A previously undocumented, Asia-linked cyber-espionage group has breached at least 70 government and critical infrastructure organizations across 37 countries, according to new research from Palo Alto Networks Unit 42. The activity, tracked as TGR-STA-1030, has been ongoing since January 2024 and includes reconnaissance targeting government infrastructure in 155 countries during late 2025. Investigators say the … Continued
Cybersecurity researchers have uncovered a large-scale attack campaign where hackers are abusing NGINX web server configurations to secretly hijack real user traffic. Instead of breaking websites or installing visible malware, the attackers quietly change server settings. This allows them to control where website traffic goes without alerting site owners or users. Because NGINX is widely … Continued
A ransomware group named DragonForce has started behaving very differently from other cybercriminal gangs. Instead of operating quietly or competing with rivals, the group is trying to take control of the ransomware ecosystem. Security researchers say DragonForce wants to act like a central authority, similar to how crime bosses run organized cartels. This unusual move … Continued
A recent cybersecurity incident has revealed how artificial intelligence can dramatically speed up cloud attacks. In this case, attackers gained full administrative access to an Amazon Web Services environment in only eight minutes. The incident was documented by cloud security researchers who closely examined the attack timeline. The speed of the breach has raised serious … Continued
A serious security flaw was recently discovered in Microsoft Office, and hackers moved extremely fast to exploit it. Within just three days of Microsoft releasing a fix, Russian-linked cyber attackers began using the bug in real-world attacks. This incident highlights how quickly cyber threats can evolve once a vulnerability becomes public. It also shows the … Continued
Notepad++, a widely used open-source text editor, was recently affected by a serious cybersecurity incident. Investigators confirmed that the attack targeted the hosting infrastructure used to distribute software updates. The breach has been linked to a China-associated hacking group known as Lotus Blossom. The software itself was not exploited directly. The attack took place over … Continued
Mozilla has announced a new update for its Firefox browser that gives users more control over generative AI features. With the upcoming Firefox 148 release, users will be able to turn off all AI-powered tools using a single click. This change is aimed at people who prefer a simple and distraction-free browsing experience. The update … Continued
Cybersecurity researchers have reported a serious incident involving eScan antivirus software, where attackers compromised one of its update servers. Instead of sending a normal security update, the server delivered malicious files to users. This type of attack is known as a supply-chain attack and is considered highly dangerous. The issue came to light after abnormal … Continued
A serious supply-chain attack has been uncovered on the Open VSX extension registry, a platform widely used by developers to download and manage coding extensions. In this incident, attackers compromised a legitimate developer account and used it to publish malicious updates. The attack relied on abusing existing trust rather than exploiting the platform itself. This … Continued
SmarterTools has released an urgent security update for its SmarterMail email server after fixing a serious vulnerability rated 9.3 on the CVSS scale. The flaw was classified as critical because it could allow attackers to take full control of affected servers. Security experts warned that the issue posed a major risk to exposed systems. The … Continued
