Russian-Linked Actors Target Accounts With Device Code Phishing Tactic

Microsoft categorizes the emerging threat group behind an ongoing campaign as Storm-2372, which is a suspected nation-state actor “working toward Russian state interests.”

Exploits Hit Palo Alto CVE-2025-0108

Palo Alto disclosed the bug on Feb. 12 and released updated software to address it

Russian Hackers Expand Global Cyber Espionage Campaign with "BadPilot" Operation

Microsoft revealed a multiyear cyber espionage campaign by Russian state-sponsored hackers. The operation has exploited critical infrastructure worldwide.

New PostgreSQL Zero Day Found as Part of BeyondTrust Investigation

Massive Carding Marketplace "Savastan0" Selling Over 15 Million Stolen Credit Cards

An underground carding marketplace sells over 15 million stolen credit and debit cards. Researchers reveal its operations and the growing scale of card fraud.

Ivanti Patches Critical Bugs in Multiple Products

The flaws affect Connect Secure, Policy Secure, Secure Access Client, and Cloud Services Application

Hackers Use Google Tag Manager to Inject Credit Card Skimmers in E-Commerce Stores

Malware campaign abusing GTM to inject credit card skimmers into e-commerce sites. Obfuscated JavaScript stealing payment data, along with a hidden PHP backdoor for persistent access.

Alabama Man Pleads Guilty to SEC Twitter Account Hack

Eric Council Jr., 25, who was arrested in October 2024, pleaded guilty to conspiracy to commit aggravated identity theft and access device fraud

Global Law Enforcement Operation Targets 8Base Ransomware Leak Site

The dark web leak site of the 8base, a ransomware group that deploys a variant of the Phobos ransomware, has been seized.

Exploits Target Office CVE-2024-21413 Flaw Microsoft Patched a Year Ago

The flaw can lead to remote code execution

🎓️ Vulnerable U | #102

Musk's DOGE agents accessing sensitive info, Medical device backdoors, North Korean MacOS malware, Cisco and Zyxel vulnerabilities, and much more!