VPN in the wild under certain configurations.
The vulnerability in question is CVE-2020-12812 (CVSS score: 5.2), an improper authentication vulnerabil… Continue reading Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a security flaw impacting Digiever DS-2105 Pro network video recorders (NVRs) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The vulne… Continue reading CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution
Cybersecurity researchers have discovered a new variant of a macOS information stealer called MacSync that’s delivered by means of a digitally signed, notarized Swift application masquerading as a messaging app installer to bypass Apple’s Gatekeeper ch… Continue reading New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper
The fraudulent investment scheme known as Nomani has witnessed an increase by 62%, according to data from ESET, as campaigns distributing the threat have also expanded beyond Facebook to include other social media platforms, such as YouTube.
The Slovak… Continue reading Nomani Investment Scam Surges 62% Using AI Deepfake Ads on Social Media
Every year, cybercriminals find new ways to steal money and data from businesses. Breaching a business network, extracting sensitive data, and selling it on the dark web has become a reliable payday.
But in 2025, the data breaches that affected small and medium-sized businesses (SMBs) challenged our perceived wisdom about exactly which types of businesses cybercriminals are targeting. Continue reading Attacks are Evolving: 3 Ways to Protect Your Business in 2026
The U.S. Securities and Exchange Commission (SEC) has filed charges against multiple companies for their alleged involvement in an elaborate cryptocurrency scam that swindled more than $14 million from retail investors.
The complaint charged crypto ass… Continue reading SEC Files Charges Over $14 Million Crypto Scam Using Fake AI-Themed Investment Tips
Apple has been fined €98.6 million ($116 million) by Italy’s antitrust authority after finding that the company’s App Tracking Transparency (ATT) privacy framework restricted App Store competition.
The Italian Competition Authority (Autorità Garante de… Continue reading Italy Fines Apple €98.6 Million Over ATT Rules Limiting App Store Competition
Cybersecurity researchers have discovered two malicious Google Chrome extensions with the same name and published by the same developer that come with capabilities to intercept traffic and capture user credentials.
The extensions are advertised as a “m… Continue reading Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites
A law enforcement operation coordinated by INTERPOL has led to the recovery of $3 million and the arrest of 574 suspects by authorities from 19 countries, amidst a continued crackdown on cybercrime networks in Africa.
The coordinated effort, named Oper… Continue reading INTERPOL Arrests 574 in Africa; Ukrainian Ransomware Affiliate Pleads Guilty