Access Now calls on Paragon to answer for the use of its spyware in Italy against journalists, and to address oversight failures.

: With Tehran’s military weakened, digital retaliation likely, experts tell The Reg

'It's a high-stakes intelligence war' he told El Reg exclusive  A mystery whistleblower calling himself GangExposed has exposed key figures behind the Conti and Trickbot ransomware crews, publishing a trove of internal files and naming names.…

Sina Gholinejad admitted to using the Robbinhood ransomware variant to extort ransom payments from dozens of victims.

The company behind the Signal clone used by at least one Trump administration official was breached earlier this month. The hacker says they got in thanks to a basic misconfiguration.

The Socket Research team investigates a malicious Python package disguised as a Discord error logger that executes remote commands and exfiltrates dat...

Security leaders at Mandiant and Google Cloud say nearly every major company has hired or received applications from North Korean nationals working on behalf of the country’s regime.

CVE-2024-10442 allows unauthenticated RCE on Synology DS1823xs+ via Replication Service flaw. Patch now to avoid exploit risk.

Researchers say the behavior amounts to a persistent backdoor.

ESET researchers publish an analysis of Spellbinder, a lateral movement tool used to perform adversary-in-the-middle attacks.

Kremlin-backed hackers have tried sabotage attacks against critical infrastructure in the Netherlands, the country's Military Intelligence and Security Service said in its annual report.

Since early March 2025, Volexity has observed multiple suspected Russian threat actors conducting highly targeted social engineering operations aimed at gaining access to the Microsoft 365 (M365) acco...

Key Points Introduction NTLM (New Technology LAN Manager) is a suite of authentication protocols developed by Microsoft to verify user identities and protect the integrity and confidentiality of netwo...

: Beijing claims NSA went for gold in offensive cyber, got caught in the act

Key Findings While primarily a technique affiliated with cybercriminal actors, Proofpoint researchers discovered state-sponsored actors in multiple campaigns using the ClickFix social

This is the first time representatives for the spyware maker have publicly named its government customers.

After DHS did not renew its funding contract for reasons unspecified, MITRE’s 25-year-old Common Vulnerabilities and Exposures (CVE) program was slated for an abrupt shutdown on April 16, which would ...

FOR IMMEDIATE RELEASE April 16, 2025 CVE Foundation Launched to Secure the Future of the CVE Program [Bremerton, Washington] – The CVE Foundation has been formally established to ensure the long-term ...

Conservative critics have long accused the department of helping to censor the American right.

The BreachForums online hacker market is seized yet again, claimed by fellow hacktivst gang the Dark Storm Team, the same group who hacked Elon Musk's X in March.

After accessing the Security and Exchange Commission's nonpublic filings, hackers may have used the stolen data to pad their portfolios with tomorrow's hot stocks.

A lawsuit over the Trump administration’s infamous Houthi Signal group chat has revealed what steps departments took to preserve the messages—and how little they actually saved.

This is incalculable harm to coordination of infosec response; via Brian Krebs: MITRE has announced that its funding for the Common Vulnerabilities and Exposures (CVE) program and related programs,…

Check Point Research uncovers APT29 targeting European diplomatic entities with phishing attacks spreading malware Grapeloader

A collection of CTI stuffs - intel scraped from various sources - spmedia/CTI-Stuffs

American business services giant and government contractor Conduent disclosed today that client data was stolen in a January 2025 cyberattack.

Posted 3:27:09 AM. Netflix is one of the world's leading entertainment services, with 283 million paid memberships in…See this and similar jobs on LinkedIn.

Silent Push has discovered the evolving threat Scattered Spider is still hunting for victims in 2025, targeting brands and services.

A recent video posted to social media suggests that Ukrainian drones are now carrying various malware that is targeting Russian systems.