North Korean APT Kimsuky is evolving its ClickFix tactics, using deceptive social engineering, fake job portals, and obfuscated PowerShell to compromise targets via spear-phishing campaigns.
A critical flaw (CVE-2025-6543, CVSS 9.2) in NetScaler ADC/Gateway is actively exploited for DoS. Over 2,100 unpatched appliances remain susceptible. Update immediately!
CISA, FBI, NSA, and DC3 warn of potential cyberattacks from Iranian-affiliated actors on vulnerable U.S. infrastructure and networks, urging vigilance despite recent ceasefires.
Proofpoint reveals two Russian threat clusters (TA829 & UNK_GreenSec) blending financial cybercrime with state-aligned espionage, using RomCom and TransferLoader malware.
The DOJ dismantled a North Korean scheme exploiting remote IT jobs at 100+ U.S. firms, using stolen identities and laundering millions to fund DPRK weapons programs.
Microsoft exposes North Korea’s Jasper Sleet (Storm-0287) using AI-enhanced deepfakes and fake personas to secure remote IT jobs at 300+ US firms, funding the DPRK regime and stealing data.
The DOJ dismantled a North Korean scheme exploiting remote IT jobs at 100+ U.S. firms, using stolen identities and laundering millions to fund DPRK weapons programs.
Trustwave exposes Blind Eagle (APT-C-36) leveraging exposed infrastructure and VBS malware in phishing campaigns, targeting Colombian banks with blatant disregard for concealment.
Google has urgently patched a high-severity zero-day (CVE-2025-6554) in Chrome's V8 JavaScript engine. This type confusion flaw is actively exploited in the wild, risking RCE.
Europol and allies arrested 5, dismantling a global crypto investment fraud ring that laundered €460M from 5,000+ victims, exploiting Hong Kong banking networks.
Android 16 introduces new "Mobile Network Security" features, including network alerts and 2G protection, to detect and counter Stingray devices, requiring IRadio HAL 3.0 modem support.
Donald Trump announced a "very wealthy" buyer for TikTok's US operations, with details expected in two weeks. The deal likely needs Chinese approval to avoid a ban.
Russia has begun systematically blocking Cloudflare, throttling internet connections to 16KB after the initial download, impacting vast numbers of websites and other major hosting providers.
Microsoft's active Windows device count has reportedly dropped by 400 million in three years, from 1.4 billion (2022) to just over 1 billion, signaling a shrinking user base.
Canada has ordered Hikvision to shut down nationwide, citing national security concerns. The ban prohibits government use of its products, but Hikvision calls it baseless and biased.
A six-day RansomHub attack exploited RDP, used Atera/Splashtop RMM, Mimikatz, and Rclone to breach an enterprise, exfiltrate data, and deploy ransomware.
Mark Gurman hints Apple's next wearable could be the "Apple Ring," a subtle smart ring for health tracking, gestures, and longer battery life, complementing the Apple Watch.
Microsoft's claim that Windows 11 PCs are 2.3x faster than Windows 10 PCs is critiqued as misleading, stemming from a comparison of new hardware vs. old, not the OS itself.
Apple's iOS 26 will introduce automatic synchronization of public Wi-Fi logins across all Apple devices, simplifying connectivity for users on captive networks.