Spanish authorities arrested a notorious hacker using the nickname Alcasec for involvement in a cybercriminal network. The former Secretary of State for Security was also detained for cyberattacks on national…

The renowned clothing and lingerie retailer may have been the target of a ransomware attack. Victoria’s Secret took its official website offline following an acknowledged cybersecurity incident. Even some in-store…

PRC-based actor APT41 was seen misusing cloud services for C2 communications. A compromised official website was leveraged for distributing spear phishing emails. The exploited government site was used to target…

A newly identified malicious campaign is targeting WordPress users on Windows with malware. The pop-up simulates a genuine Java update, complete with localized text, a progress bar, and a download…

An Iranian individual targeted governments, healthcare, and corporations across the U.S. with Robbinhood malware. These coordinated attacks resulted in tens of millions in losses and widespread disruption of essential public…

Threat actor UNC6032 leverages the popularity of AI video-generation tools Luma, Canva, and Kling. Whatever the prompt, the user receives an archive containing malware, ultimately installing XWorm and more. An…

Russia-affiliated Void Blizzard APT is sending fake European Defense & Security Summit emails. The phishing campaign relies on PDF attachments that redirect to the attackers’ infrastructure. Void Blizzard’s operations have…