Law enforcement agencies have dismantled the Diskstation ransomware group, a Romanian cybercriminal gang responsible for crippling the operations of multiple companies in Italy by encrypting their systems and demanding ransom payments. The international operation—codenamed "Operation Elicius"—was led by Europol, with support from police forces in France
North Korean hackers have uploaded 67 malicious packages to the npm registry, spreading a new malware loader dubbed XORIndex. According to cybersecurity firm Socket, these packages were downloaded over 17,000 times before being discovered and taken down. The operation is part of an ongoing campaign known as Contagious Interview,
The UK’s National Crime Agency (NCA) has arrested four individuals suspected of carrying out cyberattacks against prominent British retailers, including Marks & Spencer, Co-op, and Harrods. The suspects—two 19-year-old men, a 17-year-old minor, and a 20-year-old woman—were detained in coordinated operations across London and the West Midlands.
The ransomware group Interlock is deploying a Remote Access Trojan (RAT) via compromised websites, using a novel social engineering method known as FileFix for malware delivery. ClickFix Attacks: A Growing Threat FileFix is a variant of the broader ClickFix attack technique, which leverages social engineering to trick victims into infecting
In 2012, independent cybersecurity researcher Neil Smith uncovered a critical flaw in a railroad communication protocol and reported it to the U.S. government. His warnings, however, were largely ignored for over a decade. That changed last week, when the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an
Multiple Gigabyte motherboard models are shipping with vulnerable UEFI firmware, exposing users to stealthy bootkit malware that operates below the operating system and is invisible to traditional security tools. The flaws allow attackers with local or remote administrative privileges to execute arbitrary code in System Management Mode (SMM)—a highly
Attackers began exploiting a critical vulnerability in Wing FTP Server just one day after technical details about the flaw were made public. The vulnerability, tracked as CVE-2025-47812, received the maximum CVSS severity score of 10.0. It stems from a combination of a null byte injection and Lua code execution,
Researchers from AG Security Research have uncovered serious vulnerabilities in eSIM technology, affecting billions of devices worldwide. The flaw lies in the eUICC software package developed by Kigen, a key player in the embedded SIM ecosystem. The Rise of eSIM—and Its Security Risks Embedded SIM cards (eSIMs) are rapidly
The Federal Bureau of Investigation (FBI) has seized the domain names of several websites tied to game piracy, including the long-targeted NSW2U[.]com, a site that Nintendo has been battling for years. According to TorrentFreak, the operation was carried out in cooperation with international law enforcement, including the Fiscal Information
Google Gemini for Workspace can be tricked into generating legitimate-looking email summaries that include malicious instructions, effectively redirecting users to phishing websites. This attack leverages hidden prompt injections embedded in emails—commands that Gemini unknowingly follows when summarizing messages. How the Attack Works Marco Figueroa, cybersecurity expert and manager of
Nvidia is urging users to enable System-Level Error-Correcting Code (ECC) after researchers demonstrated that GDDR6 memory in its GPUs is vulnerable to a variant of the infamous Rowhammer attack. “The risk of a successful Rowhammer exploit depends on the DRAM model, platform, architectural specifics, and system settings,” the company stated.
The popular WordPress plugin Gravity Forms has become the latest victim of a supply chain attack, with official installers from its website found to be infected with a dangerous backdoor. Gravity Forms is a premium plugin used to build contact forms, payment forms, and a wide range of other user-input