Collaborate Disseminate
FBI agents arrested a Florida man accused of spreading Steam game malware that stole $220,000 in crypto, including $32,000 from a terminally ill cancer patient. Continue reading FBI Arrests Florida Man in $220,000 Steam Crypto Theft Case
An email that appears to contain a shipping document, payment request, or business proposal can infect a Windows… Continue reading “TTF Trap” Phishing Emails Use Fake Font Files to Deliver Windows Malware
Nearly two years after a cyberattack disrupted Transport for London’s (TfL) online services and exposed customer data, two… Continue reading Two Scattered Spider Members Sentenced to 5.6 Years Over TfL Cyberattack
Kaspersky says OkoBot targets crypto users through fake software, stealing wallet files, seed phrases and passwords while recording activity inside wallet apps. Continue reading OkoBot Malware Uses ClickFix, Hidden Browser Extensions to Steal Crypto Data
Group-IB says scammers are targeting Céline Dion fans through Facebook, duplicate digital tickets and fake websites impersonating Ticketmaster, AXS and the venue site. Continue reading Fake Céline Dion Paris Tickets Sold on Facebook and Ticketmaster Clones
A one-click Claude Desktop flaw allowed attackers to submit concealed instructions without review, exposing chats and enabling code execution on some systems remotely. Continue reading PromptFiction Flaw Auto-Submitted Hidden Prompts in Claude Desktop
Microsoft’s July 2026 Patch Tuesday fixes 622 CVEs, including exploited AD FS and SharePoint flaws, plus the disclosed BitLocker bypass requiring urgent action. Continue reading Microsoft’s July 2026 Patch Tuesday fixes 622 flaws and 2 exploited zero-days
Telegram’s t.me links stopped resolving after the .ME registry applied serverHold. The app still works, while the reason for the domain action remains unknown. Continue reading Telegram’s t.me Links Go Offline After Registry Places Domain on serverHold
Telegram’s t.me links stopped resolving after the .ME registry applied serverHold. The app still works, while the reason for the domain action remains unknown. Continue reading Telegram’s t.me Links Go Offline After Registry Places Domain on serverHold
Proofpoint details how attackers spoof OAuth client IDs to probe Microsoft Entra accounts, test credentials and bypass common sign-in detections at cloud scale. Continue reading Millions of Microsoft Entra Accounts Targeted in OAuth Client ID Spoofing Campaigns