The U.S. Department of the Treasury has announced new sanctions against Iranian cyber actors accused of carrying out attacks against American critical infrastructure and stealing sensitive information. The action is part of a wider U.S. campaign called Operation Economic Outcast, which is designed to put financial pressure on Iran and disrupt networks supporting the Iranian … Continued
Norway’s shared government digital infrastructure has been hit by a major Distributed Denial-of-Service (DDoS) attack, causing problems across several important public services. The attack began at around 3:38 a.m. CEST on Monday, August 24, and continued into Tuesday. Norway’s Digitalisation Agency, known as Digdir, confirmed that its systems were being targeted. The agency works with … Continued
Cybersecurity researchers have identified two malware families, WordlistLoader and SynkLoader, being used in separate attack campaigns against Windows users. WordlistLoader is linked to ClearFake attacks and is mainly used to deliver Amatera Stealer, also known as ACR Stealer or AcridRain Stealer. At the same time, SynkLoader is being distributed through Microsoft Teams phishing campaigns to … Continued
South Korea’s government-backed startup support platform, “Everyone’s Startup,” suffered a data breach that exposed sensitive information belonging to about 5,000 successful applicants. The platform is operated under the Ministry of SMEs and Startups and is used for a nationwide startup support program. The leaked information included applicants’ email addresses, review comments, and summaries of their … Continued
More than 9,300 Amazon Web Services (AWS) access keys that were publicly exposed between August 2022 and August 2026 are still active and valid, according to research tracked by Truffle Security. The findings show that exposed cloud credentials are remaining usable for years after they first become public. Out of the exposed keys, 817 were … Continued
A new Android malware campaign has been discovered targeting car head units, the systems used for entertainment, navigation, and some vehicle-related functions. Kaspersky researchers identified the threat while monitoring Android attacks in June 2026. The malware is notable because it was delivered through the built-in software updater of affected Android-based automotive head units. Researchers described … Continued
The Pakistan-based cyber espionage group known as Transparent Tribe, or APT 36, has upgraded its digital toolset to launch targeted cyberattacks against major institutions in Afghanistan. Cybersecurity analysts have tracked this active group for years due to its persistent monitoring of neighboring nations. The latest intelligence reports reveal that the hackers are now using updated … Continued
Grandoreiro, a banking Trojan that has been active for years, has resurfaced with a new campaign targeting banking users in Mexico. The latest activity shows that the malware is still a serious threat even after law enforcement disrupted parts of its operation. Security researchers found that the campaign is using updated techniques designed to make … Continued
Hackers are using a sophisticated phishing-as-a-service platform called Mirage2FA to target Microsoft 365 users and steal authenticated sessions even after victims successfully complete multi-factor authentication (MFA). Researchers at ANY.RUN found that the Adversary-in-the-Middle (AiTM) framework has generated thousands of potential compromise events from late 2024 through 2026. Instead of directly breaking MFA, the attackers wait … Continued
Cybersecurity researchers at Hunt.io have uncovered a campaign that compromised more than 14,530 Dahua devices between June 17 and July 22, 2026. The campaign, tracked as Operation CameraSwarm, used credential attacks, authentication bypasses, and Dahua’s peer-to-peer (P2P) system. Researchers discovered an exposed 407 MB working directory containing tools, logs, target lists, and other campaign data. … Continued
